Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/ITMMir01DvZHJ6lQkhE-gsdLB1I.roa
File:                     ITMMir01DvZHJ6lQkhE-gsdLB1I.roa (raw, json)
Hash identifier:          b1ey4OgxhrhpXJDWkiB3bzD74HvJRhFS8I+WAgDDpII=
Subject key identifier:   21:33:0C:8A:BD:35:0E:F6:47:27:A9:50:92:11:3E:82:C7:4B:07:52
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       65
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/ITMMir01DvZHJ6lQkhE-gsdLB1I.roa
Signing time:             Wed 01 Sep 2021 01:30:22 +0000
ROA not before:           Wed 01 Sep 2021 01:30:22 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        27.133.128.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:22 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=21330C8ABD350EF64727A95092113E82C74B0752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:78:12:00:a9:de:31:76:c4:2e:50:83:f6:
                    a3:4b:77:26:ee:c4:d8:2b:01:05:11:2f:a0:21:fe:
                    3c:3b:01:d9:ca:2d:74:60:db:70:6f:4e:40:cd:60:
                    05:bb:38:5c:a3:47:4c:03:50:22:40:79:3e:ee:66:
                    b5:63:95:df:78:e6:bf:48:c6:16:76:de:72:03:35:
                    e1:2d:67:ac:ec:a3:00:c6:ea:19:5b:ad:a4:c8:b2:
                    46:17:85:29:76:e9:6a:a3:0c:e1:d0:cc:e1:19:ba:
                    63:33:1f:48:5e:e3:da:d3:fd:2e:e5:c3:3c:76:06:
                    c2:40:db:5a:dc:38:40:ab:2b:b9:e5:2c:0f:5f:b5:
                    fd:ca:f4:62:f0:78:41:5c:cb:bf:32:01:29:6b:43:
                    0d:42:bc:7f:4a:85:fd:85:d4:cd:e0:17:40:c5:ad:
                    42:9c:4f:30:a0:87:3c:9a:2c:08:ea:09:fa:00:bc:
                    c1:e0:69:ac:65:a3:3d:cc:1e:85:55:5e:01:7f:db:
                    f7:50:31:86:ea:99:65:6a:65:af:d9:78:53:38:58:
                    32:6a:8d:a3:4b:a7:d2:cf:65:ea:24:34:f2:98:77:
                    a2:0e:a7:9a:03:b2:f0:97:51:5f:a4:dc:54:9c:07:
                    9c:f0:89:46:61:d6:be:c8:9c:90:d7:ab:0c:63:5a:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:0C:8A:BD:35:0E:F6:47:27:A9:50:92:11:3E:82:C7:4B:07:52
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/ITMMir01DvZHJ6lQkhE-gsdLB1I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:80:df:ef:e9:bf:52:6e:f6:ee:e4:c3:f9:60:71:31:6a:33:
         8f:20:45:1e:9e:af:df:22:f7:7d:7f:a3:13:d7:df:c1:f1:26:
         88:42:66:cd:e4:bb:50:4f:ec:86:73:da:69:fc:ed:31:d2:a8:
         36:ca:e8:d7:3e:a0:a0:cf:d9:22:86:6d:a5:e7:2e:3c:72:59:
         81:61:0f:24:db:40:34:23:f5:04:ca:ce:0e:3a:a5:94:e2:f0:
         25:1a:d8:f2:28:09:be:e8:6b:5b:44:70:9e:b8:96:11:c9:4d:
         80:01:ce:47:59:9b:98:b5:58:89:14:66:77:ab:98:e7:0a:40:
         32:29:2f:9c:be:1b:3e:ab:60:91:73:11:eb:d7:54:ee:fa:5b:
         53:f4:62:c6:b6:da:f7:83:03:26:af:a1:87:a1:10:f1:97:a0:
         61:e3:d1:fd:02:e6:ae:c6:96:c9:ba:15:24:57:d5:0b:23:14:
         93:3a:50:bc:ec:a3:9e:df:09:f0:b3:6d:9a:12:b6:b3:a4:fe:
         a4:d4:9a:78:b7:a6:89:59:2d:f6:3b:59:96:3e:da:e7:e7:96:
         ea:d9:95:1f:98:cb:ca:0a:0e:7a:6d:94:85:db:c4:12:4b:bd:
         b3:91:b0:23:b7:a0:9e:37:15:c1:57:27:7a:83:87:9e:72:ca:
         23:c4:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:55 2025 by rpki-client