Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/yigh1_z6VIshnM_FKWpLLAxEAgM.roa
File:                     yigh1_z6VIshnM_FKWpLLAxEAgM.roa (raw, json)
Hash identifier:          BXueg4a5BQ6gKLGyNfCBPO4QPczDul9gEz6xrawQkhg=
Subject key identifier:   CA:28:21:D7:FC:FA:54:8B:21:9C:CF:C5:29:6A:4B:2C:0C:44:02:03
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       2A
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/yigh1_z6VIshnM_FKWpLLAxEAgM.roa
Signing time:             Thu 29 Feb 2024 01:34:25 +0000
ROA not before:           Thu 29 Feb 2024 01:34:25 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     37908
IP address blocks:        103.10.164.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Feb 29 01:34:25 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=CA2821D7FCFA548B219CCFC5296A4B2C0C440203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:0b:11:c5:81:c7:c0:06:ec:d9:e6:ff:8a:
                    07:19:5e:80:a7:5c:61:60:be:4b:81:e8:6d:57:14:
                    7a:45:9f:74:92:dd:15:23:ad:58:19:2b:66:da:41:
                    14:c2:fc:1a:c0:a9:a6:bc:94:4d:d8:4e:cf:e3:8a:
                    a6:dc:c5:5b:1f:82:fb:87:46:26:ff:f9:bf:93:50:
                    6d:31:3c:26:6b:3a:1b:db:87:1b:f3:5b:cd:f2:c1:
                    04:62:8c:60:6e:5c:79:a8:22:bf:13:c5:fa:b3:d7:
                    cc:26:75:f1:a6:5e:c4:7d:87:c2:b6:df:b3:40:31:
                    aa:fe:3a:f1:c2:80:5c:a9:30:26:9a:0c:cf:c9:22:
                    cc:a7:96:5b:56:16:4f:c7:2b:89:47:0a:5c:b8:2a:
                    f0:9d:96:82:5e:61:e4:28:c6:d9:92:3f:2f:00:b6:
                    df:17:98:a4:f4:00:f0:68:e0:c0:5f:8c:a6:e9:07:
                    a1:f1:d7:ae:4d:49:db:30:56:ee:a7:0f:79:97:7f:
                    41:8f:1e:09:7b:b1:29:79:17:df:f8:db:24:00:b0:
                    a1:e8:04:1c:73:55:c8:9c:27:13:31:58:b3:39:9f:
                    6a:64:ca:bb:8e:2a:30:97:eb:b7:ff:3b:e0:c0:4c:
                    ef:97:98:b7:4f:32:e3:4b:f0:ae:fa:8f:23:ae:e4:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:21:D7:FC:FA:54:8B:21:9C:CF:C5:29:6A:4B:2C:0C:44:02:03
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/yigh1_z6VIshnM_FKWpLLAxEAgM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:8d:a8:ab:6f:c5:ea:39:ee:f7:39:4e:e1:49:b4:de:10:
         2e:55:f7:7c:6c:62:c9:06:0a:a2:1b:d6:57:e1:24:05:13:f8:
         a6:c0:8a:d6:72:86:13:fb:4a:b3:dc:3a:74:50:9c:bb:6c:69:
         45:21:f2:62:ce:0c:41:d9:ed:ec:f0:45:87:b4:6d:4e:f0:58:
         e7:3b:43:b2:3d:42:5e:18:fe:4b:7a:b5:a8:09:45:53:82:6b:
         93:9f:c6:f9:41:6a:d9:6f:5d:f6:a6:c4:7a:1d:91:9e:d9:7f:
         13:78:46:90:df:c5:8f:d3:9c:ec:b8:15:3d:df:c0:b2:fb:45:
         75:3b:54:f8:40:62:3a:64:b5:bc:55:ed:80:97:b2:1e:3d:af:
         7d:75:6a:6b:c3:9a:96:fe:d0:e4:15:7d:3a:c2:83:01:76:2c:
         bf:51:88:f1:a1:8b:0d:bf:ca:90:d9:c0:ab:c7:8d:bd:c5:0c:
         62:f9:f5:dd:70:99:65:1e:c8:70:da:67:c4:90:67:35:f2:6e:
         69:f4:d7:6b:a9:7b:e0:94:ce:85:3c:ee:2b:b0:b0:cb:e6:ea:
         3f:05:56:ab:31:4f:a1:55:5b:d2:07:6e:3e:9a:cc:09:df:ae:
         3e:f9:2f:77:93:7c:2c:6a:1a:f0:ab:6f:1c:2a:f9:65:48:27:
         83:44:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:06 2025 by rpki-client