Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/JS9zFLAQHUtybrXZ3dSSefSEXuk.roa
File:                     JS9zFLAQHUtybrXZ3dSSefSEXuk.roa (raw, json)
Hash identifier:          vkYA/uggohq/jdR6IP9/As6yCZfq1MM1hJwNb0Zx9OA=
Subject key identifier:   25:2F:73:14:B0:10:1D:4B:72:6E:B5:D9:DD:D4:92:79:F4:84:5E:E9
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       1A
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/JS9zFLAQHUtybrXZ3dSSefSEXuk.roa
Signing time:             Wed 20 Apr 2022 09:12:21 +0000
ROA not before:           Wed 20 Apr 2022 09:12:21 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        211.131.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:12:21 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=252F7314B0101D4B726EB5D9DDD49279F4845EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:3c:b0:75:39:1b:5b:3f:37:ca:14:f6:f0:
                    c6:cd:95:ed:a8:b1:73:a0:d9:41:fc:d5:42:95:44:
                    3c:64:7d:5c:3e:4a:70:f0:9b:a8:70:dd:86:d9:c0:
                    50:57:e0:99:ca:47:0d:31:fc:a6:8e:5d:27:22:37:
                    03:f8:ae:22:38:fb:0f:f9:5b:09:f9:3e:ef:fc:25:
                    0a:d5:76:cb:8d:90:6a:fd:31:e7:82:35:81:3d:df:
                    90:8c:17:85:8d:02:fa:34:c9:27:20:d8:5c:5d:32:
                    ab:39:5a:04:8c:58:d1:a4:be:6f:75:b2:29:ea:6b:
                    51:a1:86:e2:88:c8:89:1d:a0:64:dc:63:63:05:5a:
                    e3:3e:84:ab:57:05:8a:dc:ed:4c:a1:e6:e9:d2:bd:
                    79:b3:72:5a:9f:4d:8e:a7:24:2a:74:58:78:02:91:
                    3d:02:81:8f:01:bf:d3:d6:fb:29:52:ae:47:f3:6d:
                    03:d3:d2:08:d1:c6:f1:13:1c:79:44:0e:b7:5a:0e:
                    d4:f0:df:00:e4:62:9a:14:7d:38:22:08:d8:08:84:
                    8d:f3:8f:2a:5b:e8:b5:c6:76:63:74:93:db:07:e0:
                    4f:5f:c8:87:a7:d7:70:c7:c6:a8:e4:58:bd:62:d5:
                    8c:90:d2:61:8d:be:87:8a:4b:dd:24:0d:0d:39:e0:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:73:14:B0:10:1D:4B:72:6E:B5:D9:DD:D4:92:79:F4:84:5E:E9
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/JS9zFLAQHUtybrXZ3dSSefSEXuk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:5c:53:08:b2:59:41:50:f3:f9:76:4f:18:a2:b0:fc:5c:
         bb:6b:fe:d4:75:ab:26:4f:ac:f6:d1:bb:03:d3:e3:e0:45:04:
         2d:bb:7a:04:40:2e:f1:aa:97:bb:33:c7:97:c5:08:8d:e1:ac:
         76:c6:43:8a:92:59:4a:22:b6:dd:12:96:6b:7a:ca:92:6b:77:
         58:bf:33:ca:1a:b2:6b:09:a3:a1:48:93:ee:4e:c7:18:60:cf:
         46:31:42:45:78:d1:42:54:02:68:f9:27:95:c8:15:45:88:2b:
         70:1a:de:40:9a:7d:02:4b:c5:ce:91:62:19:dc:d0:12:8c:f9:
         fc:4e:12:99:ab:f1:bb:2d:38:4a:42:4a:8d:98:fe:ae:31:03:
         be:fc:28:19:8a:6e:79:a4:ad:a1:28:46:52:62:f5:62:4d:02:
         4d:c4:e6:0f:76:a8:39:b9:3c:86:ac:3b:1d:25:c9:3d:5f:2a:
         d2:32:ae:dd:03:6b:fa:b7:f7:0a:51:a6:db:c8:3f:bb:e7:e1:
         22:c6:49:74:30:21:f8:fd:d5:9d:7d:e3:e4:da:2a:99:bf:a5:
         d4:b1:95:c3:57:36:13:ba:30:01:23:0b:30:ad:56:c1:4a:b2:
         37:43:a3:77:43:08:a3:22:a9:47:d6:16:1a:58:09:71:e1:af:
         53:7f:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:08 2025 by rpki-client