Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/lmUt4pI1tjhZQpoRJSfuI4kO5R0.roa
File:                     lmUt4pI1tjhZQpoRJSfuI4kO5R0.roa (raw, json)
Hash identifier:          dBPyUcqxMo1m9dm6+tf9TMgWap56SWtAZjIAXxEPFoM=
Subject key identifier:   96:65:2D:E2:92:35:B6:38:59:42:9A:11:25:27:EE:23:89:0E:E5:1D
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       07
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/lmUt4pI1tjhZQpoRJSfuI4kO5R0.roa
Signing time:             Wed 23 Aug 2023 01:46:24 +0000
ROA not before:           Wed 23 Aug 2023 01:46:24 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     23791
IP address blocks:        124.246.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Aug 23 01:46:24 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=96652DE29235B63859429A112527EE23890EE51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:37:5d:ed:24:89:59:8e:c9:41:40:c8:b0:
                    71:2c:0b:25:53:46:8f:62:0b:20:2b:3c:9a:52:56:
                    c8:34:96:d4:4a:b5:f1:80:7a:cd:8e:77:3d:e9:3d:
                    f0:d1:2f:f8:57:79:e0:69:e3:38:d5:c6:3f:7c:42:
                    6d:10:cd:f5:81:e4:ba:ca:46:8c:e5:46:7e:6b:b2:
                    b4:96:49:67:e3:a0:e8:b0:d5:42:1a:ed:7f:01:a8:
                    c1:53:cd:98:be:13:b8:f1:52:b6:10:05:91:44:fc:
                    27:51:54:0d:c1:dd:d5:78:72:85:36:95:be:68:2a:
                    ea:d9:e7:08:f1:d3:29:d2:8d:a2:01:ea:f7:4a:b2:
                    a2:ba:ec:71:46:d2:d7:43:81:7b:7f:58:8c:78:e3:
                    8d:84:6b:41:52:e9:7d:a5:d3:f2:98:32:87:23:47:
                    d7:0f:e0:6a:cd:18:14:ff:3d:c6:73:76:3c:fd:a1:
                    3b:bd:5c:b1:3f:bc:2d:1e:c6:f3:9b:ce:47:50:27:
                    d0:8a:03:5d:45:9c:a8:ad:e7:28:23:82:34:38:fe:
                    c3:6b:eb:60:1c:d9:61:8f:82:8b:29:05:18:18:01:
                    09:bb:5f:9e:15:00:e1:d0:a2:a7:22:79:53:fc:5a:
                    71:02:92:8d:2f:90:a0:52:f5:66:d5:d2:45:22:15:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:2D:E2:92:35:B6:38:59:42:9A:11:25:27:EE:23:89:0E:E5:1D
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/lmUt4pI1tjhZQpoRJSfuI4kO5R0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.246.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         e7:fe:70:fd:61:b0:39:87:df:cb:97:76:5b:a4:2d:08:c7:04:
         6b:97:2e:e2:f7:38:58:09:9f:ce:bf:7e:ee:11:d6:d7:e2:c9:
         8f:d0:f2:57:38:8f:24:20:3e:1b:90:ae:fd:ce:51:e4:22:0b:
         f7:d2:83:3a:4f:49:5d:4d:a9:6c:6d:ae:a4:fc:cd:ca:7c:7c:
         4b:44:a8:b9:98:91:42:32:00:85:08:c5:b2:c2:47:58:9e:f4:
         44:2b:75:4e:4d:6a:f0:b7:83:1d:e5:6c:70:5c:fe:ad:3b:28:
         a7:a8:a1:f1:cc:e1:64:e2:6c:0e:05:77:2e:f9:57:89:d4:c1:
         fd:59:48:98:57:dc:14:de:64:3b:6f:46:16:60:16:13:b8:36:
         bc:af:b8:12:5e:67:d5:62:5b:3f:2d:f4:15:17:84:64:9b:e9:
         54:ea:5e:81:9e:79:ee:af:d8:f3:30:15:1d:e4:c2:b6:1e:04:
         b3:fb:56:0c:3c:5f:cb:6d:c9:28:dd:df:34:9d:25:69:cb:54:
         21:95:8b:28:27:8f:39:40:fd:4f:32:93:54:e3:bd:31:22:20:
         cb:b4:e6:d6:bc:0d:37:f9:c9:91:91:24:53:d9:9d:48:8f:c0:
         43:3b:4e:7c:6e:43:e6:83:95:14:ff:46:3f:9a:02:69:e1:d1:
         af:7b:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:36 2025 by rpki-client