Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/kOwdeL2xFwkztdB0KkSQ4Vnuwj8.roa
File:                     kOwdeL2xFwkztdB0KkSQ4Vnuwj8.roa (raw, json)
Hash identifier:          6C9C40ZliaIeot9wUjMBPa3NIAsrbnZ2d82krW/cq1Q=
Subject key identifier:   90:EC:1D:78:BD:B1:17:09:33:B5:D0:74:2A:44:90:E1:59:EE:C2:3F
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       26
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/kOwdeL2xFwkztdB0KkSQ4Vnuwj8.roa
Signing time:             Fri 06 Oct 2023 06:05:39 +0000
ROA not before:           Fri 06 Oct 2023 06:05:39 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        116.89.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:39 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=90EC1D78BDB1170933B5D0742A4490E159EEC23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:d8:ac:f5:3f:40:92:fb:b8:8a:e4:6b:e8:
                    46:9c:4b:c9:5e:35:2a:56:3a:c2:ec:f9:d4:26:aa:
                    cf:9a:07:31:76:84:5d:f8:b1:f9:fd:76:b3:13:40:
                    92:ee:04:54:9a:94:e7:e3:9f:c3:95:b9:82:ce:65:
                    53:ff:eb:2f:06:aa:a7:2e:de:d0:b8:86:96:8b:78:
                    b2:47:bb:8a:fd:09:a6:ed:7d:ea:8a:3a:30:87:a6:
                    12:8c:bf:af:09:56:b5:bc:61:c3:39:88:3b:6a:77:
                    d2:87:45:a1:14:ad:50:d5:de:87:5f:4b:45:45:84:
                    60:ca:b5:a6:f7:89:04:ed:d4:39:2b:ee:04:91:96:
                    f6:7f:5c:5f:33:97:5b:cb:d1:6d:c1:81:96:75:bb:
                    52:27:26:2c:5f:51:3d:00:82:40:5e:c6:1d:7c:08:
                    23:1d:0a:09:54:4c:76:af:1d:f1:06:75:40:98:7c:
                    78:b4:1a:fb:10:ce:4e:a2:40:92:9c:b2:f7:67:ee:
                    88:5e:10:0a:38:ec:9f:74:f9:be:78:5c:d5:ca:f0:
                    ff:83:4f:c3:b6:e1:ab:b8:78:8f:97:f5:62:bb:dd:
                    11:ed:df:3e:1a:67:56:6e:74:96:dc:b8:ee:e7:eb:
                    63:7b:d2:b2:f2:2d:a5:06:33:5d:2d:bf:ca:59:07:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EC:1D:78:BD:B1:17:09:33:B5:D0:74:2A:44:90:E1:59:EE:C2:3F
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/kOwdeL2xFwkztdB0KkSQ4Vnuwj8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.89.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:70:61:e8:11:96:eb:fb:12:1e:ac:37:10:c3:1f:f2:fe:28:
         55:73:98:47:3e:5e:db:36:de:29:66:a6:85:ff:7f:9a:f1:62:
         da:ad:57:ca:3d:73:31:47:bc:0f:03:ae:bd:23:e0:f9:2c:d5:
         e1:fe:5c:d8:1a:f4:0e:33:99:9f:1f:90:81:12:e2:59:a8:b1:
         a1:14:2d:c9:e5:df:85:a8:a2:70:42:95:41:b3:76:72:6d:f9:
         7a:80:5c:4c:3f:36:9a:bd:1b:57:7a:6c:d6:cf:cb:99:61:7e:
         a7:f7:c7:0f:84:e7:0f:38:8f:62:e2:22:e5:db:70:d7:93:68:
         a0:47:19:57:66:8c:e1:70:aa:78:f5:7a:e4:c6:78:36:48:68:
         dc:d6:2c:b1:4e:a5:90:66:fe:01:29:9c:57:39:72:10:dd:41:
         43:4c:f5:f9:50:da:a5:65:8f:29:d8:4a:25:04:22:eb:4c:57:
         4b:95:c6:5f:fa:17:0b:ea:83:c7:b3:1e:2c:de:2d:57:d1:c1:
         de:33:1b:66:f7:fe:ca:87:fc:98:f5:13:11:9a:36:15:ea:1c:
         b5:5e:71:09:e3:b4:fa:73:68:c8:5f:d3:21:0a:b6:79:b4:2d:
         01:89:b4:0a:1d:65:3c:f6:50:2a:05:28:43:11:a2:47:4b:90:
         bb:57:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:30 2025 by rpki-client