Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/98skNp3wMKszVEPcdIOc0YvABkQ.roa
File:                     98skNp3wMKszVEPcdIOc0YvABkQ.roa (raw, json)
Hash identifier:          FDXMcXlOYVN8kjNNViOjLGnHJ+PUjhhuZAio/VHfHWo=
Subject key identifier:   F7:CB:24:36:9D:F0:30:AB:33:54:43:DC:74:83:9C:D1:8B:C0:06:44
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       9B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/98skNp3wMKszVEPcdIOc0YvABkQ.roa
Signing time:             Fri 22 Jul 2022 06:35:48 +0000
ROA not before:           Fri 22 Jul 2022 06:35:48 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.215.44.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:35:48 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=F7CB24369DF030AB335443DC74839CD18BC00644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:93:3e:c1:c8:12:34:e0:4b:09:00:9a:96:
                    77:77:ff:f1:b6:5e:dc:54:7d:26:ce:16:26:98:74:
                    71:db:ea:bf:10:cc:9f:92:18:25:4e:e7:b5:6c:27:
                    73:ec:d0:fa:e9:b3:19:d1:35:5d:9f:47:b9:f9:2e:
                    29:d9:03:bf:62:bd:f1:0e:d7:16:04:72:ba:5e:98:
                    94:43:bd:cd:4c:38:a4:d5:a2:81:2f:6f:5e:2f:8c:
                    e1:0f:e8:dc:85:8c:28:a0:03:ad:b3:69:27:9c:f1:
                    81:eb:34:e4:fa:00:95:71:1a:14:f0:3e:60:65:9c:
                    01:56:a4:6d:f6:24:ff:e7:eb:48:4a:cc:10:46:ee:
                    25:08:b8:0c:20:44:5a:5b:b2:ad:c8:44:a0:a0:5d:
                    64:09:59:28:f8:b3:6d:36:13:fa:10:ee:bb:f2:60:
                    30:dd:15:a5:9d:9f:8c:b4:29:94:0c:2e:b4:02:ef:
                    6f:0b:16:30:f6:01:5b:02:8e:49:08:7f:17:17:14:
                    3b:e9:ce:3e:61:34:8c:17:9e:d1:77:46:bd:35:73:
                    1a:60:d6:e1:ef:53:48:9b:a5:19:74:aa:00:3f:3a:
                    84:62:ff:84:ba:8b:c8:09:3b:07:5d:e9:4e:ba:21:
                    75:2f:b9:9b:21:ad:7e:39:9c:44:45:dd:3f:51:cc:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CB:24:36:9D:F0:30:AB:33:54:43:DC:74:83:9C:D1:8B:C0:06:44
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/98skNp3wMKszVEPcdIOc0YvABkQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:49:2a:24:ca:37:ef:9d:80:f3:c7:bf:90:2f:0d:94:92:
         95:06:da:40:b8:76:43:a1:e0:f2:9b:c3:13:dd:dd:32:44:42:
         71:a6:8f:de:cd:c3:f6:a0:62:67:f5:e4:a4:d1:b1:0f:37:41:
         20:64:9e:b3:a4:4b:12:30:71:75:b2:da:1a:8d:33:b5:3b:d7:
         93:ff:a6:0d:57:27:b7:ee:e4:e4:2b:7f:d3:13:20:40:38:96:
         4a:7e:19:b6:0b:c1:cf:03:1e:7f:ff:c0:94:b0:bb:60:d5:b7:
         a3:0e:00:4a:96:14:3c:d1:3a:18:dd:ed:12:ec:ef:3b:aa:67:
         f3:da:4e:1a:b4:ef:91:c8:22:91:95:dc:9c:0c:a9:99:95:c6:
         3c:21:6a:d6:ef:42:ea:cb:ea:6c:cf:72:99:24:13:84:4a:d2:
         3b:ee:e1:ab:7e:bb:77:66:84:25:a5:75:79:af:d2:48:db:10:
         d8:72:af:50:dd:02:64:e4:2e:dd:dc:6a:00:0d:e2:b7:c7:29:
         75:64:86:52:b0:87:4a:7e:77:d3:83:16:e4:83:35:b8:f8:a2:
         a2:6f:0a:7c:09:af:e0:3d:8e:31:40:61:c5:c1:05:0e:ce:df:
         6a:d9:ba:e8:a9:60:c4:85:8d:11:8e:e0:c3:ef:ec:5a:c7:6e:
         57:c7:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:09 2025 by rpki-client