Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/NqHBp40loDJCEK4HNf1ZQe3Mfos.roa
File:                     NqHBp40loDJCEK4HNf1ZQe3Mfos.roa (raw, json)
Hash identifier:          pz+SSfu3tvubjole3szyWhAq61LbhlJJZzC3cqscIks=
Subject key identifier:   36:A1:C1:A7:8D:25:A0:32:42:10:AE:07:35:FD:59:41:ED:CC:7E:8B
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       11
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/NqHBp40loDJCEK4HNf1ZQe3Mfos.roa
Signing time:             Thu 20 Oct 2022 06:24:20 +0000
ROA not before:           Thu 20 Oct 2022 06:24:20 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        202.224.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:24:20 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=36A1C1A78D25A0324210AE0735FD5941EDCC7E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:aa:31:f3:f1:fb:44:cf:9f:27:34:79:ad:
                    60:82:f3:fa:17:27:b0:60:56:d7:51:18:ae:a3:03:
                    30:f9:81:5f:7b:aa:18:be:ce:0e:92:c2:be:82:a8:
                    f0:6c:ae:07:76:5b:6d:80:7b:f5:94:b4:f2:4e:6e:
                    33:e1:75:64:fd:74:48:ff:f9:53:58:b2:b6:2e:65:
                    93:fb:d0:2d:61:a3:41:2c:66:23:11:e6:63:7f:15:
                    ec:46:c9:cb:8b:f9:a9:15:c1:71:e5:63:ca:92:39:
                    49:f2:b1:d7:66:9a:89:0a:24:80:d3:42:25:e2:02:
                    9d:21:28:2a:d1:2b:a9:f3:9d:89:e1:79:01:fb:25:
                    b6:92:35:de:48:b4:60:fc:1b:b6:22:51:92:ab:26:
                    db:47:9c:e5:92:d5:88:e7:15:89:61:d9:a4:69:c6:
                    cf:0f:5c:f3:6a:36:05:fa:38:18:83:f5:53:7b:69:
                    ea:80:89:37:75:4e:bc:71:03:db:a5:e0:8b:e6:31:
                    9a:b1:b9:ba:50:37:84:ab:93:8b:97:f4:58:c4:55:
                    63:31:3f:f4:fc:fc:43:43:cc:f9:61:4d:58:58:2a:
                    eb:9c:88:70:13:45:39:1e:2f:a4:a5:ef:6d:36:d5:
                    48:86:e5:bd:f1:d4:73:9a:16:33:57:34:6d:ff:24:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:C1:A7:8D:25:A0:32:42:10:AE:07:35:FD:59:41:ED:CC:7E:8B
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/NqHBp40loDJCEK4HNf1ZQe3Mfos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:1b:0e:05:45:5b:c5:72:bf:23:19:5d:1b:04:7a:4f:10:
         55:f2:b0:50:d0:c1:5b:4d:b5:e3:4e:ef:ee:b9:bd:26:a0:d9:
         6a:fc:4b:be:75:af:fb:5b:46:28:0a:41:30:55:d5:4e:0b:38:
         66:c4:e7:b4:d0:37:41:e2:61:e4:31:62:14:41:69:ed:70:7e:
         2e:26:88:7c:15:e1:45:8b:42:50:76:ac:d9:ca:e9:25:33:50:
         41:c5:eb:f1:c1:61:03:42:88:c4:9c:01:a4:ff:7a:b3:1a:86:
         c2:62:e0:3b:44:cb:5b:86:93:09:0b:44:f4:e4:00:7a:98:f9:
         f8:58:40:7b:73:3d:26:3e:27:d4:9a:38:a5:0c:ff:fa:fd:29:
         a3:b9:f7:6e:bd:96:ae:60:d9:6e:0a:f8:e5:72:54:a8:57:bf:
         62:6f:c9:e4:13:0d:f0:b7:6a:58:8b:97:a9:f7:45:2b:1c:8c:
         fd:19:0e:3d:d2:63:88:31:f7:33:1a:cb:b6:cc:b7:de:05:a0:
         70:30:5f:73:a1:8a:7a:b9:ae:1c:75:ff:9c:2a:0f:d2:a3:1d:
         ed:2e:87:1a:bf:07:d3:b5:b9:9f:f0:8d:06:a0:6b:e4:62:c5:
         b4:13:39:2d:ef:bc:d2:8c:3f:d2:88:53:b6:3b:b5:5e:ea:1a:
         50:49:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:59 2025 by rpki-client