Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PeTFitKzkoa25kXpsqDhF6g_mz8.roa
File:                     PeTFitKzkoa25kXpsqDhF6g_mz8.roa (raw, json)
Hash identifier:          XhriQ+f4tgiQNhwxOsOrTNaoTyLI/ODQekvqn8uY8eY=
Subject key identifier:   3D:E4:C5:8A:D2:B3:92:86:B6:E6:45:E9:B2:A0:E1:17:A8:3F:9B:3F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PeTFitKzkoa25kXpsqDhF6g_mz8.roa
Signing time:             Fri 22 Jul 2022 08:48:35 +0000
ROA not before:           Fri 22 Jul 2022 08:48:35 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.235.40.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:48:35 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3DE4C58AD2B39286B6E645E9B2A0E117A83F9B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:65:f6:f9:f1:07:d3:ad:14:90:89:d2:56:
                    33:40:8c:f5:12:6f:d8:f3:a1:82:4a:24:02:e6:2f:
                    13:56:6d:d9:94:57:26:e8:d5:4e:76:a0:80:35:b3:
                    3a:54:e0:13:60:53:18:85:ae:67:0a:08:a0:d3:31:
                    b8:7e:64:35:e9:62:22:3e:1f:ca:6a:e4:a5:f0:f8:
                    ff:b3:6e:25:8a:36:e7:c9:a8:f6:f1:52:8a:e6:61:
                    b0:75:90:f2:ff:2f:6c:78:c8:d9:5a:1d:65:ba:96:
                    6e:f7:a1:7a:48:7e:c7:19:e8:1a:2a:03:1d:cf:d6:
                    33:52:6f:80:80:19:8d:db:a6:0d:98:92:96:cc:8b:
                    fd:78:c8:ae:e0:e4:31:22:f2:64:df:76:f5:5b:a6:
                    a3:0d:84:16:39:ac:60:5e:50:84:53:15:86:74:31:
                    79:6c:6a:32:62:97:2c:27:3a:db:63:0e:e4:63:03:
                    47:34:17:d8:bb:70:0e:25:cb:d3:19:51:1e:81:1e:
                    55:2f:e7:dc:d3:57:9c:0a:37:0e:22:44:df:40:a1:
                    61:f3:6c:0d:c4:49:af:4d:86:c8:95:d6:49:0f:94:
                    ca:ff:8f:0f:50:a3:bf:bf:16:c4:21:30:7f:9f:30:
                    cd:2b:79:6a:07:ec:2e:3c:1a:a8:c6:49:88:23:40:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:C5:8A:D2:B3:92:86:B6:E6:45:E9:B2:A0:E1:17:A8:3F:9B:3F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PeTFitKzkoa25kXpsqDhF6g_mz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:10:a4:14:1d:92:fc:66:5d:34:57:97:3c:49:75:5b:35:
         62:bb:dd:c6:5a:30:72:21:72:c1:af:3b:8a:9f:ca:c7:53:6f:
         21:df:1e:75:fe:dd:0c:1b:d9:59:a1:2c:3d:9b:20:1b:84:d2:
         3c:53:94:ca:1a:84:4f:de:e8:e7:d7:28:88:30:ea:b2:2d:48:
         d5:7b:6f:c4:1a:27:0b:8d:62:44:b7:70:59:44:8e:34:f2:4a:
         a1:8e:c6:a8:ff:c5:d3:b3:7d:22:85:d9:ed:ba:d9:43:af:6e:
         fe:20:2c:3d:ba:48:b0:cf:38:0d:18:20:0e:70:b2:26:8b:4b:
         ac:dd:62:cb:67:54:e7:6d:b4:37:5c:7e:d6:f9:73:fd:89:20:
         db:55:67:7d:d1:86:c2:98:ec:26:15:bc:f3:1b:8b:ff:32:c0:
         be:03:e0:1d:2f:e2:c9:ce:60:31:10:3e:e2:28:82:69:aa:2a:
         5d:47:23:7a:c3:f0:85:ac:79:2f:50:00:1d:ff:18:56:fd:f7:
         10:20:3f:32:01:55:c9:2c:fc:3f:f2:f1:54:b8:8c:b7:9f:85:
         3e:5b:69:8f:87:10:3f:a6:d9:29:f8:7e:cc:58:82:31:9e:e8:
         d7:8a:0b:36:0a:fb:98:3c:61:81:9f:f7:27:f2:4c:5a:b8:39:
         d2:53:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:24 2025 by rpki-client