Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NKw1GvPMF_pRaAEv7ZO4hVeICK4.roa
File:                     NKw1GvPMF_pRaAEv7ZO4hVeICK4.roa (raw, json)
Hash identifier:          n23SzUJ5iSXYi4ptfTkmHUgfHaaTt32pL05WjjCWMso=
Subject key identifier:   34:AC:35:1A:F3:CC:17:FA:51:68:01:2F:ED:93:B8:85:57:88:08:AE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       93
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NKw1GvPMF_pRaAEv7ZO4hVeICK4.roa
Signing time:             Fri 22 Jul 2022 06:29:29 +0000
ROA not before:           Fri 22 Jul 2022 06:29:29 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.232.0.0/15 maxlen: 15
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:29:29 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=34AC351AF3CC17FA5168012FED93B885578808AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:18:e7:59:ab:d9:71:6a:f5:02:db:6b:3e:
                    a5:0d:b0:0d:a8:4f:e1:9f:45:86:80:fe:86:c5:c4:
                    28:bb:d8:80:09:5a:ae:77:7a:a1:40:54:4c:38:ec:
                    2e:62:7c:15:4c:97:57:40:08:1c:c1:2b:42:97:c4:
                    2f:d2:b5:d9:38:a3:fe:91:34:f0:96:be:0b:69:94:
                    c6:5c:af:b5:52:b1:0a:63:0a:de:19:11:81:a2:56:
                    3f:a5:3f:73:88:25:5a:f8:c3:5e:0e:2f:02:22:6c:
                    9b:b4:56:1e:4f:ac:b1:13:96:9f:c9:fa:a7:1c:84:
                    98:81:81:ec:f8:60:ee:e2:fe:2e:99:a9:bc:b6:8c:
                    c4:9a:b5:af:7e:a2:dd:92:e2:49:33:8c:08:89:cc:
                    15:7e:b1:9d:da:6e:1a:13:01:15:06:a1:90:39:d5:
                    9d:10:03:dc:86:ac:b7:a3:d1:4b:8a:f5:6b:71:1d:
                    ad:4b:67:82:b4:8b:3f:e7:b8:53:8f:be:c4:9e:e7:
                    28:a4:2f:80:5d:65:c1:e7:2b:9a:1c:67:1b:f9:80:
                    27:c8:88:84:0e:f5:e7:af:01:5f:d4:f5:13:c4:75:
                    dc:e6:65:62:7a:4e:ce:8f:83:5d:7e:58:f7:88:5a:
                    4f:d5:6c:0f:e2:33:93:28:13:dd:0d:fd:c6:52:70:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:35:1A:F3:CC:17:FA:51:68:01:2F:ED:93:B8:85:57:88:08:AE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NKw1GvPMF_pRaAEv7ZO4hVeICK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.232.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:41:68:f6:8f:fe:80:2f:d5:eb:0e:ba:3f:ad:97:59:ad:
         1b:8b:0a:40:d3:4c:97:af:43:61:ff:ce:4e:78:4f:5b:6e:4b:
         24:ef:70:fa:57:e6:95:50:dd:4c:58:c8:47:92:1d:8f:52:c7:
         9d:8d:b6:bd:e0:28:1a:6b:ed:6b:83:21:b5:35:38:aa:1c:66:
         2d:47:51:53:21:d1:13:ca:ae:fa:94:b7:85:f4:59:12:d9:64:
         63:1c:c4:e9:03:c2:cb:f1:07:aa:22:bb:29:fe:8c:4f:58:74:
         c6:f2:7c:4f:9e:72:c6:58:fe:86:6e:31:7b:80:1f:46:0d:66:
         a3:af:10:cf:8b:50:af:0a:40:fe:9a:08:c4:b1:19:96:81:0e:
         75:cf:54:9a:2b:75:be:50:18:5f:a9:19:ee:f4:cb:86:a8:17:
         63:10:23:8b:ec:0c:ea:f9:72:bb:5e:e5:4c:18:b9:2f:4c:0f:
         35:a3:fc:48:0a:69:9e:db:c7:24:45:42:e6:55:cb:83:3c:05:
         3e:81:23:44:ae:98:2d:28:5f:e6:92:37:d4:1f:a1:fa:ec:fc:
         2f:c7:9e:4c:fc:f2:80:22:a0:1e:c8:4a:f8:e6:5d:2e:5a:1c:
         b3:1b:ef:31:00:7e:57:37:f3:d3:b0:17:9c:c3:b3:75:1b:82:
         14:4b:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:49 2025 by rpki-client