Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HOzyTq1V3RLIgEOGFg1CaHbp77k.roa
File:                     HOzyTq1V3RLIgEOGFg1CaHbp77k.roa (raw, json)
Hash identifier:          b8jIP+Go1sjLHHABSO9oCXq4hLq8QgUXu5O3Ds71PQg=
Subject key identifier:   1C:EC:F2:4E:AD:55:DD:12:C8:80:43:86:16:0D:42:68:76:E9:EF:B9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03C1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HOzyTq1V3RLIgEOGFg1CaHbp77k.roa
Signing time:             Sun 01 May 2022 01:32:11 +0000
ROA not before:           Sun 01 May 2022 01:32:11 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.110.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:11 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1CECF24EAD55DD12C8804386160D426876E9EFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:bd:e0:a1:16:46:5f:32:ea:23:c2:34:98:
                    3f:6e:ea:7a:f1:8a:ab:5f:57:9f:aa:14:6e:ce:3e:
                    c5:23:23:01:87:1c:5d:4b:19:d2:33:82:32:53:8e:
                    8a:c4:01:4c:90:ec:ab:7f:3b:92:25:9d:5f:a6:8b:
                    09:e1:af:d6:1c:ff:2a:9b:f1:46:33:fc:a4:c7:cb:
                    66:08:d9:de:4c:8f:36:1d:ac:86:40:d7:13:7a:65:
                    eb:10:dc:21:e3:fe:97:cc:9d:b9:34:fa:d4:9d:99:
                    76:3b:c1:91:fa:c8:dd:3a:c8:39:a8:37:4d:77:46:
                    53:e4:b5:af:c3:e2:ed:ff:5c:fc:78:8b:fd:66:20:
                    ac:c1:e4:3d:59:2e:f0:e7:9e:13:82:ac:b3:3c:7d:
                    40:81:8d:ee:a8:1e:ea:70:1c:22:12:d7:bf:1e:ae:
                    94:19:a0:18:9e:b4:24:a8:84:74:43:24:6a:e1:09:
                    b0:7d:74:7b:0c:e4:4a:2b:a8:03:9d:40:1c:01:11:
                    7d:b5:68:a2:30:dd:d5:bf:8f:0f:17:e8:45:f3:b3:
                    d3:1e:ed:3b:de:60:70:76:c7:d8:94:ab:45:ce:10:
                    11:27:1c:cf:b0:cf:58:ea:f0:34:d0:5e:40:cc:16:
                    26:c0:0d:74:b6:d7:9f:b6:48:be:6d:55:58:12:2c:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:F2:4E:AD:55:DD:12:C8:80:43:86:16:0D:42:68:76:E9:EF:B9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HOzyTq1V3RLIgEOGFg1CaHbp77k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:43:71:7f:d6:5d:c1:55:f0:43:49:6a:1a:58:8f:01:9c:66:
         ef:17:66:d4:a9:01:26:75:dc:ee:e4:d3:29:98:7e:f3:ad:9a:
         c1:88:83:37:60:74:00:92:82:11:4f:3d:eb:78:ef:c0:c2:67:
         b7:d3:00:36:0c:47:d8:7a:77:e4:62:a6:02:6a:5e:be:82:d5:
         74:83:0d:61:81:58:37:ba:a6:f7:76:51:ce:b7:0d:be:a9:37:
         20:9e:b0:84:f0:ac:2e:53:4a:a7:86:f8:99:ca:b9:03:a6:c8:
         06:c4:96:f5:61:05:0e:4c:5b:70:05:9d:3a:e3:1c:ae:0a:57:
         47:3d:31:cc:a0:d3:e2:36:e8:76:f8:23:ed:8d:1c:83:d7:7b:
         97:0f:69:23:4f:3d:76:7e:0e:92:dd:eb:db:78:5d:bd:a5:40:
         40:ce:79:35:e1:45:44:9e:36:15:ba:b7:12:e0:c3:bf:4a:23:
         9f:91:af:78:6e:26:f0:32:c3:07:78:c7:ed:68:34:a9:e4:ad:
         04:5c:74:55:f5:28:c3:ed:cd:d1:a3:f8:1c:09:74:93:da:ab:
         fd:72:13:18:2e:e9:07:40:3f:7a:db:2f:41:43:af:66:56:e4:
         c0:cc:aa:a6:a7:af:e6:aa:f9:31:f4:04:9d:1f:d3:5f:9b:aa:
         c9:cb:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:59 2025 by rpki-client