Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/6asq-r3SZLJtXX5MGvSVwRHPx_w.roa
File:                     6asq-r3SZLJtXX5MGvSVwRHPx_w.roa (raw, json)
Hash identifier:          +E5Y74DWyEdgE8RRsU8HjYHeUO4K8kSAgzVIBVWsc1w=
Subject key identifier:   E9:AB:2A:FA:BD:D2:64:B2:6D:5D:7E:4C:1A:F4:95:C1:11:CF:C7:FC
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       4B
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/6asq-r3SZLJtXX5MGvSVwRHPx_w.roa
Signing time:             Sat 01 Apr 2023 01:29:55 +0000
ROA not before:           Sat 01 Apr 2023 01:29:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        219.100.64.0/22 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E9AB2AFABDD264B26D5D7E4C1AF495C111CFC7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:1a:f5:ec:16:5a:22:03:34:d2:41:52:08:
                    57:ef:e6:19:3f:14:8f:9b:31:76:24:a3:f1:85:95:
                    f7:92:48:62:c8:a0:60:73:83:53:29:7c:53:31:8c:
                    b9:7d:f3:35:09:04:18:35:f0:4d:45:61:9c:b4:97:
                    c7:a7:a0:30:7a:14:dc:f4:78:5c:9d:20:96:b9:ae:
                    9f:ab:43:21:37:76:7f:72:66:5b:5e:cb:7a:39:90:
                    fd:d1:e4:64:b4:a9:2a:4b:04:58:fc:2e:51:4e:7a:
                    ee:6f:ff:91:cd:06:a0:b7:c3:a2:af:f5:6a:6c:54:
                    cf:82:50:da:67:eb:c2:e9:62:57:6e:50:ba:ce:63:
                    dc:20:7c:4b:c0:ea:de:e1:cc:71:a4:1d:71:30:bb:
                    f1:49:81:3e:09:ac:0f:85:d5:cb:b2:52:49:7a:7e:
                    65:ac:6b:df:6d:07:78:34:aa:7c:c2:75:19:fd:7e:
                    6e:61:96:34:70:5e:84:0c:41:44:be:ca:38:ac:dc:
                    b2:12:70:5c:9c:63:e6:1f:e9:a2:64:4e:0c:66:93:
                    a9:bc:d3:6c:27:05:df:1c:97:f0:05:06:24:71:72:
                    34:a8:41:b6:e0:33:36:18:58:3e:23:de:8e:78:72:
                    a6:37:cd:67:7d:c2:56:c3:55:0c:5c:b1:26:47:72:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:2A:FA:BD:D2:64:B2:6D:5D:7E:4C:1A:F4:95:C1:11:CF:C7:FC
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/6asq-r3SZLJtXX5MGvSVwRHPx_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:05:6e:8b:b5:39:18:97:c0:80:98:85:da:9b:6d:88:34:
         ab:b7:e5:f4:7e:87:86:43:55:c9:a5:9c:4b:76:98:e0:61:a8:
         7f:8f:9c:f2:7f:7e:38:fc:a2:5c:9d:8b:3e:92:e4:4e:19:77:
         5b:51:55:e2:aa:1c:d3:c0:f5:27:0f:0a:75:25:e0:a2:a7:a4:
         7f:ea:5c:c1:20:4c:25:01:e1:2c:3f:c7:2d:46:f5:fb:a2:f3:
         90:43:7f:53:36:b6:ac:dd:69:82:46:e3:4f:cb:02:8e:f0:41:
         fb:7d:c5:db:31:14:d9:95:b9:41:34:89:21:64:96:ca:e9:64:
         e0:c1:70:58:43:34:81:06:57:b1:df:46:f7:97:b9:82:c0:a9:
         9a:35:7d:19:a0:d2:d6:65:30:cb:a6:41:b7:0f:fb:b6:48:f2:
         6f:40:b5:30:df:a8:e3:c4:de:40:23:a2:fc:2a:54:db:8c:cb:
         02:18:61:80:c3:42:31:97:a8:9e:75:b8:4d:d7:9a:38:f0:c4:
         f7:75:51:7e:3b:4b:ed:6c:b6:8a:b4:fd:fa:2f:40:40:45:5c:
         af:25:b5:f5:ef:5f:a2:a1:30:3a:f0:40:64:11:41:e2:69:35:
         3b:4b:09:7c:ab:62:9a:42:cb:97:d3:07:d1:9b:73:c9:c8:28:
         cc:88:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:57 2025 by rpki-client