Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CznYjdmTQoDkbB1mak5uEEmt_PA.roa
File:                     CznYjdmTQoDkbB1mak5uEEmt_PA.roa (raw, json)
Hash identifier:          YvatqOUWYD5DIQuRmKbYaGrkueu/i8gv0gmfiIDl3tY=
Subject key identifier:   0B:39:D8:8D:D9:93:42:80:E4:6C:1D:66:6A:4E:6E:10:49:AD:FC:F0
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       E6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CznYjdmTQoDkbB1mak5uEEmt_PA.roa
Signing time:             Sun 01 Jan 2023 01:31:08 +0000
ROA not before:           Sun 01 Jan 2023 01:31:08 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        218.110.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:08 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=0B39D88DD9934280E46C1D666A4E6E1049ADFCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:42:8d:bf:8e:b0:01:43:33:53:61:a0:6b:
                    46:d7:87:fb:94:68:7a:07:87:c9:e5:02:db:94:c0:
                    01:75:5e:6c:85:22:77:2e:9c:ba:d1:53:11:00:a8:
                    a0:d4:22:41:c6:1d:4d:8e:60:65:5a:f6:12:c5:f6:
                    a3:29:f3:c0:53:67:ee:d9:e7:40:01:21:3b:5d:e1:
                    71:41:a5:cb:fd:f3:38:9a:83:4a:ea:99:49:65:61:
                    36:6b:ef:ad:f5:50:5f:5d:bd:86:b6:23:4e:68:1e:
                    bd:3a:da:5f:73:97:30:5b:16:bc:fe:44:0e:75:bb:
                    53:ec:b3:fb:04:cc:0b:75:16:ff:d9:8b:3e:05:0d:
                    80:2c:2e:02:a4:eb:36:9c:0b:0f:42:f4:2a:6f:3e:
                    ca:f3:19:b2:6b:e1:fb:5a:8a:60:d6:b7:38:63:65:
                    4c:71:29:26:de:36:fa:38:da:b4:b7:2e:19:d6:dc:
                    aa:6b:bf:3c:fe:cc:e2:0b:51:9b:3a:79:12:20:1b:
                    cb:a2:fc:4d:72:b9:c2:16:c8:a6:ec:7e:aa:02:30:
                    59:22:fe:7c:9e:a4:a8:31:0a:5c:01:04:d1:b1:39:
                    9f:44:3f:c7:a6:5e:a4:37:88:82:13:f1:f0:6c:6c:
                    e0:ab:bf:1d:1c:73:90:30:63:2b:5e:d8:ef:4f:4b:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:39:D8:8D:D9:93:42:80:E4:6C:1D:66:6A:4E:6E:10:49:AD:FC:F0
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CznYjdmTQoDkbB1mak5uEEmt_PA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:e7:73:85:94:1f:fe:db:56:78:7a:8c:a4:78:4f:73:b8:
         cf:a7:b1:3a:11:73:af:d2:a1:67:c4:a2:a8:bf:9c:1e:34:da:
         d5:3b:8a:e6:7d:fb:8f:45:68:55:0a:9c:b1:f4:30:73:6f:69:
         d9:b0:2d:9e:ff:3b:71:65:10:03:86:63:93:46:05:70:70:f4:
         8f:7b:9d:fe:f3:b0:ef:9a:6d:00:ac:2f:9a:07:3d:e6:2f:5c:
         9f:7c:d5:9a:be:03:e0:95:71:d7:29:aa:f3:c2:a3:20:11:66:
         ff:4a:eb:e4:c2:c5:0f:07:13:13:68:24:6b:75:44:f9:a3:56:
         52:a7:e8:83:85:a8:a5:b4:12:35:2b:b1:ad:29:a7:04:ac:a2:
         4b:1e:14:f8:96:cf:0b:66:1a:6d:71:d1:91:72:12:43:3b:57:
         ca:35:f1:30:c5:c3:b8:e7:85:4c:b7:ed:c7:10:36:b8:b6:b3:
         09:92:4a:32:e3:4c:45:8e:a6:2d:a0:df:e0:c6:33:b6:7f:6c:
         07:7c:3a:d2:ed:72:7e:55:9f:3b:0f:b5:c1:3c:ea:74:c6:ec:
         3a:cc:07:f9:1d:9c:ef:84:4a:f3:49:ba:71:f5:7e:99:e1:10:
         69:2d:c2:2d:34:f4:33:b4:8e:5f:ba:41:e0:20:76:84:f3:9f:
         1a:60:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:05 2025 by rpki-client