Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lMZHzgzGDEg94TgJn2SQ7yuUo5M.roa
File:                     lMZHzgzGDEg94TgJn2SQ7yuUo5M.roa (raw, json)
Hash identifier:          RGMVyFaDWQtRO9jEZMBrREOzvxfjcp/9ELU0gU3mnNA=
Subject key identifier:   94:C6:47:CE:0C:C6:0C:48:3D:E1:38:09:9F:64:90:EF:2B:94:A3:93
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       017F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lMZHzgzGDEg94TgJn2SQ7yuUo5M.roa
Signing time:             Fri 07 Jul 2023 04:12:29 +0000
ROA not before:           Fri 07 Jul 2023 04:12:29 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.66.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:29 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=94C647CE0CC60C483DE138099F6490EF2B94A393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e3:e2:60:3f:95:51:d3:03:31:a3:b5:dc:30:
                    df:17:f8:20:65:94:56:d6:92:8c:34:4f:61:64:c7:
                    a9:15:51:31:25:48:28:9d:aa:a5:18:7c:25:9c:38:
                    02:30:6c:b0:8a:d1:c0:1a:ca:c9:fd:71:86:34:87:
                    8f:b9:4e:23:ed:21:6c:92:c2:44:84:48:92:cf:be:
                    ec:35:b2:7d:e2:ea:95:e3:f1:fb:b3:87:7c:01:a4:
                    13:f4:03:e0:89:b5:f7:1e:d3:28:ac:be:58:95:2e:
                    4e:54:56:8f:66:5a:6f:f8:12:5b:27:ec:e8:66:8b:
                    0f:f3:2c:9e:8b:b4:a1:f2:37:77:92:d6:35:1f:f5:
                    dc:8d:b3:2b:d4:19:79:62:07:ba:7c:1f:77:36:b0:
                    c4:c3:26:c8:8e:07:b9:b3:25:92:64:8b:bb:e4:c3:
                    63:9f:39:3e:8b:14:1d:b4:25:56:2c:c2:fc:4e:69:
                    f4:78:32:ac:89:bb:44:97:94:96:d5:31:89:50:f5:
                    e9:3f:d2:f9:d4:14:0b:b3:da:80:f4:1d:08:de:e9:
                    24:8c:12:98:07:96:71:62:e2:e8:51:c4:22:95:41:
                    f5:b4:a3:5f:07:f5:19:fd:77:63:cd:09:c1:4d:9b:
                    ab:c5:b5:de:94:20:46:63:51:fe:d1:95:68:c7:6f:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:47:CE:0C:C6:0C:48:3D:E1:38:09:9F:64:90:EF:2B:94:A3:93
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lMZHzgzGDEg94TgJn2SQ7yuUo5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:10:22:1c:72:4f:fc:7d:76:66:75:90:81:73:2c:4b:58:b2:
         af:9e:69:db:d2:b2:a4:29:78:c4:eb:8f:79:87:ce:90:a7:4d:
         87:b7:21:63:6c:46:8b:7c:31:5c:9e:9a:fe:f7:0a:64:d8:74:
         3c:62:cc:7c:95:2e:62:d2:ec:57:16:0c:2e:4b:c0:1a:4c:7f:
         56:09:53:d6:f5:2e:40:fd:31:b4:85:be:bf:0c:62:c4:2a:68:
         13:a3:99:a4:48:94:c5:e7:59:d7:25:14:d0:1e:6a:cd:1c:d9:
         26:95:08:da:66:dd:c7:c8:bf:4f:cd:a9:f4:c0:36:3f:19:38:
         ce:c0:72:6a:fb:63:c7:82:ab:ef:ed:3b:99:86:96:d1:85:e0:
         6d:e1:b4:31:4d:e8:e2:91:9f:f3:ed:48:03:a9:62:c2:23:d5:
         9a:93:66:87:39:63:f3:94:42:81:02:d3:99:54:1f:43:60:5e:
         f8:6a:32:29:0b:c5:0c:3c:99:74:5f:ff:ae:d3:db:d1:4d:b8:
         e8:7c:df:6f:2a:46:5a:c3:30:e7:23:71:31:ab:79:87:ae:35:
         51:6d:0d:50:97:c9:c4:16:11:b1:46:71:99:2f:ab:9c:3a:ef:
         ed:b4:78:f5:53:2d:98:ee:6e:8e:45:75:3e:1f:e5:ca:93:3f:
         a2:de:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:22 2025 by rpki-client