Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/iyJR-_F3V8dxMxQn0OweQVD22R4.roa
File:                     iyJR-_F3V8dxMxQn0OweQVD22R4.roa (raw, json)
Hash identifier:          NzhsCiR4wUXIX1FddRIgpb8ioyIK2F7zGG2TO2dQRiU=
Subject key identifier:   8B:22:51:FB:F1:77:57:C7:71:33:14:27:D0:EC:1E:41:50:F6:D9:1E
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       26
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/iyJR-_F3V8dxMxQn0OweQVD22R4.roa
Signing time:             Tue 01 Nov 2022 01:28:26 +0000
ROA not before:           Tue 01 Nov 2022 01:28:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23805
IP address blocks:        103.42.168.0/22 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Nov  1 01:28:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8B2251FBF17757C771331427D0EC1E4150F6D91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:a7:37:26:98:33:b8:4c:9a:fd:44:ff:f4:
                    8d:2a:f1:18:18:f3:28:b2:37:91:4b:ef:79:9a:9a:
                    ec:f7:e9:cc:78:29:5d:01:db:89:ba:ca:43:37:de:
                    60:eb:cb:56:9e:e3:d2:87:ae:e9:43:c8:bd:01:88:
                    01:df:86:e7:da:af:9b:61:22:47:1c:9e:88:16:f1:
                    2a:e6:e3:88:16:be:de:e9:f2:b9:88:87:2d:75:3b:
                    e2:45:cc:02:c6:c2:44:78:af:80:56:a9:0f:30:68:
                    7c:7b:37:6c:23:98:b1:8a:f6:62:d7:f2:3c:5a:4b:
                    cb:4a:27:dc:eb:50:ce:a6:01:54:91:2c:63:59:7d:
                    95:c0:8b:59:50:8f:31:ec:0e:41:be:9a:dd:70:e7:
                    32:33:1c:ec:3e:f0:1d:4b:97:7f:76:94:78:44:51:
                    cf:b3:ec:6b:1c:20:9d:9a:37:87:e9:b4:f6:7f:90:
                    b0:b4:c8:a0:45:f3:1f:47:63:26:b4:99:85:41:c1:
                    0c:61:90:d3:b4:53:39:fe:0e:6a:88:16:07:b7:13:
                    40:f8:0d:e4:6d:19:1d:0d:a0:45:2b:aa:b6:39:89:
                    a4:b1:ed:18:ed:7b:07:7f:cc:98:a7:60:5e:b9:49:
                    e9:67:1f:45:75:2a:8d:74:0d:37:f4:40:1a:40:45:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:22:51:FB:F1:77:57:C7:71:33:14:27:D0:EC:1E:41:50:F6:D9:1E
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/iyJR-_F3V8dxMxQn0OweQVD22R4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:55:1d:6f:86:bf:33:b2:cb:de:5b:db:58:d0:bf:5c:86:93:
         44:a9:67:3a:f1:51:6b:12:34:be:96:0e:4d:29:2c:48:9c:d3:
         49:3f:6e:36:2f:8b:57:e5:4d:f6:2c:29:0f:16:c6:7f:78:dd:
         f2:3b:e2:fd:ab:49:89:e7:a4:01:68:66:91:1b:93:e2:6c:c5:
         f7:a3:d6:07:51:83:e1:be:94:2b:22:42:a3:f3:14:44:d4:72:
         ba:eb:bb:f0:c7:bd:42:fc:b3:40:78:04:bf:e1:df:9e:89:b8:
         88:12:b8:0d:20:34:b4:cf:93:15:88:af:d2:b8:58:c5:74:04:
         c3:f7:4c:d0:41:bf:d9:07:0c:f8:cc:a5:8c:42:2d:45:cd:6c:
         15:33:4f:1e:ff:31:d6:74:24:d1:78:f0:4a:39:17:69:43:87:
         58:44:da:28:fd:a9:47:b6:c8:0d:d0:26:f7:dc:6d:97:86:48:
         f7:ef:aa:79:cb:05:70:0d:76:1d:e1:7d:61:bf:db:ec:ca:11:
         8f:0b:70:b4:80:e3:9e:da:45:bf:3a:d0:72:c7:fa:7c:7e:fb:
         2d:b1:e4:08:75:36:96:d0:d5:b4:c6:98:47:8f:99:3d:f2:19:
         b2:2a:13:73:03:a7:55:44:64:ec:60:57:f7:b6:5a:71:09:b5:
         90:8c:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:34 2025 by rpki-client