Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gIG3XNRvgREWfxs_HUTm-hDB6wU.roa
File:                     gIG3XNRvgREWfxs_HUTm-hDB6wU.roa (raw, json)
Hash identifier:          Z0gwxwNBLpicrvj5anTbzbNE9Wm0mTfi0vyISvSzGTc=
Subject key identifier:   80:81:B7:5C:D4:6F:81:11:16:7F:1B:3F:1D:44:E6:FA:10:C1:EB:05
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gIG3XNRvgREWfxs_HUTm-hDB6wU.roa
Signing time:             Thu 21 Jul 2022 07:45:39 +0000
ROA not before:           Thu 21 Jul 2022 07:45:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.132.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:45:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8081B75CD46F8111167F1B3F1D44E6FA10C1EB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:97:d9:0d:e9:65:62:c3:60:be:c2:9d:e4:
                    67:9a:4b:83:bc:2f:c5:c0:36:88:39:fc:96:87:bc:
                    5a:63:c7:d8:2f:aa:c7:2b:c7:d8:a2:89:85:e7:5d:
                    ef:bb:73:5d:04:b8:24:7c:ae:af:a5:af:2c:8d:f3:
                    bf:23:17:32:26:50:4f:58:b2:1c:e3:20:24:bd:75:
                    55:e3:9e:87:c8:7d:04:f7:cf:3e:ea:6b:0e:f8:76:
                    aa:3e:d5:39:7d:92:d7:0a:f9:cb:5f:19:d1:0b:72:
                    0e:cd:61:c4:a5:bf:36:1d:04:12:fa:76:19:56:c8:
                    88:2e:a4:aa:5f:01:66:01:ce:2e:92:76:ff:9d:d2:
                    72:52:07:6c:88:4f:4b:dc:bc:0c:60:e0:af:fa:4a:
                    a3:1d:0a:a9:da:6e:b0:88:0b:e0:8a:64:d2:78:cc:
                    1a:38:2d:46:8f:02:00:a9:60:45:19:11:70:78:79:
                    4e:3b:13:5e:89:cf:3a:79:e7:13:9b:a3:03:72:47:
                    97:c0:a4:21:2d:80:33:4b:86:a6:ee:eb:b0:f7:ff:
                    2c:1d:7c:d0:95:66:60:9f:c9:36:70:9f:33:18:7b:
                    b5:42:99:fc:9c:4a:e6:2d:d3:bf:48:05:d7:df:66:
                    4b:20:62:b5:62:ca:2e:bf:a0:cd:9b:2e:67:b2:e8:
                    44:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:81:B7:5C:D4:6F:81:11:16:7F:1B:3F:1D:44:E6:FA:10:C1:EB:05
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gIG3XNRvgREWfxs_HUTm-hDB6wU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:ff:84:8a:7c:b1:72:83:4c:fa:e0:8a:53:f3:fd:4a:fa:
         da:d1:82:88:aa:1c:84:e5:24:28:bc:f4:bd:76:1e:15:ee:54:
         41:cc:4f:e3:84:d7:95:e6:9e:ae:3c:12:47:8e:7b:99:24:00:
         4d:1f:8a:d5:ef:dc:51:76:a3:66:05:e9:7a:58:a2:1c:fc:d6:
         bc:f4:9c:f3:b2:8e:20:5a:00:e5:03:69:b4:5b:0d:4e:ad:ba:
         15:da:42:f2:93:cb:9b:cc:81:01:4a:31:3f:41:4c:47:4e:c0:
         6f:4b:1e:3d:13:07:b7:e0:16:cd:ca:b4:a4:9c:aa:79:5e:5a:
         f9:22:6f:cf:62:63:f5:84:d8:57:15:c6:72:63:eb:7b:c6:22:
         f1:30:87:0e:8a:8f:64:25:47:83:03:39:a5:f4:0d:f6:20:96:
         b0:68:c5:32:63:5c:2f:b4:ca:7f:d7:d7:e7:4a:02:89:6c:2c:
         6f:af:43:88:71:d6:de:20:3a:a3:2e:3c:6c:fe:24:0b:75:6a:
         0a:21:67:f0:a4:ad:64:62:b5:af:0e:f0:4b:d9:3d:e1:bb:b0:
         4f:d0:2b:7c:3f:6a:b1:4e:2c:e9:c6:c9:4b:8e:03:a4:4b:1c:
         b5:3d:c4:f5:78:96:77:54:db:19:f8:a7:63:1d:fe:10:18:82:
         d9:96:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:26 2025 by rpki-client