Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8NYE1Yhph3Or0Hpe5dI-6KJ1ULE.roa
File:                     8NYE1Yhph3Or0Hpe5dI-6KJ1ULE.roa (raw, json)
Hash identifier:          rpZE6TTjd3iVgEnnAfCSb/6J260qsZmPrLelP8vw0eI=
Subject key identifier:   F0:D6:04:D5:88:69:87:73:AB:D0:7A:5E:E5:D2:3E:E8:A2:75:50:B1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       011F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8NYE1Yhph3Or0Hpe5dI-6KJ1ULE.roa
Signing time:             Fri 07 Jul 2023 04:05:58 +0000
ROA not before:           Fri 07 Jul 2023 04:05:58 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.133.184.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:05:58 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F0D604D588698773ABD07A5EE5D23EE8A27550B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:99:ca:d2:e1:df:02:e3:ed:e3:c4:94:2b:
                    fb:d4:0f:b0:bc:f3:e9:a0:18:17:3e:f1:49:ee:00:
                    24:80:af:3c:d8:85:47:66:55:d0:7c:88:8a:95:d7:
                    a9:7c:85:83:a2:2b:94:c8:30:70:55:cc:c4:ae:e9:
                    c4:85:9e:0e:d8:07:e1:c8:3e:0e:34:15:87:d6:57:
                    82:67:62:dd:da:35:da:c8:11:0d:01:72:90:74:2b:
                    41:4f:1f:73:4b:be:aa:52:0c:9b:8c:41:67:f2:f1:
                    54:c5:1a:21:02:e2:1b:b6:51:b8:d3:b0:4c:4e:70:
                    14:34:cf:40:c0:8f:20:00:4e:9b:53:37:38:2a:3b:
                    7b:a5:aa:df:1f:70:94:e4:b4:fa:80:6d:ba:88:fd:
                    39:82:04:a5:65:44:fe:62:57:cd:fa:3d:fd:c7:d1:
                    20:ed:e6:43:ae:d3:78:bb:05:de:b8:51:19:05:4d:
                    5a:7a:29:dc:11:aa:2e:c4:90:22:f2:7d:57:9f:ec:
                    90:32:96:f5:50:bb:62:fe:53:d2:e1:18:96:8f:79:
                    35:8d:81:34:19:58:61:35:f5:dd:e6:74:ed:f1:ff:
                    79:60:a5:bd:79:ca:5b:b7:4c:83:d9:ba:4e:08:b1:
                    a9:e9:e5:b9:41:3c:2b:ac:0c:07:5c:02:41:e1:36:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D6:04:D5:88:69:87:73:AB:D0:7A:5E:E5:D2:3E:E8:A2:75:50:B1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8NYE1Yhph3Or0Hpe5dI-6KJ1ULE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:83:4a:dc:e2:b0:b5:1f:25:c3:19:c7:c3:af:a1:de:df:
         1d:9f:a1:20:ff:75:be:fc:a5:91:91:04:0e:74:64:fc:b1:aa:
         db:a8:95:0e:44:0a:84:e2:f2:3d:2e:ec:17:00:71:b2:7f:82:
         4f:3e:b5:b1:a8:b1:02:bd:94:04:5d:f8:cd:39:c6:44:2c:dd:
         93:16:27:72:49:2b:05:d8:0d:48:79:45:0c:54:fd:c1:a9:25:
         70:49:e8:06:3a:89:23:5e:42:13:f5:33:ec:7e:33:05:d6:29:
         a4:90:00:0a:02:2d:61:00:c7:f8:76:28:89:81:b6:6e:29:b0:
         e2:be:60:3b:19:52:a1:49:ae:1a:02:7c:f8:15:f1:f6:66:2c:
         e1:a5:07:69:6e:dd:35:5d:c8:fb:5f:f7:b3:85:f3:d7:23:9d:
         4e:ae:56:70:f2:44:2d:87:17:81:81:d0:86:a2:87:60:44:35:
         e0:a9:8d:6d:2b:fd:df:06:89:38:4d:b6:39:4e:e2:bf:78:9e:
         b5:7a:9c:86:65:94:71:fb:12:a2:3d:0a:87:f8:ae:7a:4a:ec:
         6e:a5:e4:2a:d7:ec:3c:95:a8:d8:f3:66:44:c7:94:e4:f2:26:
         ab:8a:59:ec:2b:1e:ad:f3:05:1f:87:de:29:b8:54:8b:59:68:
         03:49:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:50 2025 by rpki-client