Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/glY_s-NYM4qMJ_ABYCx-44THtac.roa
File:                     glY_s-NYM4qMJ_ABYCx-44THtac.roa (raw, json)
Hash identifier:          hpricXGE95QnVwdyS1KQq0CF+Dry4hxTTXbboeH3zXY=
Subject key identifier:   82:56:3F:B3:E3:58:33:8A:8C:27:F0:01:60:2C:7E:E3:84:C7:B5:A7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0133
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/glY_s-NYM4qMJ_ABYCx-44THtac.roa
Signing time:             Fri 07 Jul 2023 04:08:15 +0000
ROA not before:           Fri 07 Jul 2023 04:08:15 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.126.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:15 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=82563FB3E358338A8C27F001602C7EE384C7B5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:0f:8b:dc:b4:fe:81:82:c1:ee:8e:57:f3:
                    39:10:47:45:78:4a:83:5e:c3:00:fd:17:b3:64:d2:
                    7a:e2:a9:63:93:08:5a:1a:02:0c:f8:f3:d4:27:fa:
                    1f:3a:a8:5f:48:70:8a:9a:89:de:e0:ae:b8:e5:06:
                    26:fe:d2:79:2b:f3:6b:68:b6:a3:2e:78:d7:9c:f0:
                    a1:11:1a:bf:50:36:0d:57:5e:2a:41:1f:07:c9:e6:
                    9c:47:98:54:61:8d:30:ef:ee:6a:cc:c1:ad:dd:0c:
                    15:32:0d:c6:7a:45:b4:e4:44:38:53:67:83:ed:75:
                    30:0b:6d:8e:65:af:06:76:40:18:65:73:ad:e1:32:
                    12:1a:7a:03:f1:50:68:de:30:6c:13:8d:f0:48:de:
                    8b:e5:cd:11:0c:0c:41:98:92:30:9b:41:15:f1:89:
                    15:34:96:b6:11:7c:19:21:b8:dd:a5:6b:e9:dc:e0:
                    3e:7e:71:aa:bf:5d:42:66:c5:be:d9:47:59:1d:20:
                    af:35:90:d1:52:9f:fa:25:4f:65:d5:fb:7a:3e:71:
                    fc:c7:89:b1:39:ba:82:ac:25:62:7e:f7:c9:da:dd:
                    81:10:71:c1:7d:50:3c:f2:d6:2a:20:f1:6d:28:71:
                    e7:46:3b:01:60:1a:59:47:8b:47:73:04:f9:a2:aa:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:56:3F:B3:E3:58:33:8A:8C:27:F0:01:60:2C:7E:E3:84:C7:B5:A7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/glY_s-NYM4qMJ_ABYCx-44THtac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:68:7a:c9:49:fd:98:a5:05:2d:1a:ea:36:e5:86:3e:58:
         3b:ea:9b:c7:61:97:90:4e:ad:ba:2e:cc:82:2a:6e:b1:f0:4a:
         2c:db:05:26:86:ae:e9:dd:6c:7d:86:04:42:6a:b7:a5:e6:b9:
         60:ac:18:5f:81:b0:27:61:a3:24:3b:91:2d:3b:60:1e:51:aa:
         48:4e:10:b0:76:4f:f6:2a:6a:ca:6d:9a:4c:d9:42:77:93:62:
         bc:01:fc:2a:21:be:02:e6:ab:73:52:85:fc:c5:cc:9e:e1:07:
         82:3b:e2:08:11:9b:ee:33:b7:d5:4b:6e:9c:19:aa:e8:c5:f0:
         cd:66:7a:0d:c6:c0:e3:9c:3f:c6:33:1c:55:a6:d4:72:16:a2:
         bf:35:bb:dd:52:e6:2b:42:da:f3:a0:f2:46:32:f4:54:12:b2:
         21:4f:18:95:3a:ea:f0:15:99:99:5c:d3:e6:87:6b:cf:88:18:
         16:ee:90:09:e3:07:80:c0:81:79:14:64:ef:24:d7:fc:e8:c5:
         b0:f7:a4:22:e5:44:2c:88:9a:ab:5a:fa:30:40:eb:2d:9f:d3:
         06:b3:46:2e:4d:34:29:f5:4c:72:30:e5:33:ab:66:11:40:ba:
         24:6e:9b:ab:a3:3a:38:08:c7:6d:78:2a:40:d5:e0:0e:1c:79:
         18:f0:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:21 2025 by rpki-client