Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/ArHqXi4a7mn5dC7qLhXbvqkdxlk.roa
File:                     ArHqXi4a7mn5dC7qLhXbvqkdxlk.roa (raw, json)
Hash identifier:          6e9rq133R/lfmemdxlKVXiC6qucDO1XwhIT2m6Kg2ZE=
Subject key identifier:   02:B1:EA:5E:2E:1A:EE:69:F9:74:2E:EA:2E:15:DB:BE:A9:1D:C6:59
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       2A
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/ArHqXi4a7mn5dC7qLhXbvqkdxlk.roa
Signing time:             Wed 18 Aug 2021 07:54:23 +0000
ROA not before:           Wed 18 Aug 2021 07:54:23 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        210.151.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:23 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=02B1EA5E2E1AEE69F9742EEA2E15DBBEA91DC659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:48:a4:2a:48:f9:83:a8:7b:9c:2c:aa:39:
                    5f:71:01:52:fd:9f:f3:c7:aa:10:f1:02:5e:b3:11:
                    e2:be:34:21:71:cc:f2:c8:6f:04:13:65:7a:01:3a:
                    eb:6f:6d:6c:7a:63:9d:18:36:9e:c2:1d:8d:01:bc:
                    9c:99:92:7c:1a:18:cf:f5:a6:a7:dc:7c:1f:f8:46:
                    ec:e4:e3:2e:be:b2:27:91:74:31:8c:cf:b2:00:4d:
                    08:cb:a0:5c:70:90:a5:a8:71:1b:59:2b:ec:12:81:
                    d7:f2:9e:bd:e3:26:b1:46:51:de:4b:7a:e1:6c:b2:
                    82:a6:a6:11:e1:81:15:8e:33:95:6a:44:08:14:85:
                    bc:dc:62:9c:73:88:17:24:63:9a:27:64:ae:3d:a3:
                    3f:37:ae:7d:cb:28:19:c4:78:77:6b:36:fd:12:a9:
                    2e:cf:a6:5d:72:42:fa:40:44:7b:f6:c8:30:50:95:
                    5c:de:07:1c:d4:29:9a:24:3e:30:ad:6d:74:53:fc:
                    97:21:c7:4a:65:2d:d4:1e:06:c4:85:71:e8:46:d6:
                    a0:5d:98:09:e8:4a:20:ba:2a:85:22:50:d8:fb:ea:
                    75:4a:0f:76:77:b1:76:12:9e:b1:00:31:0e:76:58:
                    83:4a:55:c7:ba:40:89:b5:88:5b:cb:65:8b:a9:0a:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B1:EA:5E:2E:1A:EE:69:F9:74:2E:EA:2E:15:DB:BE:A9:1D:C6:59
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/ArHqXi4a7mn5dC7qLhXbvqkdxlk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.151.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:85:1a:97:8d:70:55:31:43:bb:2c:60:f5:8e:6a:d8:4b:
         21:85:f1:9d:63:8c:a9:88:e8:e7:4c:41:4f:20:13:37:7d:9f:
         1f:54:1a:18:67:0b:97:74:59:fd:35:df:2f:9a:0f:23:30:9a:
         a4:8a:45:23:cc:35:1c:41:94:00:8b:8b:f4:e2:c6:c7:3f:90:
         31:e1:07:2e:18:c6:25:18:51:5e:c9:f9:07:b0:a6:08:78:7a:
         8a:78:dd:20:c7:97:a6:ef:20:ff:4c:39:81:52:24:75:60:83:
         d2:c3:fd:58:38:b8:b5:09:bf:0a:be:73:c9:24:5f:69:96:a9:
         06:79:73:62:ad:93:ee:3f:27:43:b0:42:42:bb:02:20:6c:77:
         80:9f:ea:73:73:32:4c:68:0b:ee:dd:55:79:ed:69:68:f3:d5:
         82:f1:05:c0:4e:a3:6e:07:db:82:6e:22:78:ea:7d:e4:b5:18:
         b8:48:48:f9:1d:12:02:e2:53:c9:28:fa:d9:12:37:c2:d5:f0:
         3c:72:d4:4b:85:72:2c:ee:50:6e:7a:d2:82:93:e8:53:15:da:
         12:ec:eb:04:d2:93:94:84:2b:26:b8:06:2d:c7:c6:20:20:6c:
         9c:15:87:4a:43:a6:ce:d8:e7:46:18:cb:01:1f:91:dc:15:95:
         e0:4d:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:47 2025 by rpki-client