Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qEqHUnDwL8AhqYGK0GwpMB7Rpww.roa
File:                     qEqHUnDwL8AhqYGK0GwpMB7Rpww.roa (raw, json)
Hash identifier:          tvzEveZLXSbxcJ6U7NBWpGvAPMSa7Vz9QjzhK7Mccm0=
Subject key identifier:   A8:4A:87:52:70:F0:2F:C0:21:A9:81:8A:D0:6C:29:30:1E:D1:A7:0C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       019A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qEqHUnDwL8AhqYGK0GwpMB7Rpww.roa
Signing time:             Fri 07 Jul 2023 04:12:42 +0000
ROA not before:           Fri 07 Jul 2023 04:12:42 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.215.44.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:42 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A84A875270F02FC021A9818AD06C29301ED1A70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:b7:f7:06:fd:54:65:42:5e:c0:e1:c7:b0:
                    30:8b:56:ef:78:4a:96:16:5c:7d:55:3c:45:6f:e6:
                    44:8e:96:e7:81:81:14:c7:30:0f:4d:00:b5:c9:96:
                    a0:bf:af:19:67:85:d0:74:c5:0e:dc:74:8e:80:e1:
                    e7:d9:7a:a9:25:af:1d:8c:ea:d9:51:0c:af:76:08:
                    cc:b9:dc:ba:da:3b:93:f6:a6:c8:dd:5a:7e:33:eb:
                    e4:7e:fb:41:9d:bb:54:1b:b5:5c:ff:f5:e1:ec:ee:
                    6f:f8:88:77:8d:ba:a0:87:07:38:7e:55:38:a7:95:
                    fe:3f:df:96:2d:f0:27:96:71:1b:a0:aa:51:31:1e:
                    7b:2b:ca:dd:bc:2f:57:89:99:50:e2:54:29:10:b9:
                    d4:01:ee:ac:d3:6c:56:71:f0:b8:10:fb:89:e8:e8:
                    c0:3b:9e:10:98:df:12:4a:6e:75:f5:cc:b9:48:3f:
                    6f:d2:a7:75:a8:e6:eb:ad:56:19:5d:be:77:73:3b:
                    7a:17:47:bd:98:41:5a:8b:7d:2e:c7:5e:3e:ee:db:
                    33:20:3f:14:4e:3f:a6:09:40:3e:01:d0:97:21:4c:
                    99:57:64:0e:2a:f4:6e:ae:40:b7:a3:a5:74:76:56:
                    4e:28:4c:cd:f0:95:cd:01:70:04:7a:06:fc:e2:1d:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:87:52:70:F0:2F:C0:21:A9:81:8A:D0:6C:29:30:1E:D1:A7:0C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qEqHUnDwL8AhqYGK0GwpMB7Rpww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:e3:4d:96:1a:01:6f:0d:2b:32:78:97:62:07:83:b1:2b:
         b0:54:25:9a:17:b8:f8:a8:f2:30:32:55:50:55:30:50:4f:5c:
         43:2c:6b:ac:e2:3e:b5:d7:d4:79:eb:00:c1:09:f4:42:b3:2e:
         39:30:ad:80:27:fd:9f:20:29:76:68:bf:8e:21:50:12:83:70:
         61:b8:e4:de:a4:b6:92:05:6a:f9:68:8a:b3:bc:9b:24:0b:11:
         62:bf:f0:a4:cc:a2:ce:23:b1:bb:72:2a:c1:62:38:d8:f8:0e:
         4a:b6:ad:c1:65:c5:50:9d:04:f2:ac:f8:5e:9c:f9:0b:37:3a:
         02:c9:fa:52:48:ed:d2:06:98:30:6e:8b:95:9d:75:14:05:26:
         ce:0b:be:ad:4d:6d:39:d0:e7:44:0d:3e:68:e5:57:9b:3b:4c:
         60:b9:86:1b:19:71:59:a4:6c:1a:15:4f:d1:7d:a5:06:2d:e4:
         18:f5:7d:40:14:51:51:09:9c:86:c3:1f:16:ef:1e:0d:3e:32:
         3c:3f:09:51:b3:02:48:5f:74:4e:8f:43:f9:55:ff:6c:38:16:
         80:92:25:3f:6a:4c:27:da:e4:ab:a5:11:32:9c:cd:b8:28:00:
         82:a9:85:ed:41:0e:cf:fd:eb:1f:ce:62:a8:38:09:62:76:e5:
         f1:d8:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:17 2025 by rpki-client