Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jjJN-p2kI_Gb_qtkJ780FU_zf9U.roa
File:                     jjJN-p2kI_Gb_qtkJ780FU_zf9U.roa (raw, json)
Hash identifier:          eTKhsAmhwSluLy9jldIfAfPEAmmggzygxYVifhKBFHo=
Subject key identifier:   8E:32:4D:FA:9D:A4:23:F1:9B:FE:AB:64:27:BF:34:15:4F:F3:7F:D5
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       45
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jjJN-p2kI_Gb_qtkJ780FU_zf9U.roa
Signing time:             Tue 23 Feb 2021 08:57:33 +0000
ROA not before:           Tue 23 Feb 2021 08:57:33 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        210.250.64.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:33 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=8E324DFA9DA423F19BFEAB6427BF34154FF37FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:1d:f5:10:83:79:3a:c0:47:e3:56:e5:dd:
                    e6:a4:6e:4b:c8:34:e1:25:f3:2f:b8:b9:2e:f2:01:
                    dc:bf:82:80:58:1a:53:df:9c:0b:9a:66:83:0d:79:
                    48:31:92:b7:69:ff:c0:29:a2:90:60:73:22:84:41:
                    fb:39:09:86:4f:d0:b8:e9:ef:b4:94:50:22:6f:ac:
                    27:0f:25:c5:fc:ec:e0:8b:1f:6c:d3:9b:0d:bd:d2:
                    45:fa:ad:df:e2:c4:35:c5:7a:ea:a9:e8:9c:93:5e:
                    e7:6a:34:a7:89:d0:9f:ce:29:e6:66:f6:a4:06:47:
                    4d:2a:7c:bd:ee:31:4b:82:55:f5:05:75:36:ae:f4:
                    09:11:74:e8:f7:41:14:22:5f:8b:91:91:99:17:cd:
                    fd:61:5e:61:6e:de:a9:d2:ba:f5:49:d8:ce:dd:69:
                    1d:b2:36:6a:da:21:82:e4:c7:17:f3:f8:15:66:69:
                    68:b5:29:89:53:84:29:ca:83:e0:f7:ca:1e:a2:17:
                    43:34:0b:6c:35:dd:94:fb:9f:30:d4:3f:eb:c1:65:
                    d9:5c:1d:0a:95:20:c1:d4:95:67:7c:d0:c1:92:2e:
                    13:8d:7e:4d:59:cb:ab:5a:a5:3a:1d:45:17:07:fd:
                    fd:50:7c:f3:6f:62:05:6b:d8:fc:92:73:e3:36:82:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:4D:FA:9D:A4:23:F1:9B:FE:AB:64:27:BF:34:15:4F:F3:7F:D5
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jjJN-p2kI_Gb_qtkJ780FU_zf9U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:13:bd:47:ed:0a:ff:01:f7:12:d7:ef:c4:f5:d5:e7:82:
         c7:31:c6:f1:7e:a7:60:dd:7a:66:f6:3a:4b:c6:e8:aa:65:11:
         21:8a:d3:da:94:0a:22:fd:31:6f:42:af:fd:fd:6c:c1:ac:df:
         5d:e7:4c:a0:5a:91:d7:01:15:ac:8b:8b:80:cc:52:e9:94:f1:
         20:24:d8:03:b4:03:a7:78:15:d8:4b:48:72:70:fe:e4:21:18:
         5c:d9:c1:8d:e0:18:c4:57:90:44:6f:22:c8:e2:cc:66:3a:bc:
         68:55:47:e1:bb:dc:51:49:e8:e1:24:c5:b4:b0:96:1f:c6:ce:
         68:79:0c:0f:be:49:d1:46:ae:51:9f:09:41:84:d3:d2:e6:95:
         2a:35:dd:86:3f:ed:8b:3b:a5:1c:a2:a9:d4:98:ae:0a:d9:d1:
         48:6d:c8:d9:90:48:37:f5:a8:15:a7:cc:ca:9c:d3:06:33:7a:
         9f:4a:3e:85:79:ab:ff:1b:4a:1b:31:2d:d7:a6:75:9a:27:7e:
         3e:ee:25:f8:64:0c:9a:f4:5f:70:ce:99:f9:5a:73:04:c0:37:
         d6:60:a8:20:4b:73:86:ad:e9:99:f3:e5:fc:29:75:99:a5:ea:
         47:f8:53:d2:cf:65:74:42:a7:21:73:d9:0a:45:36:90:24:42:
         24:5b:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:29 2025 by rpki-client