Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GUdAXH_t1mcaX8kGpirkMDlVzpg.roa
File:                     GUdAXH_t1mcaX8kGpirkMDlVzpg.roa (raw, json)
Hash identifier:          jc+PragajSHZV4I9+B0chhr9SdnJ025vHYz6z+CaOns=
Subject key identifier:   19:47:40:5C:7F:ED:D6:67:1A:5F:C9:06:A6:2A:E4:30:39:55:CE:98
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       77
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GUdAXH_t1mcaX8kGpirkMDlVzpg.roa
Signing time:             Fri 22 Jul 2022 05:59:44 +0000
ROA not before:           Fri 22 Jul 2022 05:59:44 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.120.208.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 05:59:44 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=1947405C7FEDD6671A5FC906A62AE4303955CE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:4c:ad:5c:60:b9:2d:4e:31:cc:eb:4b:df:
                    34:b0:25:57:52:e7:ed:14:82:d1:45:43:80:e1:39:
                    a8:95:68:e1:93:ff:2a:0e:53:cb:d8:e8:c8:46:71:
                    5e:65:57:96:89:bd:bd:ff:0f:04:0e:db:fe:63:63:
                    f0:bf:16:0a:94:0f:4d:cf:f2:eb:5c:ec:5f:83:78:
                    c0:8d:18:aa:e1:04:28:15:b2:f9:2c:ea:a6:b3:5a:
                    6f:78:7d:47:b9:82:ab:7b:d6:29:bc:34:75:03:a6:
                    43:22:7f:9f:2d:b9:f5:b3:23:f6:42:f9:ce:4b:d9:
                    cc:d7:aa:0b:ae:c4:60:24:a2:c5:a1:de:58:07:e2:
                    5a:95:60:16:d0:03:de:c2:0f:07:ce:89:ca:5b:f4:
                    cc:77:c9:05:85:e2:4f:ae:fe:e3:d6:9b:d1:37:2e:
                    5e:90:00:28:5b:2f:e1:de:c7:be:14:d9:d9:53:86:
                    44:ce:7a:a1:64:e9:56:00:f8:2c:56:c8:e2:a1:b4:
                    73:10:18:21:a8:1f:21:28:be:c1:20:35:f7:9a:0d:
                    0b:4a:66:69:ac:a6:9f:08:52:c2:ea:2a:2c:99:e3:
                    39:d8:8a:d1:2c:f7:00:60:34:bf:72:a2:15:c1:ad:
                    04:bd:3a:62:c4:9d:f5:50:91:0f:72:c6:eb:af:38:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:47:40:5C:7F:ED:D6:67:1A:5F:C9:06:A6:2A:E4:30:39:55:CE:98
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GUdAXH_t1mcaX8kGpirkMDlVzpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:97:1b:39:a2:91:a3:af:77:f6:64:11:f0:cc:dc:00:9f:
         87:62:c0:00:55:fc:15:f9:33:1e:48:34:a1:ae:38:1a:f8:15:
         32:95:39:97:f7:31:08:27:cb:44:8f:01:42:55:9b:55:be:cc:
         f8:18:81:0c:9a:13:b8:00:9f:7b:85:95:fb:5e:29:19:d5:eb:
         bb:54:4d:5d:2e:d8:4e:95:80:21:52:1f:16:62:16:0d:3c:64:
         6b:02:c2:97:9a:ec:f9:98:cf:23:90:50:57:e6:31:48:26:2e:
         28:01:85:1d:78:45:9c:26:d2:07:4b:5e:bf:05:4e:06:9e:53:
         26:ba:d8:3b:0e:55:6d:2b:fa:8a:85:87:31:09:e1:54:bf:7f:
         9a:4d:66:d9:54:b5:08:dc:46:d9:ca:83:ce:fc:df:be:0a:d4:
         db:4e:68:b2:a3:1a:bd:73:0a:2e:25:3c:5d:30:ed:56:f2:11:
         b8:00:06:62:aa:b6:d5:9d:86:57:d5:92:10:87:aa:90:ff:6f:
         67:b3:2e:96:b3:14:ca:be:07:12:3e:c3:c4:e8:3c:6e:63:09:
         54:bd:89:d8:15:1a:1f:a0:d9:0b:cf:1d:5d:29:5a:4a:93:9b:
         db:4e:57:5b:b6:6d:b3:1b:9d:20:a6:d7:33:c4:53:c1:b9:52:
         05:c4:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:58 2025 by rpki-client