Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/hzpueDhWbYJCi8_AiOXItAVlR-Y.roa
File:                     hzpueDhWbYJCi8_AiOXItAVlR-Y.roa (raw, json)
Hash identifier:          TrOfkQV37LuXzi/uS/fD/7Y3ev4NC7dUPuYrNZh1DeE=
Subject key identifier:   87:3A:6E:78:38:56:6D:82:42:8B:CF:C0:88:E5:C8:B4:05:65:47:E6
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       15
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/hzpueDhWbYJCi8_AiOXItAVlR-Y.roa
Signing time:             Fri 01 Sep 2023 01:32:46 +0000
ROA not before:           Fri 01 Sep 2023 01:32:46 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     45677
IP address blocks:        180.148.192.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Sep  1 01:32:46 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=873A6E7838566D82428BCFC088E5C8B4056547E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:b5:62:97:42:0c:2b:36:fb:b2:21:4f:85:
                    ae:ef:6f:de:c9:64:bc:d2:d9:20:ba:62:35:ac:62:
                    b8:d4:49:cf:13:25:f9:9b:61:ff:4a:6b:80:8f:3c:
                    83:51:1a:1e:50:96:88:28:74:27:60:ed:b8:2b:64:
                    44:3d:37:1e:73:0b:39:e9:c0:36:21:fc:24:df:03:
                    9a:02:1c:f5:c9:19:73:6a:1b:90:c1:18:ef:59:30:
                    a7:b1:14:e8:28:dd:6d:44:9c:66:78:c2:c0:cd:88:
                    71:89:c6:bd:44:2b:2e:57:b3:2a:de:91:d2:5e:14:
                    34:82:a9:d7:ca:7a:c7:84:e9:41:78:67:3f:ba:93:
                    38:40:68:da:71:b1:28:51:f6:cf:ce:b9:c7:8b:c3:
                    80:f4:5e:fb:c2:b6:d0:c3:bd:d9:52:ec:ad:c9:ca:
                    36:84:e3:3c:f9:77:a9:14:23:28:be:79:16:16:cb:
                    74:1f:a0:03:ff:1b:81:ce:b9:58:8b:c9:47:67:3d:
                    5b:32:ee:14:0d:18:9a:46:5b:ac:86:e8:a4:d9:0f:
                    54:7c:de:66:2f:22:00:5e:0f:e5:d4:4b:5e:51:16:
                    7c:6d:8a:f0:b5:a1:dd:2a:d3:bb:ca:90:18:f4:e7:
                    86:08:66:c2:92:f1:24:16:5f:08:68:48:ed:74:99:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:6E:78:38:56:6D:82:42:8B:CF:C0:88:E5:C8:B4:05:65:47:E6
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/hzpueDhWbYJCi8_AiOXItAVlR-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:85:98:6b:50:9d:b9:f7:b5:12:7b:80:99:71:93:13:00:
         a9:c0:b9:f2:eb:a5:c3:81:bb:db:e8:7d:76:1d:29:ef:e0:7a:
         53:e2:3c:82:6b:9e:77:b4:52:2e:ba:95:5c:c9:b0:e1:f0:d8:
         13:f7:ab:5e:36:9e:22:37:bd:b1:ac:de:f2:a9:76:26:dc:1e:
         13:7e:59:fa:0d:d3:ca:1c:26:f7:e2:cf:ac:7f:24:0b:61:f4:
         43:b5:09:64:51:4c:7b:2e:37:3b:93:e7:d2:d1:6e:9f:eb:67:
         bd:e2:11:06:50:fb:00:66:c7:ec:0d:e1:55:9d:43:62:3d:c1:
         ee:4f:38:94:de:73:a9:35:a2:14:05:ae:ea:60:71:59:cc:df:
         ee:a8:81:03:ba:3c:2a:54:34:32:67:6d:56:d7:55:82:a9:c3:
         22:99:d3:52:ee:d5:d1:7f:9e:7c:d1:10:28:10:e3:b0:e5:9f:
         4b:a9:cf:81:8f:7a:c6:59:de:a5:32:26:04:e7:32:dc:ec:31:
         9b:44:55:66:74:ab:47:ac:51:90:57:ac:11:76:69:85:1d:c4:
         04:d4:93:6d:d5:04:12:4c:58:73:89:ea:5f:8e:48:68:36:72:
         2e:96:a8:08:5c:58:ae:59:57:3c:54:ea:41:46:89:77:72:99:
         7b:ee:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:37 2025 by rpki-client