Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/a8Lno5Qh1bygPlZZf3GVy-7Ra5U.roa
File:                     a8Lno5Qh1bygPlZZf3GVy-7Ra5U.roa (raw, json)
Hash identifier:          KSZPtHoq1lS/LMwcjXpFGLcQ9XP94JCmNijjDR46W0k=
Subject key identifier:   6B:C2:E7:A3:94:21:D5:BC:A0:3E:56:59:7F:71:95:CB:EE:D1:6B:95
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       012F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/a8Lno5Qh1bygPlZZf3GVy-7Ra5U.roa
Signing time:             Fri 07 Jul 2023 04:08:13 +0000
ROA not before:           Fri 07 Jul 2023 04:08:13 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.54.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:13 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6BC2E7A39421D5BCA03E56597F7195CBEED16B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:f5:bb:0b:1b:a0:fe:78:02:0b:ee:fd:cc:
                    b9:b6:ef:00:77:51:47:6c:53:86:2d:c8:7f:d8:4d:
                    20:b9:8d:fe:ec:a2:be:df:66:3f:11:3b:29:c6:23:
                    9d:d9:20:25:d2:7b:8f:3d:34:39:7a:43:e8:b1:f9:
                    00:c3:4e:81:00:34:23:dd:81:0d:ec:57:f5:3d:9d:
                    dd:97:a1:46:d6:28:79:4d:51:db:11:66:93:fd:41:
                    f1:4a:72:5d:a0:b6:69:17:ce:4e:93:39:e7:23:f5:
                    49:c8:10:a6:b7:f4:2a:d1:19:d9:b6:67:0d:e0:b3:
                    42:de:d2:10:27:74:97:c0:f9:c8:0c:7b:79:b0:a2:
                    94:53:39:35:8a:eb:57:32:cc:b1:bf:20:9c:7e:8b:
                    e0:35:d2:c3:2c:0c:0d:6d:97:39:2a:88:66:a6:bc:
                    9c:af:d7:7b:f3:ae:24:24:2c:88:f3:cb:f5:e6:c7:
                    0d:08:fe:92:32:b5:e8:e5:fd:8c:3d:bc:64:6c:94:
                    4d:ac:a1:44:41:7d:0b:da:a2:18:30:5c:05:48:f9:
                    97:b3:49:64:70:35:fd:85:8d:ad:76:2d:c7:3e:19:
                    bf:8b:66:48:11:53:38:33:b4:3f:68:d7:da:40:b1:
                    58:54:fd:cb:6f:16:18:ca:10:b8:e7:84:66:26:70:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:E7:A3:94:21:D5:BC:A0:3E:56:59:7F:71:95:CB:EE:D1:6B:95
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/a8Lno5Qh1bygPlZZf3GVy-7Ra5U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:49:c1:cc:da:9a:0c:a9:e7:36:e0:73:89:03:7c:5f:d2:
         c3:07:70:24:72:02:91:5f:f0:00:db:c3:86:cc:1e:2f:d9:93:
         8e:23:e6:89:54:ae:18:b7:73:4d:a6:a1:dd:03:b9:ef:df:a5:
         f6:83:be:34:b4:8c:af:30:28:59:82:68:48:29:ba:49:03:a8:
         7e:0d:f3:d5:ad:7c:b2:1e:ab:75:f9:5c:37:75:3f:5c:6c:50:
         51:cc:14:21:63:41:70:e9:d6:a6:c1:6b:a9:27:02:92:c2:5b:
         31:3b:65:78:dc:4d:06:db:cd:86:0d:9e:5f:c3:c0:de:d9:64:
         08:9e:64:4e:8f:a1:e9:ac:7d:e8:b1:00:2f:fa:67:53:0b:bb:
         94:91:05:d1:1e:d8:94:d8:58:86:81:a0:89:a9:36:72:3c:ad:
         5e:18:8b:c0:b5:b2:6c:b3:1b:0d:8c:1c:5e:0b:cb:c5:ad:e9:
         a3:dd:33:df:8d:6a:f0:64:07:b2:22:ee:34:95:13:b9:59:6e:
         54:d9:f9:3b:f6:66:60:06:0c:6e:d0:24:5a:ca:13:6b:52:3a:
         4d:aa:88:11:a7:57:cc:e6:4e:72:2e:f4:b7:72:ba:72:c8:78:
         e7:5b:91:7e:66:eb:05:5a:1f:99:f1:4a:b5:d6:55:60:31:5b:
         0a:b6:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:24 2025 by rpki-client