Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0jVrizfpRvCSoiIzTAFi2fxeSF0.roa
File:                     0jVrizfpRvCSoiIzTAFi2fxeSF0.roa (raw, json)
Hash identifier:          QUQlho4Zzg2eof9Axc2/qpA5wbSol/LuQ+q2uVZckOo=
Subject key identifier:   D2:35:6B:8B:37:E9:46:F0:92:A2:22:33:4C:01:62:D9:FC:5E:48:5D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0jVrizfpRvCSoiIzTAFi2fxeSF0.roa
Signing time:             Tue 26 Jul 2022 04:56:52 +0000
ROA not before:           Tue 26 Jul 2022 04:56:52 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        122.145.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 04:56:52 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=D2356B8B37E946F092A222334C0162D9FC5E485D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:aa:41:f2:62:ba:b9:bb:32:9f:ad:16:bb:
                    98:b3:52:44:16:8e:62:41:37:f0:d8:a6:58:70:9d:
                    ef:44:c2:f4:43:dd:96:87:4c:06:a6:67:1a:ad:b1:
                    f5:09:81:30:7f:be:ca:93:fe:ff:10:4c:c4:df:71:
                    f3:e2:65:e7:16:6e:bd:cb:5e:62:0c:60:d2:42:96:
                    f3:a2:47:f5:2b:ca:36:01:47:cf:e5:e8:6c:13:ce:
                    1d:e4:72:f7:6f:ac:78:c9:13:7b:18:6f:32:74:ff:
                    d0:50:d0:b3:24:98:d8:ac:d9:f5:ee:d7:22:df:2f:
                    6f:7d:2d:31:1c:23:50:f9:a3:28:6a:b0:78:03:ce:
                    51:1c:56:1d:96:67:40:c9:50:7d:11:d6:88:16:b5:
                    4e:ef:11:1f:5b:70:80:90:d0:44:c8:b6:8c:30:5f:
                    66:f6:25:f9:c9:de:5d:9d:cd:10:e8:bc:90:52:92:
                    36:c1:ca:37:7a:08:96:6a:87:8f:5f:7a:f0:b7:b4:
                    55:c2:11:fb:e9:9e:58:0c:f4:dd:5a:14:16:ac:d3:
                    97:78:33:fa:a9:c2:36:2a:70:2b:b4:29:27:62:19:
                    a1:59:80:ef:63:ed:49:8b:69:b9:c8:68:7a:49:4e:
                    42:e8:ae:60:ea:e2:c8:a3:44:d0:7b:53:c8:b5:2a:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:6B:8B:37:E9:46:F0:92:A2:22:33:4C:01:62:D9:FC:5E:48:5D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0jVrizfpRvCSoiIzTAFi2fxeSF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:2a:48:37:72:00:63:72:67:e1:a8:ca:b1:a6:0d:34:7d:4b:
         72:1e:e5:c8:1f:d1:da:3a:4d:1f:fd:b8:d1:51:e9:ed:a5:ab:
         4b:d6:6e:83:54:18:4f:22:8f:de:79:dd:94:3d:22:25:97:12:
         9d:57:86:6e:e7:a8:a4:db:32:26:59:97:d3:4e:9f:52:39:fd:
         59:cc:00:cd:30:c0:1d:0a:06:9d:2e:6c:94:0f:0c:8d:ff:a1:
         76:43:9b:ab:ce:45:5f:9d:37:6e:b6:ec:92:ed:a3:97:34:ff:
         97:a1:c6:f6:15:2c:3e:ab:b0:99:f3:7e:e1:6e:cf:f0:cc:b8:
         dc:b9:92:fb:32:68:b0:ee:2e:1d:75:4a:4a:99:35:1e:e6:e0:
         1c:3d:a1:4a:80:b9:3d:fe:dc:e2:b9:e3:89:28:d6:a3:cc:e3:
         63:e0:2a:73:8a:ff:da:7a:07:40:61:c4:80:62:df:3e:d1:bc:
         2b:cc:6a:ea:85:81:2d:51:8a:98:16:1c:0d:f3:5c:37:58:b4:
         1e:d9:cb:d0:93:17:e3:46:8d:c6:a0:98:f8:95:e6:83:85:97:
         1a:d9:c7:89:31:48:26:6f:26:4c:50:b9:83:93:8d:a4:13:b9:
         de:11:a8:aa:0d:a7:9b:f3:87:db:d6:89:bf:97:1a:a1:a1:73:
         a0:b5:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:33 2025 by rpki-client