Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z18_vrRnDGbT31r8Ly7C929ecUY.roa
File:                     Z18_vrRnDGbT31r8Ly7C929ecUY.roa (raw, json)
Hash identifier:          /b1PeBVHGpDk/YPGcK0ijtxZzmETOFXpK7BkeIZkOaI=
Subject key identifier:   67:5F:3F:BE:B4:67:0C:66:D3:DF:5A:FC:2F:2E:C2:F7:6F:5E:71:46
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       49
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z18_vrRnDGbT31r8Ly7C929ecUY.roa
Signing time:             Fri 22 Jul 2022 01:52:21 +0000
ROA not before:           Fri 22 Jul 2022 01:52:21 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        175.103.128.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:52:21 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=675F3FBEB4670C66D3DF5AFC2F2EC2F76F5E7146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:ef:8d:8f:cd:37:c4:5c:32:61:d2:b1:58:
                    23:10:3e:39:f8:71:f1:8d:42:bf:15:1f:09:a4:20:
                    ac:1e:ed:e3:0f:77:4d:0b:8a:18:a7:c0:67:e9:07:
                    9c:ee:cd:d9:5b:1d:39:af:81:84:92:2c:3b:e1:d7:
                    53:34:46:41:6f:28:6d:82:07:b2:ee:47:be:81:91:
                    55:9b:a2:bb:f7:6a:74:fb:30:0c:a6:34:29:5a:da:
                    43:1e:71:2f:34:27:10:b5:e9:69:93:b2:5c:e0:41:
                    ac:38:c1:5d:5c:ae:bd:17:f2:a4:e6:a6:08:76:f0:
                    b2:4f:32:4f:de:cf:48:4a:f0:c2:27:9b:53:f7:29:
                    6f:e6:68:65:56:2f:1e:8e:d7:d0:c6:34:0b:e2:4b:
                    09:47:65:fd:81:e2:4b:87:c1:2d:4a:c4:06:15:d8:
                    b2:5a:a0:11:f4:49:55:af:ee:48:28:07:9e:04:e0:
                    1a:41:4d:9b:b2:ef:83:5a:b0:3d:6e:07:64:f4:07:
                    82:3d:90:f1:e9:8e:57:e8:db:17:ba:e4:fb:76:f8:
                    05:5e:d5:bf:f4:ad:eb:fb:bd:86:95:43:66:b5:09:
                    ad:a5:ec:e6:cf:cf:1d:db:15:75:19:f0:c7:83:4d:
                    d1:bc:21:11:26:bd:01:40:a5:c4:f1:7c:fe:0b:c6:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5F:3F:BE:B4:67:0C:66:D3:DF:5A:FC:2F:2E:C2:F7:6F:5E:71:46
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z18_vrRnDGbT31r8Ly7C929ecUY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:25:9d:f9:f6:83:5c:de:63:5a:aa:b4:79:18:f7:1a:ad:d4:
         6e:1d:a6:a3:82:b8:0d:50:3b:44:45:bd:01:66:39:af:41:9d:
         0b:09:13:e8:43:0b:22:a4:16:15:d1:2d:30:ea:43:c8:51:66:
         6d:10:02:17:96:c2:fa:c7:e1:3f:bb:75:ee:fa:56:8d:ca:2c:
         ae:72:d9:ef:f0:6a:9b:69:4e:ce:61:42:7c:6a:ad:fe:4a:4f:
         32:52:b9:25:32:27:23:5b:8a:2f:70:be:35:2c:12:e3:ae:fd:
         e7:01:bc:0b:57:22:6b:44:77:19:7d:f0:5a:ef:97:44:80:f9:
         4e:b1:af:a0:a1:15:3d:21:08:74:3c:af:aa:bf:0f:6b:93:2f:
         83:f4:f1:4e:79:e2:50:ce:03:9d:5a:a7:c4:91:fe:2a:75:4c:
         a4:de:66:36:79:2b:ea:a1:50:1e:83:1a:09:25:0d:64:87:63:
         6a:19:97:8c:a4:f8:52:5f:4a:f9:c9:68:0f:38:64:af:ac:5b:
         0d:8d:d4:e3:b8:b5:14:a0:44:f6:f3:69:3a:04:a0:47:b3:7c:
         fa:85:86:7f:1d:97:71:0c:3e:16:6f:d9:f5:d2:4b:c4:1c:c5:
         a2:75:db:4c:7c:a6:82:36:a2:51:ce:54:12:73:ea:05:7e:50:
         9d:7c:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:13:01 2025 by rpki-client