Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QUDjVxYogBawO7b-thOx15yYdfY.roa
File:                     QUDjVxYogBawO7b-thOx15yYdfY.roa (raw, json)
Hash identifier:          0zt8QIv6XLIqsXPJyL79BFjYnpWAB7vm/sq1oiJREt8=
Subject key identifier:   41:40:E3:57:16:28:80:16:B0:3B:B6:FE:B6:13:B1:D7:9C:98:75:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       7C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QUDjVxYogBawO7b-thOx15yYdfY.roa
Signing time:             Fri 22 Jul 2022 06:09:19 +0000
ROA not before:           Fri 22 Jul 2022 06:09:19 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.44.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:09:19 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4140E35716288016B03BB6FEB613B1D79C9875F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:e7:65:2e:7e:c2:f7:52:4c:9c:39:9e:fd:
                    a9:21:0a:ea:e1:a8:62:43:3e:0d:03:d8:97:f0:ba:
                    1e:43:74:db:37:09:52:c4:83:24:25:e3:27:98:15:
                    56:3d:c4:bd:a1:57:e6:1c:bd:49:5c:07:19:7e:e3:
                    f1:f3:ae:bc:bd:d5:b0:2d:16:0e:65:8c:85:43:cb:
                    ed:40:05:6d:e0:40:90:b3:75:10:ca:5e:fb:9e:e9:
                    e2:58:23:d4:68:e2:36:55:8a:ba:a6:cb:8f:38:77:
                    37:04:9c:9a:4e:a0:9c:fd:34:41:6d:95:da:2d:11:
                    4a:4e:00:cc:e9:cd:ad:c7:af:02:f7:dc:23:04:51:
                    7a:9f:1b:b8:07:84:24:9f:de:60:5d:27:37:88:17:
                    42:a8:2d:91:4e:e6:a2:7f:45:5c:14:4e:f7:13:9e:
                    73:52:90:5b:28:f4:66:1d:74:14:d6:33:fc:0e:02:
                    32:4b:4e:82:74:7e:83:5d:46:12:58:f0:cd:56:b0:
                    c9:e7:2e:80:e9:2e:20:f4:71:9b:58:c2:9d:16:11:
                    7e:b5:7f:48:ee:16:07:d5:7b:54:8b:c1:12:f5:a6:
                    0b:07:7a:4d:f4:78:2c:54:72:e2:ef:e6:4d:1a:10:
                    8d:aa:15:af:9f:98:77:f0:ab:21:26:ec:eb:f0:be:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:E3:57:16:28:80:16:B0:3B:B6:FE:B6:13:B1:D7:9C:98:75:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QUDjVxYogBawO7b-thOx15yYdfY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:da:be:c1:a5:18:ac:ff:01:42:60:e8:77:7e:92:40:b1:e5:
         e3:3a:9d:96:a4:29:ee:5a:5d:de:4a:7c:74:5f:25:8e:89:da:
         89:be:26:29:7f:33:d0:18:23:7e:08:43:0f:82:cc:81:26:1a:
         f2:a1:39:dc:88:39:8b:5e:51:03:9a:76:5f:2d:bd:c3:80:a8:
         50:fb:52:08:90:39:ec:fc:42:01:4b:da:00:e0:ac:d1:ab:e9:
         86:e1:9f:e1:af:0c:32:c0:65:f0:c1:31:75:16:76:bd:76:8a:
         3f:d0:b0:9d:96:e1:24:60:6c:6f:b3:a3:8a:08:fd:b7:60:ef:
         aa:7d:f6:44:71:d8:de:64:52:13:e0:f3:88:3c:68:e1:e1:ac:
         3b:cb:95:b1:ee:df:42:17:a4:75:91:11:0b:cf:19:5c:5f:2c:
         5b:6d:8b:47:ca:6f:bf:ab:15:2e:27:4d:62:53:01:61:a8:6d:
         65:12:b8:c6:0a:eb:4b:0a:06:0b:2e:d2:9e:f5:41:aa:86:77:
         82:a5:62:1b:ec:38:82:23:1c:55:2c:e4:cc:d9:b3:1f:c6:51:
         06:19:97:1c:91:04:6c:09:4f:d0:af:d6:66:b3:5c:0e:2a:40:
         b9:b6:e8:f7:17:6d:1e:1e:30:d9:0b:50:03:ee:49:b1:33:a1:
         b3:5e:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:46 2025 by rpki-client