Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/ne1QjbBrSIAu0sGv4Q75CB27KOA.roa
File:                     ne1QjbBrSIAu0sGv4Q75CB27KOA.roa (raw, json)
Hash identifier:          KtCQCiRSxl4ELBwYKJQYezEuUarpHeAelUZqKSs7Aak=
Subject key identifier:   9D:ED:50:8D:B0:6B:48:80:2E:D2:C1:AF:E1:0E:F9:08:1D:BB:28:E0
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       3B
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/ne1QjbBrSIAu0sGv4Q75CB27KOA.roa
Signing time:             Thu 01 Dec 2022 01:28:59 +0000
ROA not before:           Thu 01 Dec 2022 01:28:59 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     131896
IP address blocks:        103.198.110.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Dec  1 01:28:59 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=9DED508DB06B48802ED2C1AFE10EF9081DBB28E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:fe:f2:54:04:66:04:e2:2c:46:03:0e:45:
                    b0:0e:7d:ad:75:37:05:bc:93:42:17:d6:c0:f2:39:
                    5a:af:83:c7:b0:51:63:b6:f2:4d:b4:11:39:14:39:
                    14:10:aa:eb:99:23:c0:47:84:74:af:05:49:1f:80:
                    0f:d4:a2:1a:03:5e:80:fc:0d:08:2a:fa:6f:5e:40:
                    ef:8f:71:03:ca:70:49:60:c2:04:db:b3:51:49:92:
                    65:d4:16:97:a0:1e:81:31:ea:29:69:23:93:15:9e:
                    18:6a:20:eb:6d:ff:cf:e6:7b:3b:47:6c:bc:41:62:
                    02:3e:19:1c:1e:6c:ce:ee:67:de:af:36:30:8e:c6:
                    da:fd:8b:1e:2c:be:68:0e:20:85:a8:b5:15:3c:46:
                    0b:39:97:f9:ee:6c:c4:94:73:24:a6:a5:99:68:6f:
                    7d:69:46:13:12:2a:f0:64:67:8f:4d:31:33:af:29:
                    66:67:0d:ac:9f:ba:14:ae:89:a7:d0:f6:fd:87:4d:
                    ac:d0:18:85:18:8a:98:79:0b:aa:7a:c9:34:38:3b:
                    34:ca:42:67:ce:fd:9c:77:f1:23:1b:49:3c:32:c5:
                    f2:7a:58:f1:6b:f2:03:62:ef:1f:94:29:05:1d:aa:
                    eb:77:ef:17:02:5c:08:ca:31:5d:47:5a:b7:40:6f:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:50:8D:B0:6B:48:80:2E:D2:C1:AF:E1:0E:F9:08:1D:BB:28:E0
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/ne1QjbBrSIAu0sGv4Q75CB27KOA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:89:3f:00:b4:00:20:2e:fb:15:89:df:e9:ef:d1:af:1d:
         ad:40:6c:06:8c:36:d0:02:86:0c:be:a0:6a:f9:50:64:76:fa:
         2b:b8:a0:05:fb:c8:70:83:d6:a4:c9:79:20:8a:32:ea:c7:b0:
         1a:35:e1:4d:d3:2b:6c:44:2a:7e:fc:fc:14:6a:b5:79:7a:ed:
         92:6e:db:c8:1d:a9:88:51:37:30:29:57:0d:13:6c:ca:eb:bb:
         03:12:aa:67:e7:f6:58:75:dd:ba:81:bb:99:23:37:2f:3a:73:
         52:b9:5c:cf:56:0f:e9:70:15:6c:bf:97:26:22:eb:7d:04:22:
         03:5e:6c:10:79:e8:3d:6f:4a:3d:6b:9d:8c:a3:2e:9a:fd:83:
         83:31:cd:7f:1e:06:84:ac:5e:86:84:a1:52:36:8c:53:85:7f:
         ee:e8:ce:ef:7f:0e:5c:a3:9e:99:d0:61:26:f7:91:0b:07:87:
         2b:1f:4d:32:ea:4f:07:dd:3d:ef:ea:74:ee:cd:0b:dd:f0:96:
         e3:bd:f5:74:64:98:dd:e6:80:ff:b3:5e:5f:00:a2:5f:41:12:
         66:1e:4c:ba:f8:5e:09:27:45:d0:04:39:c4:97:78:1e:55:da:
         86:34:18:5c:7f:54:f2:9f:37:77:6e:20:82:d7:23:b9:69:45:
         74:87:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:20 2025 by rpki-client