Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/6QIoE51CZ-wfS1VeqWdQTuejoNU.roa
File:                     6QIoE51CZ-wfS1VeqWdQTuejoNU.roa (raw, json)
Hash identifier:          kbdyKDCdNRaMX8V6JZJDVnrHBnnpw1HGa6+0Aw3QEJs=
Subject key identifier:   E9:02:28:13:9D:42:67:EC:1F:4B:55:5E:A9:67:50:4E:E7:A3:A0:D5
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       03
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/6QIoE51CZ-wfS1VeqWdQTuejoNU.roa
Signing time:             Thu 20 Oct 2022 06:14:21 +0000
ROA not before:           Thu 20 Oct 2022 06:14:21 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        27.122.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:14:21 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=E90228139D4267EC1F4B555EA967504EE7A3A0D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:45:24:b9:f7:ed:1b:f5:39:70:7e:3a:68:
                    8b:18:b5:72:6a:65:d3:77:21:a7:f0:4d:f5:0d:09:
                    98:6b:54:ff:a4:d0:a4:a1:1e:8e:d2:f7:7d:b0:40:
                    6b:fd:9c:04:09:40:36:8e:ad:cf:33:79:ee:ef:eb:
                    8e:3f:07:9f:39:e5:41:1a:87:c1:0e:71:77:c1:f5:
                    1a:da:3b:e0:ce:56:04:d7:0f:a3:8a:ca:5d:f1:8c:
                    21:d3:28:4a:c1:46:2d:d1:8e:ce:b9:0f:83:d2:dd:
                    a7:34:d8:bc:83:02:f5:a3:30:86:42:35:2d:b5:46:
                    8a:c5:ca:ac:ba:8c:9c:10:61:20:56:95:c1:d7:40:
                    6a:03:55:2f:64:92:d2:7a:f2:a5:d1:03:a0:4f:04:
                    0b:da:71:e1:91:0c:83:f0:a1:60:aa:a2:0c:33:f8:
                    ba:43:49:2e:16:78:cf:bb:ae:cd:d6:21:18:09:52:
                    1d:77:68:fb:27:94:70:8b:3e:e2:0d:36:07:53:11:
                    6c:51:53:07:c7:ae:bd:84:57:90:2e:51:01:03:55:
                    22:6a:e6:1c:83:91:08:f9:3d:3b:bb:cc:0f:fe:0f:
                    04:92:cc:55:5d:73:ed:29:25:4f:51:de:c5:b3:c9:
                    3d:4b:0f:93:cb:b5:92:f1:43:e3:c4:7b:ff:62:7f:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:28:13:9D:42:67:EC:1F:4B:55:5E:A9:67:50:4E:E7:A3:A0:D5
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/6QIoE51CZ-wfS1VeqWdQTuejoNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:77:3b:dc:6f:fa:05:b5:4a:04:83:be:96:d7:63:77:c4:
         1e:15:16:e5:0a:ab:6d:22:3c:7b:28:b3:65:bc:77:a1:19:c0:
         35:c8:aa:66:bd:c9:e3:77:f5:8d:93:f0:3c:b1:9d:71:a6:16:
         63:07:f4:92:33:5b:48:09:2d:c8:26:6e:30:5c:56:62:b7:13:
         e5:5f:46:cd:86:10:3b:46:b4:4f:75:8e:ba:38:61:73:5a:be:
         e6:ad:97:28:c1:c2:f4:8b:a6:9e:e8:b3:b7:90:b1:6f:3c:bf:
         89:59:f3:5f:eb:0c:70:40:92:49:05:34:ab:8e:fe:2f:ec:c0:
         75:b8:a4:21:9e:c1:5b:17:0f:0a:41:5b:64:30:02:2a:6a:54:
         69:d4:8a:a3:08:43:d0:4a:88:a2:3a:d0:90:3d:ca:66:59:16:
         52:7f:12:d6:ad:26:12:fd:03:31:99:da:53:50:20:c7:d8:b9:
         de:b0:ce:ef:46:dd:5f:ff:c6:63:76:ca:bb:3d:58:59:59:2c:
         5e:e1:d4:0f:86:3e:c2:7a:7b:6d:04:18:ad:04:d3:3b:75:d2:
         09:7b:7e:2e:2c:68:ef:cc:e4:8c:e8:c3:57:80:20:e3:e7:f5:
         6b:9f:57:64:b6:cd:e7:45:52:e9:cf:8c:3a:f9:fa:88:b1:00:
         60:f6:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:13 2025 by rpki-client