Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rft6baaBYxGzJpMGRRcyZi-cxFY.roa
File:                     Rft6baaBYxGzJpMGRRcyZi-cxFY.roa (raw, json)
Hash identifier:          TmAXj0qs2jG/AfPeuL9SiKaGeZSinQbdjsX6w+q7rcY=
Subject key identifier:   45:FB:7A:6D:A6:81:63:11:B3:26:93:06:45:17:32:66:2F:9C:C4:56
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0160
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rft6baaBYxGzJpMGRRcyZi-cxFY.roa
Signing time:             Fri 07 Jul 2023 04:10:33 +0000
ROA not before:           Fri 07 Jul 2023 04:10:33 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.135.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:33 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=45FB7A6DA6816311B3269306451732662F9CC456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:39:61:ad:05:d6:6a:11:40:f2:65:05:06:
                    6e:43:09:b5:51:11:30:dc:ee:4c:3b:6d:71:e4:10:
                    0b:b3:5d:c2:2f:b7:c4:e5:f8:6b:6d:6d:f1:55:4b:
                    ee:7e:f0:16:6d:9e:ba:1b:1e:ad:50:f7:19:8d:6c:
                    6b:14:c6:99:68:9f:08:d8:48:c9:ff:6d:14:ee:7a:
                    2b:f6:3e:48:db:3c:6b:a8:79:b9:44:91:9d:20:01:
                    a6:06:3d:5f:e0:36:c6:6b:2a:01:27:a1:92:a2:99:
                    b5:07:c6:bf:ee:e5:56:95:19:c7:16:d5:f1:c0:a1:
                    40:9e:89:df:0b:ca:12:29:76:4b:d4:df:93:d3:f2:
                    dd:40:ed:21:65:09:de:6f:9d:9b:f6:d6:27:23:db:
                    2d:af:a2:2c:2c:fe:bf:50:28:d3:04:fc:5a:94:c2:
                    8c:03:28:82:68:80:87:47:4d:33:ba:4f:5a:58:e8:
                    6c:2b:ac:ef:21:6d:ff:71:22:26:03:42:34:6e:4f:
                    8a:af:fd:90:b5:c6:28:67:79:6e:45:bf:0f:dc:9d:
                    7f:bd:94:83:de:7e:74:76:58:55:7c:66:96:1d:4b:
                    a3:b1:30:bf:f4:f8:df:a5:f0:24:ac:f5:31:ab:00:
                    3a:bf:29:73:76:08:cd:fa:30:44:a9:5a:d4:9a:38:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FB:7A:6D:A6:81:63:11:B3:26:93:06:45:17:32:66:2F:9C:C4:56
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rft6baaBYxGzJpMGRRcyZi-cxFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:26:86:c6:70:c8:fd:81:9f:9f:fc:ab:c4:43:d0:4d:45:
         f8:6e:7f:25:78:ff:a1:ef:40:29:87:c9:48:0c:72:53:6b:21:
         54:0d:e7:a3:4a:e9:39:65:1b:7d:55:eb:56:7b:f4:af:d5:e2:
         33:4c:35:e8:b5:d0:32:c3:57:25:f5:29:1f:8d:1d:ac:e6:a7:
         dd:e2:23:22:20:a5:5c:e3:3c:a5:d7:d0:23:41:a1:a0:d6:e6:
         81:a2:7f:c8:41:4c:a6:73:cd:32:49:fa:c2:33:ac:e2:97:04:
         71:7a:f1:0b:8a:d6:cb:75:d1:c6:9e:7b:a1:27:ed:39:da:e4:
         d2:c7:0d:da:d4:3f:96:34:44:1d:c8:31:22:53:eb:a3:95:0f:
         1d:19:ae:42:db:da:93:48:b4:36:e1:6b:f7:47:28:c1:ed:17:
         71:1f:3e:ff:d1:4d:e9:1e:4d:de:0d:ea:ca:6e:a1:72:fd:40:
         50:36:c4:50:dc:97:4b:9b:a4:a3:b4:0f:f2:87:4f:ac:60:90:
         38:7e:c8:aa:22:41:1f:c0:ea:4a:53:80:11:9f:9d:56:90:47:
         60:8e:6f:ac:92:1e:33:0b:86:b7:ab:53:5b:74:4b:f9:50:d4:
         88:4a:c3:dc:ff:15:56:84:fd:dd:ae:23:11:ea:cb:a7:a0:4c:
         20:77:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:09 2025 by rpki-client