Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/f2sXxKGrcqKLHAJtYvgUPPCOgIQ.roa
File:                     f2sXxKGrcqKLHAJtYvgUPPCOgIQ.roa (raw, json)
Hash identifier:          9yf4DaWvOyWWGABbfuTjVagBKztRDpFey0kg5qzCdfo=
Subject key identifier:   7F:6B:17:C4:A1:AB:72:A2:8B:1C:02:6D:62:F8:14:3C:F0:8E:80:84
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       AA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/f2sXxKGrcqKLHAJtYvgUPPCOgIQ.roa
Signing time:             Fri 22 Jul 2022 08:20:05 +0000
ROA not before:           Fri 22 Jul 2022 08:20:05 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        124.255.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:20:05 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=7F6B17C4A1AB72A28B1C026D62F8143CF08E8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:eb:d1:c7:46:83:3b:42:99:f4:26:3f:fd:
                    84:25:1f:57:6c:45:55:38:44:3a:63:4e:41:71:19:
                    cf:4e:2c:67:f1:e0:7b:ba:e7:bf:bf:b9:5a:cd:7b:
                    22:e7:53:d9:f6:11:27:01:9e:29:7a:38:35:52:6b:
                    07:7e:91:02:32:bf:b0:0a:a3:64:6c:ef:c5:86:75:
                    cd:85:3f:8d:bf:f8:32:51:6b:e4:69:b4:08:37:8b:
                    fa:d8:27:ec:43:15:ff:bf:c6:aa:95:13:5d:c0:e2:
                    95:42:e5:14:08:4e:f9:49:39:12:a9:dc:98:26:ed:
                    48:82:ca:b1:e2:86:14:ae:5b:5d:4d:fd:c5:df:c4:
                    8d:fb:1a:a8:04:82:65:f9:e6:7b:98:2f:4c:5e:64:
                    ee:8e:e5:0c:73:73:97:38:2e:5e:14:4f:fd:e8:10:
                    f4:8c:24:0a:51:2e:57:a9:06:52:f7:6a:4b:c6:06:
                    38:6d:e2:11:9a:1f:95:51:41:8b:29:6e:31:ec:24:
                    3d:58:06:a2:c8:c1:7c:f7:9e:d7:ae:ce:e6:28:cb:
                    d2:c1:1e:95:4a:45:bc:7c:e4:87:fc:95:5f:21:cd:
                    9d:29:38:d5:7f:ed:b3:a6:ce:cf:85:2f:42:f1:34:
                    b2:97:f2:0d:1e:2e:69:c0:d0:34:4b:09:15:04:a3:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:17:C4:A1:AB:72:A2:8B:1C:02:6D:62:F8:14:3C:F0:8E:80:84
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/f2sXxKGrcqKLHAJtYvgUPPCOgIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:c5:77:e2:06:72:82:b7:72:b6:36:97:a6:eb:df:1f:bb:
         81:dd:c1:95:88:0c:a8:e0:0d:7d:e6:df:3d:e3:e4:7a:dd:dc:
         72:9d:e6:5c:83:21:0c:22:8d:7f:49:3c:0a:aa:85:0a:34:d4:
         ee:4e:4e:8f:4a:be:34:16:77:f1:ef:42:58:3f:77:6c:15:52:
         75:c1:3f:93:99:ac:5c:e0:c1:1a:74:a7:0a:bb:e8:77:b2:9b:
         bc:1c:8d:fd:20:d3:61:a1:40:b1:99:94:03:f3:15:3a:ce:1e:
         d9:16:5e:e0:7d:6b:39:98:af:6e:b8:b2:cb:e8:b3:12:b2:a3:
         0e:ba:41:a2:36:b3:15:63:62:91:d4:07:06:c1:89:91:79:5b:
         cf:02:8f:d5:e9:39:77:7a:61:84:7f:1a:a5:ca:e8:e5:df:d8:
         32:06:36:8d:19:15:d4:04:77:22:9b:e1:ba:01:bd:1d:5d:a6:
         fb:4f:75:8b:f6:6f:2e:d0:7e:d0:6c:81:ab:60:d4:ec:40:8a:
         7d:28:82:d6:93:aa:4b:5d:c4:92:bc:d2:61:d7:fa:81:e9:18:
         9f:cc:08:1b:35:86:4e:93:65:a1:b6:e2:1e:ce:49:51:37:7d:
         8a:5f:c9:50:10:00:61:ec:87:e6:6b:e5:82:85:7f:ce:ca:24:
         a6:bc:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:55:40 2025 by rpki-client