Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8tNirlJA8ihmy-0imtRw3hqEsmc.roa
File:                     8tNirlJA8ihmy-0imtRw3hqEsmc.roa (raw, json)
Hash identifier:          uScu2GKF/uaswiijjFBkYNtRRmJ3izsyng75ESlYJkc=
Subject key identifier:   F2:D3:62:AE:52:40:F2:28:66:CB:ED:22:9A:D4:70:DE:1A:84:B2:67
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       29
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8tNirlJA8ihmy-0imtRw3hqEsmc.roa
Signing time:             Fri 22 Jul 2022 00:13:55 +0000
ROA not before:           Fri 22 Jul 2022 00:13:55 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.26.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:13:55 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=F2D362AE5240F22866CBED229AD470DE1A84B267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:85:16:8e:6c:48:c0:04:11:ca:32:ef:82:
                    47:f0:76:8e:a6:d4:3e:83:ab:5b:0c:6a:69:77:2d:
                    69:e1:b5:bc:42:20:eb:9b:ec:38:4a:db:f7:11:bc:
                    d2:2c:bd:27:c8:30:7d:d7:f1:19:be:0d:4d:b2:08:
                    f4:79:e3:8b:e5:41:c0:4d:cd:a8:2e:bf:5a:b8:85:
                    7c:be:83:5a:5d:67:b4:88:7d:c5:8f:8d:3e:05:ab:
                    3d:69:50:84:aa:de:82:eb:b6:25:3e:2e:78:43:99:
                    1a:6f:dd:23:3e:4b:6d:a5:60:e5:02:25:c6:3b:57:
                    38:b0:45:c6:19:c7:53:d8:d2:c3:ef:a5:7e:fd:31:
                    94:bd:38:29:a6:71:0a:a8:22:81:8b:97:d2:4b:e8:
                    3d:82:6c:dd:51:9f:e2:76:3c:4d:85:4d:8c:5b:c0:
                    77:7a:7f:20:08:fe:87:54:90:90:55:1c:79:e4:90:
                    f6:60:97:be:98:15:9e:b3:1a:34:b1:53:e8:70:35:
                    7a:71:f0:a9:68:5e:d3:bf:4e:b1:f3:cd:fc:2a:14:
                    f0:42:b6:32:73:f9:91:b7:47:47:b6:41:d6:82:5a:
                    51:fd:90:c5:3c:3f:82:d2:24:5f:1d:0a:c8:66:c7:
                    d5:a3:d3:22:46:4f:e8:95:e0:fc:fc:49:fc:e4:7f:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:62:AE:52:40:F2:28:66:CB:ED:22:9A:D4:70:DE:1A:84:B2:67
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8tNirlJA8ihmy-0imtRw3hqEsmc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:7e:50:80:34:bc:22:cf:9d:94:7b:f5:82:24:1d:ca:84:
         72:be:20:68:c1:45:80:eb:9d:d7:89:68:b0:3a:d0:ec:24:5b:
         5e:f2:f2:85:21:f3:23:92:f7:75:d6:6d:7c:a2:fd:fc:ab:15:
         f7:9c:dc:dc:00:db:72:60:43:ce:37:27:e0:95:3e:93:43:c6:
         4e:ab:1c:1e:b7:7d:46:3a:ab:48:f8:1e:97:8e:e9:65:27:bf:
         e1:44:33:9b:11:d8:1e:bf:1d:b3:ac:c0:1b:53:8a:6e:5a:72:
         ea:70:69:d5:2c:90:82:6d:f7:81:a7:34:f6:54:f3:c9:5c:ba:
         b5:2a:45:78:89:6f:98:ce:f1:2c:d5:99:e4:f8:71:f2:3b:d6:
         b6:8d:e9:ab:57:47:b3:e4:62:f1:a4:39:f2:8d:2e:5e:7c:eb:
         dc:ba:34:c6:27:3e:78:d2:79:ee:a8:87:c9:07:2f:1e:77:a6:
         68:3e:8d:a1:ec:72:c1:c4:c4:b6:6c:b3:17:ef:e3:03:64:33:
         f4:0a:c0:d8:ef:2e:12:34:5d:e7:c5:4a:68:48:58:2f:ef:dc:
         8f:34:44:35:e1:5e:ae:91:97:83:21:5f:1d:45:ae:0a:2b:10:
         e1:33:92:81:e1:ab:4b:e0:0c:dd:08:35:90:5e:36:2c:d2:bd:
         cc:59:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:23 2025 by rpki-client