Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/a-b-rTbMCbejeFZ86I3xdl5ZALA.roa
File:                     a-b-rTbMCbejeFZ86I3xdl5ZALA.roa (raw, json)
Hash identifier:          MqYKLwhKTFS6JJPdmXtjma3LvauJGvo28RuXonOTPz4=
Subject key identifier:   6B:E6:FE:AD:36:CC:09:B7:A3:78:56:7C:E8:8D:F1:76:5E:59:00:B0
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       90
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/a-b-rTbMCbejeFZ86I3xdl5ZALA.roa
Signing time:             Sat 01 Jul 2023 01:28:35 +0000
ROA not before:           Sat 01 Jul 2023 01:28:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        61.203.0.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6BE6FEAD36CC09B7A378567CE88DF1765E5900B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b0:93:29:27:1e:76:43:b0:91:9e:c8:32:45:
                    bf:bc:3b:21:91:f1:39:af:d8:d2:96:69:f5:63:88:
                    58:71:4d:c5:da:90:c0:58:10:e2:42:04:2c:3c:a3:
                    8b:b2:ac:7d:53:bf:ac:6b:34:51:63:e0:48:74:e7:
                    97:f1:84:02:a5:03:70:da:35:3f:d0:eb:16:a2:3b:
                    98:b1:7f:80:b3:98:63:03:30:0f:98:fc:6d:11:1b:
                    b3:96:62:26:34:25:d1:dc:8a:ce:8f:e5:3c:17:75:
                    14:34:9f:e6:52:af:a7:bd:3d:cc:5f:30:f6:a5:cc:
                    19:7d:6c:f6:dd:27:2c:61:36:4a:83:8f:18:71:08:
                    d5:a5:6d:93:0a:4c:ba:83:4d:ec:c4:1d:bb:c4:bb:
                    a2:6e:f1:62:5d:a9:cd:a0:ca:a1:e7:a4:91:a0:bd:
                    4e:2c:1e:95:48:6b:40:0f:98:52:f2:4e:8a:0c:4b:
                    22:5c:1b:e8:a4:6a:bd:28:b8:24:2c:fa:84:12:e4:
                    18:b5:82:e2:64:62:05:62:d6:fc:76:de:ac:55:bf:
                    55:b4:07:0e:65:4f:12:16:b6:91:0d:05:13:78:98:
                    e3:a2:32:98:af:96:5f:35:cf:c4:40:33:e3:77:58:
                    79:12:54:f0:d3:c5:1e:f6:ac:20:ca:41:8f:18:a3:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:FE:AD:36:CC:09:B7:A3:78:56:7C:E8:8D:F1:76:5E:59:00:B0
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/a-b-rTbMCbejeFZ86I3xdl5ZALA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:77:4f:1b:dc:72:83:de:fd:ea:50:b5:8b:46:ba:58:0c:
         bb:3a:32:13:27:fb:29:a2:a4:4f:e4:fc:a3:49:27:02:98:40:
         7a:24:5f:9a:92:c0:31:f2:18:a1:64:88:38:76:b3:fd:63:63:
         26:50:6e:43:e2:70:41:10:f5:41:db:26:70:f8:58:50:1e:dc:
         c4:fb:91:ab:e8:ac:a2:b4:dc:a1:16:63:96:ce:73:a1:9c:14:
         bd:6b:f2:5d:7b:de:9c:28:76:0c:3a:d6:1b:e3:34:91:72:09:
         44:18:82:12:5d:42:76:2a:04:39:a7:59:6a:1e:bf:90:d8:77:
         de:f9:77:3c:fc:d6:16:f6:1f:1e:58:72:6f:97:f8:98:0c:50:
         45:fd:f3:19:be:1f:5b:d0:c6:36:29:e9:d5:a4:86:77:de:47:
         66:33:c6:d2:af:c6:b5:f2:57:b7:23:b3:53:9f:cb:77:28:5c:
         1c:df:bd:7d:af:c5:a3:a9:37:51:6a:5a:81:3b:d4:5f:6a:72:
         3b:f5:4c:2a:7c:b3:0e:48:b8:a2:f4:b9:3d:88:5f:45:5c:d2:
         f5:4c:40:2e:c0:4f:21:2b:af:88:a2:34:28:a6:97:f8:5d:30:
         09:a6:9b:ca:2a:0e:ef:46:c7:26:6e:a7:0e:36:3a:66:2a:2c:
         0d:09:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:29 2025 by rpki-client