Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1U9bOqyA4aYDYygPECEwwnkcHTU.roa
File:                     1U9bOqyA4aYDYygPECEwwnkcHTU.roa (raw, json)
Hash identifier:          tLwUJqIruGTjGOCl9G1vv3Uy6m6MXxAPnaK6OXnaneM=
Subject key identifier:   D5:4F:5B:3A:AC:80:E1:A6:03:63:28:0F:10:21:30:C2:79:1C:1D:35
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       80
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1U9bOqyA4aYDYygPECEwwnkcHTU.roa
Signing time:             Fri 22 Jul 2022 06:13:50 +0000
ROA not before:           Fri 22 Jul 2022 06:13:49 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.44.72.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:13:49 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=D54F5B3AAC80E1A60363280F102130C2791C1D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d5:8b:27:38:23:dc:d1:23:58:e1:cf:98:18:
                    f4:75:9c:e0:f0:c9:c7:d3:da:01:df:18:03:94:73:
                    ff:ea:36:59:e4:64:e4:5e:8b:ed:eb:2d:ee:84:44:
                    ca:e0:e1:f7:5a:3c:e6:b5:35:83:ed:2e:5b:94:5e:
                    47:81:85:ab:21:d8:41:b4:cb:57:ec:16:1a:ba:d1:
                    07:b2:60:9b:20:e8:98:7d:a3:d4:e9:73:10:24:d1:
                    0f:75:0c:7c:ab:a4:b2:d4:5f:2b:0b:29:56:58:b8:
                    ba:2d:20:da:e5:cf:25:02:23:a9:d3:16:8f:ea:70:
                    1d:43:1f:08:df:fb:bf:80:c5:ac:1c:9a:a3:94:4a:
                    22:73:54:3d:f4:59:a3:43:f7:90:47:a1:58:d4:ee:
                    63:2b:c0:7a:ec:da:ab:f4:d3:48:c3:74:7c:72:3f:
                    33:e7:20:04:0b:e3:92:6f:54:01:fe:49:85:cb:a5:
                    85:8e:c2:94:69:17:74:f4:a4:34:dd:6e:6e:99:72:
                    e7:36:be:2c:e8:f1:bd:e7:04:bb:7f:96:3e:4a:db:
                    39:35:79:ac:b0:bd:96:12:29:64:1a:d8:60:1a:51:
                    e3:50:56:12:aa:ea:bb:89:c2:ea:54:27:ce:b9:5b:
                    13:a1:59:a6:ec:fe:53:bb:e6:8a:60:3a:38:27:f6:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:5B:3A:AC:80:E1:A6:03:63:28:0F:10:21:30:C2:79:1C:1D:35
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1U9bOqyA4aYDYygPECEwwnkcHTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:c9:5c:22:f8:6e:55:57:b6:17:93:c3:e6:4e:9f:9d:ea:25:
         89:39:cd:36:a7:ff:0d:88:04:bc:f6:1a:33:90:4c:41:5c:ce:
         b3:cb:74:9b:60:c2:8e:6d:81:03:7e:8c:dc:18:6e:f0:13:b8:
         26:44:e3:b1:12:43:bf:3d:0f:4c:06:fc:68:d8:52:03:ec:be:
         6c:70:b1:6e:40:45:55:87:e6:9d:78:e0:45:33:46:a3:ec:12:
         7e:b7:26:34:c0:ff:be:69:ed:75:c7:f5:2e:15:29:5b:37:df:
         72:e6:99:f1:71:b1:ed:e2:69:02:0d:1e:d5:ed:83:9a:08:7d:
         66:7c:43:16:5f:22:5e:39:45:d1:9e:50:30:1e:bd:ec:11:dc:
         29:cd:31:99:82:23:fc:61:59:bd:6c:79:cc:a7:37:2c:ce:ea:
         04:91:c3:8a:d9:fe:f0:56:b5:a0:6d:6a:ea:fd:c6:e6:44:49:
         4c:86:d0:ee:e2:19:36:3a:e9:e6:76:09:14:42:69:54:50:af:
         69:cc:ce:29:cd:18:6b:a7:b1:1b:12:8d:a2:65:67:59:10:15:
         d6:e6:f4:2a:19:3d:81:d1:77:06:b2:c2:69:8b:ac:26:da:9e:
         3b:71:7f:ad:84:e5:4a:dc:58:b7:41:eb:3a:d6:b2:61:69:98:
         42:27:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:41 2025 by rpki-client