Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/gOGNzdHPDw7lDAiAlGioJYe_vuM.roa
File:                     gOGNzdHPDw7lDAiAlGioJYe_vuM.roa (raw, json)
Hash identifier:          7AVEPpk3YuFHW4sq4TtBA3Y4FGYES4R0bzLBUrPoNOQ=
Subject key identifier:   80:E1:8D:CD:D1:CF:0F:0E:E5:0C:08:80:94:68:A8:25:87:BF:BE:E3
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       31
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/gOGNzdHPDw7lDAiAlGioJYe_vuM.roa
Signing time:             Sat 01 Oct 2022 01:29:48 +0000
ROA not before:           Sat 01 Oct 2022 01:29:48 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     131896
IP address blocks:        103.239.16.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Oct  1 01:29:48 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=80E18DCDD1CF0F0EE50C08809468A82587BFBEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:12:70:18:63:20:c3:06:24:24:cf:bb:76:
                    31:f4:c3:13:98:27:9c:7a:6c:0b:2d:77:19:b0:63:
                    62:ce:e4:5c:1e:2e:ba:b1:96:6d:0c:23:c8:3e:bf:
                    cc:28:d2:2d:58:80:a9:ca:d0:71:8d:6d:4c:d2:5f:
                    be:6f:b8:b2:8b:99:d0:31:df:18:10:0f:5c:c5:c8:
                    5d:8c:ba:a6:48:d8:a6:9f:2e:58:e4:81:91:b5:3e:
                    78:5c:1b:62:9b:3e:04:3f:e9:c0:de:04:bd:d9:5d:
                    3b:e7:b3:a8:c8:9b:6b:27:3c:59:d0:51:9b:f8:09:
                    dd:da:ac:e3:9f:29:88:bd:62:8d:5c:3d:af:cd:74:
                    1e:0e:41:60:7d:6c:a7:06:f5:e1:78:ff:e9:cb:c7:
                    f2:41:86:a3:37:bf:cc:44:83:c1:05:9c:1c:e3:1c:
                    62:6b:92:a8:b3:3e:be:c2:e0:64:fe:e3:e0:c2:41:
                    71:ac:e5:d8:36:c0:e6:c3:f5:1a:44:53:f3:f0:86:
                    d1:7d:04:28:c9:2d:03:0c:00:43:79:cc:85:45:5b:
                    0b:45:b4:80:ba:9b:c9:97:5c:55:49:f6:b6:09:01:
                    90:75:54:dc:73:ed:4b:4d:43:9a:76:a8:93:2d:89:
                    4e:ba:9c:5e:87:60:2d:17:92:4e:c7:2f:fd:e9:c5:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E1:8D:CD:D1:CF:0F:0E:E5:0C:08:80:94:68:A8:25:87:BF:BE:E3
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/gOGNzdHPDw7lDAiAlGioJYe_vuM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:76:97:54:e6:d9:a3:67:d2:16:ee:1a:b5:4f:8f:f2:a1:0f:
         2d:e2:d4:cc:ee:da:be:fc:b8:95:15:a9:2c:2d:e7:e4:fe:91:
         64:29:cc:1f:ae:4c:69:ea:6a:99:36:ef:52:34:be:a0:b2:b0:
         44:ed:f6:ba:e2:8f:89:ea:0b:f2:ff:02:2f:6c:ba:21:a7:38:
         9c:2c:b1:d2:aa:a8:35:e0:51:1e:ce:7e:b5:d0:88:a3:ef:f1:
         69:65:c3:2e:85:b3:dc:ed:bb:55:74:e4:30:ab:b4:1b:fb:b2:
         5b:08:06:3b:02:9e:2e:f6:2a:b7:a4:1f:86:13:67:fc:92:a4:
         66:41:f3:3e:49:02:28:0a:4e:5f:9a:fe:0d:19:12:96:67:1c:
         70:80:21:3f:14:bd:cb:2b:a9:fb:b8:22:96:8d:36:cb:13:00:
         d1:30:73:53:cd:f8:8e:a7:34:91:97:d5:18:0f:60:8c:0a:95:
         cb:3d:9d:14:ee:6f:e8:26:b7:56:f5:89:09:12:7a:82:5e:c6:
         0c:a5:58:fb:22:79:1b:fc:35:29:4d:9d:66:54:1f:f0:d8:83:
         71:15:4b:2d:9c:67:78:ff:14:d2:b7:48:18:6a:54:0f:15:be:
         3b:43:44:da:c0:c7:ad:1d:5e:93:db:9d:95:62:f4:52:5c:3e:
         de:5d:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:33 2025 by rpki-client