Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wj8EFY0A5LX40eo-HF3o7udFjuI.roa
File:                     wj8EFY0A5LX40eo-HF3o7udFjuI.roa (raw, json)
Hash identifier:          xubDYxkvF5AEREsZaomKPNOoboApL5zJmnUzUxdtpks=
Subject key identifier:   C2:3F:04:15:8D:00:E4:B5:F8:D1:EA:3E:1C:5D:E8:EE:E7:45:8E:E2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       2F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wj8EFY0A5LX40eo-HF3o7udFjuI.roa
Signing time:             Fri 22 Jul 2022 00:19:59 +0000
ROA not before:           Fri 22 Jul 2022 00:19:59 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.238.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:19:59 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=C23F04158D00E4B5F8D1EA3E1C5DE8EEE7458EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:1d:ee:c7:29:96:d6:af:3c:c7:85:00:cd:
                    ec:4d:26:66:6f:bb:4e:d5:e3:7c:54:e7:04:5f:3b:
                    be:fd:79:f8:ad:5c:c4:ae:e4:1b:45:ac:6c:d3:d5:
                    51:3f:f0:5c:6f:d6:7c:84:6c:c9:9f:25:ba:6a:23:
                    c3:0a:7d:b5:26:32:c3:a7:2f:eb:a9:7c:21:20:02:
                    15:35:fd:b9:a3:e0:6c:52:36:66:02:c2:fa:83:fe:
                    28:4d:43:03:4b:91:59:cd:8c:d7:07:99:03:c8:c4:
                    b0:9c:2b:dc:d8:81:22:4f:22:3f:0d:09:bb:67:85:
                    b9:f5:08:92:1c:0b:26:db:2f:78:7f:ba:46:90:69:
                    f6:f4:6d:7f:15:a6:ef:a6:8c:e9:d1:40:fc:6a:6b:
                    12:35:b7:24:66:f2:f4:dd:3b:bf:14:0e:8b:0b:30:
                    66:79:a6:0e:80:7f:be:27:ce:ef:9c:9b:79:ff:dd:
                    e6:ec:f8:1b:7b:80:4b:72:69:8d:a3:29:65:88:08:
                    7c:38:65:b9:51:9a:97:01:30:58:c4:26:25:4e:94:
                    82:da:17:50:64:d0:1d:81:06:e9:31:c6:a4:d5:5a:
                    8b:76:17:c6:73:62:6f:9e:c3:77:24:3f:05:13:b0:
                    b9:74:c0:70:33:d3:01:c5:5f:8e:7f:fd:53:af:91:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3F:04:15:8D:00:E4:B5:F8:D1:EA:3E:1C:5D:E8:EE:E7:45:8E:E2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wj8EFY0A5LX40eo-HF3o7udFjuI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e5:dd:0a:88:36:ad:37:49:04:bc:13:68:fd:0a:50:0f:41:
         41:4d:e7:7b:3e:e5:68:51:74:fb:c1:29:93:6e:ec:4d:b1:1c:
         ea:82:f2:3a:e3:64:9c:be:fc:61:3e:c8:08:4a:4c:a1:e7:d5:
         9d:7e:9a:b0:8e:a0:8c:0c:24:1a:a8:b2:de:d8:59:75:17:1e:
         29:a1:5e:dd:af:f6:9f:25:d1:b9:1d:7c:ec:ff:6a:4a:4d:a4:
         b0:9b:3e:4e:80:f7:fd:ba:ed:c7:ca:5c:f3:20:7a:28:b1:66:
         2b:e9:68:1b:5f:75:88:8c:1a:4b:45:07:33:14:b4:1b:75:0c:
         3d:19:9b:e7:9b:72:04:17:57:27:b5:ba:a3:f3:bb:23:be:79:
         b9:fe:50:04:97:76:63:02:2c:a0:0e:2b:f7:77:b9:d4:dc:ea:
         bf:e8:94:19:12:63:9d:72:1e:a5:31:34:9e:3e:14:68:1c:66:
         85:a0:d3:e5:81:71:b2:37:11:b2:4c:d2:25:81:6c:14:a3:da:
         b8:99:91:62:0e:52:75:9b:f0:83:d4:66:64:31:4f:44:9a:b2:
         76:44:d0:d9:d2:9e:2c:f1:cb:ad:2f:36:23:d1:46:0b:87:10:
         ee:94:f6:fc:6a:7a:bc:0f:60:3c:f5:17:4d:b3:33:61:20:84:
         76:ca:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:08 2025 by rpki-client