Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qkKIHv5O_xbituW-l9IOX_IQfGM.roa
File:                     qkKIHv5O_xbituW-l9IOX_IQfGM.roa (raw, json)
Hash identifier:          eVTaQI+YMjb6Ih2c6IiYmPSQFS7kMY2g/a/FyehgAwI=
Subject key identifier:   AA:42:88:1E:FE:4E:FF:16:E2:B6:E5:BE:97:D2:0E:5F:F2:10:7C:63
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01AC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qkKIHv5O_xbituW-l9IOX_IQfGM.roa
Signing time:             Fri 07 Jul 2023 04:14:33 +0000
ROA not before:           Fri 07 Jul 2023 04:14:33 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        202.75.232.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:33 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=AA42881EFE4EFF16E2B6E5BE97D20E5FF2107C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:21:bf:93:b5:62:97:b3:cb:58:dd:6b:5b:
                    5a:ec:1d:55:37:74:19:f2:17:a6:65:29:1c:ec:ec:
                    d8:d3:03:b8:53:c9:c9:58:5b:4a:aa:f1:0c:24:c0:
                    f7:00:e1:1e:23:a2:89:07:d7:8a:2c:34:d4:f1:31:
                    cb:c5:5c:ba:dd:9b:d2:4f:a2:fb:6c:c6:6a:cf:5f:
                    14:b5:49:9f:79:7f:25:75:c0:6e:da:91:ee:cc:69:
                    96:d3:63:51:e9:32:39:f1:86:41:b0:2f:21:49:a3:
                    d9:4d:b1:53:22:ee:62:0b:6a:a3:89:72:69:df:af:
                    8c:4a:aa:fd:0f:aa:bb:13:72:d7:1b:e1:3c:ee:4a:
                    17:7a:3a:2a:e4:f6:84:6c:a3:9b:cd:05:8f:c6:81:
                    78:d1:36:b4:9f:89:a1:6d:26:8b:37:50:64:90:79:
                    80:d6:b3:e8:f6:fe:e9:bd:67:77:5d:13:10:fb:e6:
                    ce:51:1d:38:ba:4e:54:a7:69:01:95:3f:e7:9d:3b:
                    1b:71:35:32:f2:e9:5c:3a:ab:52:d3:7c:15:61:8f:
                    da:4a:41:49:6b:11:79:2e:76:44:37:58:7c:07:c1:
                    a5:03:be:e4:98:cb:a0:91:33:44:7e:cc:f4:5d:c4:
                    2d:5a:b9:e6:60:a3:7c:1d:a3:ff:e1:72:8a:0b:1c:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:42:88:1E:FE:4E:FF:16:E2:B6:E5:BE:97:D2:0E:5F:F2:10:7C:63
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qkKIHv5O_xbituW-l9IOX_IQfGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:1c:0b:e3:7e:df:03:d7:cd:7e:48:82:e9:c0:4c:c0:92:
         92:19:8b:a5:f1:21:9b:27:88:13:cc:28:3c:a6:f3:9c:43:91:
         a8:3a:a7:63:1a:fb:f4:5e:45:97:35:e3:78:ff:2e:f6:bb:42:
         ea:d6:c3:47:c3:4e:30:ee:45:17:c2:c6:b4:06:90:b8:2f:8c:
         09:4c:4f:27:31:74:bd:8f:5a:da:76:c5:46:95:7e:65:43:51:
         e2:18:81:43:79:be:6b:9f:25:46:81:33:ca:78:15:9f:6f:ba:
         1d:9a:e1:cd:89:23:57:0c:ee:db:a3:07:67:04:51:0e:a8:50:
         a5:8f:b0:f6:2c:30:54:00:41:41:f5:83:27:99:e8:80:26:6b:
         13:58:c8:07:6d:0e:e4:f8:6f:36:d2:b8:a5:51:13:fd:83:2a:
         71:2c:a3:fa:fe:a6:a9:ac:57:90:d9:84:15:f2:80:1e:63:47:
         41:5b:23:df:5b:7c:b6:e6:cd:db:39:94:b3:3b:ea:81:de:09:
         8a:79:41:6c:bb:09:a9:f5:31:69:c9:b8:a2:54:ce:1b:d1:0f:
         ae:04:b9:22:aa:58:54:fa:66:a2:a6:08:04:90:55:6e:18:43:
         c8:ef:fe:e5:cc:c3:e7:d3:c6:ab:03:95:12:16:cf:cf:14:ec:
         df:cf:7e:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzNaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFBNDI4ODFFRkU0RUZG
MTZFMkI2RTVCRTk3RDIwRTVGRjIxMDdDNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGzSG/k7Vil7PLWN1rW1rsHVU3dBnyF6ZlKRzs7NjTA7hTyclY
W0qq8QwkwPcA4R4jookH14osNNTxMcvFXLrdm9JPovtsxmrPXxS1SZ95fyV1wG7a
ke7MaZbTY1HpMjnxhkGwLyFJo9lNsVMi7mILaqOJcmnfr4xKqv0PqrsTctcb4Tzu
Shd6Oirk9oRso5vNBY/GgXjRNrSfiaFtJos3UGSQeYDWs+j2/um9Z3ddExD75s5R
HTi6TlSnaQGVP+edOxtxNTLy6Vw6q1LTfBVhj9pKQUlrEXkudkQ3WHwHwaUDvuSY
y6CRM0R+zPRdxC1aueZgo3wdo//hcooLHEBHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqkKIHv5O/xbituW+l9IOX/IQfGMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3FrS0lIdjVPX3hiaXR1Vy1sOUlPWF9JUWZHTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALKS+gwDQYJKoZIhvcNAQELBQADggEBADLKHAvjft8D181+SILpwEzAkpIZ
i6XxIZsniBPMKDym85xDkag6p2Ma+/ReRZc143j/Lva7QurWw0fDTjDuRRfCxrQG
kLgvjAlMTycxdL2PWtp2xUaVfmVDUeIYgUN5vmufJUaBM8p4FZ9vuh2a4c2JI1cM
7tujB2cEUQ6oUKWPsPYsMFQAQUH1gyeZ6IAmaxNYyAdtDuT4bzbSuKVRE/2DKnEs
o/r+pqmsV5DZhBXygB5jR0FbI99bfLbmzds5lLM76oHeCYp5QWy7Can1MWnJuKJU
zhvRD64EuSKqWFT6ZqKmCASQVW4YQ8jv/uXMw+fTxqsDlRIWz88U7N/Pfj8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:33 2025 by rpki-client