Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rItcvMwiAgNQeDcTDAaGzkRvSDc.roa
File:                     rItcvMwiAgNQeDcTDAaGzkRvSDc.roa (raw, json)
Hash identifier:          K9Zl7NX/SExKUtcySVO53F6IhN7dpl5CaNp32hDAfF4=
Subject key identifier:   AC:8B:5C:BC:CC:22:02:03:50:78:37:13:0C:06:86:CE:44:6F:48:37
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       2C
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rItcvMwiAgNQeDcTDAaGzkRvSDc.roa
Signing time:             Fri 29 Sep 2023 06:36:56 +0000
ROA not before:           Fri 29 Sep 2023 06:36:56 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        203.215.56.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:56 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=AC8B5CBCCC220203507837130C0686CE446F4837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:55:a4:43:24:65:73:b5:5d:d0:0a:a2:0e:
                    79:47:3f:a0:b5:f1:23:e0:e9:eb:fc:1c:58:65:43:
                    84:46:19:e9:25:96:90:79:b8:2a:81:0a:23:af:ed:
                    d8:35:36:d8:85:93:de:d9:72:7e:c8:5e:ef:a5:88:
                    27:37:0b:c6:42:a6:0f:aa:5d:e1:03:16:85:28:79:
                    85:8b:ef:8e:2e:6c:50:32:db:cb:9c:2a:94:0f:3f:
                    81:1c:22:97:f7:e8:51:96:dc:00:24:97:07:2a:70:
                    f3:c7:56:a0:5b:81:11:26:88:15:a1:30:d5:6e:04:
                    c6:a2:e0:c4:3c:4c:8e:07:8c:3f:b1:85:04:f0:44:
                    b2:b4:91:2e:78:f9:bf:01:79:ce:95:88:00:38:0e:
                    83:09:da:32:87:ef:79:58:67:53:67:62:8c:92:3f:
                    c4:64:c4:a1:42:ae:6b:5c:4b:8a:cf:26:1a:b9:3a:
                    a5:2a:d8:94:ce:e6:46:4d:0d:64:6f:11:e7:26:e1:
                    48:da:ad:7d:39:d7:a2:99:e7:35:91:34:87:cd:12:
                    d1:2d:6e:b6:6f:77:b5:c2:86:b0:af:2c:3e:b9:d6:
                    e4:45:9d:4b:fc:a1:fc:ed:6a:a4:34:1f:21:ef:ca:
                    82:7c:44:b0:27:99:31:ec:4b:92:90:dc:48:c7:5b:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8B:5C:BC:CC:22:02:03:50:78:37:13:0C:06:86:CE:44:6F:48:37
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rItcvMwiAgNQeDcTDAaGzkRvSDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.215.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:13:e1:5e:26:40:86:55:07:f0:fd:2e:93:47:05:89:db:29:
         10:ab:04:68:aa:ab:68:6e:51:4e:fc:70:76:ea:a5:2d:72:19:
         0a:c4:16:8c:c9:17:46:8c:c0:24:06:d6:2e:5f:d2:95:f7:71:
         af:ae:a9:89:1a:73:8f:b1:85:c2:c8:b5:2e:06:b7:28:d7:c5:
         26:6a:73:2d:f0:18:c9:89:f4:d8:3a:fe:a6:f3:64:ba:93:4a:
         3e:0e:d8:9c:43:78:db:30:8b:ca:91:68:43:e6:16:a9:25:74:
         bc:ee:c2:3a:f9:53:f8:c3:18:a3:ae:9a:23:65:26:74:c5:2c:
         7e:c3:80:2b:9b:56:93:41:d3:79:54:14:97:37:78:e2:c2:f4:
         7b:70:a1:76:9a:3c:9b:f2:0f:5a:b7:80:49:ba:23:9e:e1:89:
         ec:1a:28:fa:d2:8c:5f:ef:7c:f3:31:12:fb:d1:fb:5d:79:27:
         53:b8:ee:5a:8d:ea:3b:8c:36:b7:f6:27:ef:07:0c:a6:ea:42:
         a7:dc:72:a5:9c:3c:ca:1c:5b:e8:ad:77:79:26:5f:a4:46:42:
         12:ad:04:32:ed:0a:42:38:c2:e5:7a:86:b6:b7:47:bd:40:4a:
         88:b7:b1:9b:45:8c:f5:2d:67:3c:b8:07:22:9a:17:1d:f6:38:
         d5:6b:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:00 2025 by rpki-client