Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGtZm7RHB0GWZ78bzlbgXOBmwgk.roa
File:                     mGtZm7RHB0GWZ78bzlbgXOBmwgk.roa (raw, json)
Hash identifier:          bPmj5yX9PJulzLuymVxuW+tEf/lf/DXHrx/9w4sBTko=
Subject key identifier:   98:6B:59:9B:B4:47:07:41:96:67:BF:1B:CE:56:E0:5C:E0:66:C2:09
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       018D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGtZm7RHB0GWZ78bzlbgXOBmwgk.roa
Signing time:             Fri 07 Jul 2023 04:12:35 +0000
ROA not before:           Fri 07 Jul 2023 04:12:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        110.3.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=986B599BB44707419667BF1BCE56E05CE066C209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:9e:2e:bc:34:17:ee:8b:63:cd:c4:16:92:
                    fc:e4:b8:47:d3:40:16:dd:d6:ef:4a:8a:2b:b0:f9:
                    4d:d3:3d:e7:43:4f:7d:97:3c:15:e1:a6:c4:f7:56:
                    f9:7b:f3:75:8b:e6:d0:1f:d8:5c:a3:6f:a9:77:fc:
                    c1:ef:fb:cd:5b:4d:5d:40:24:59:c8:15:49:12:37:
                    9e:9a:8e:7f:b5:12:81:96:c6:77:cc:3d:c8:b5:b5:
                    ae:7a:5c:62:ca:fa:b6:14:36:bb:5f:31:71:17:1f:
                    a2:64:b4:9f:f3:e6:ba:e1:f4:70:7c:f4:26:4f:2c:
                    45:18:ef:b4:23:a6:39:aa:3b:68:c2:ba:7a:5b:b4:
                    fc:48:66:a3:62:cd:7f:58:de:24:55:96:d3:d6:50:
                    47:ff:ba:e4:6f:c9:2f:5f:b2:85:09:6d:17:31:f9:
                    cf:95:d7:db:44:8a:f4:93:ed:b2:18:9e:9d:5f:54:
                    a0:4a:e4:80:86:d4:4a:0e:a9:73:39:3e:63:b4:12:
                    78:87:8b:f9:12:2b:5b:a8:52:52:d7:b0:0b:bf:b5:
                    96:40:ef:aa:b8:93:ef:1a:81:14:66:6a:1b:8e:36:
                    1f:c8:63:8d:e3:e7:e9:53:14:2f:18:7c:ab:ae:c9:
                    e6:2b:2d:b1:cf:ba:50:c7:a6:94:36:e0:5e:1d:d4:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:59:9B:B4:47:07:41:96:67:BF:1B:CE:56:E0:5C:E0:66:C2:09
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mGtZm7RHB0GWZ78bzlbgXOBmwgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:2a:7a:e7:c2:1b:aa:c6:07:49:01:8c:93:43:be:a6:9c:
         93:ef:e8:a2:fd:c1:65:1e:72:a9:ff:db:2b:ce:bc:a1:17:62:
         31:77:2a:71:e2:81:a6:72:bd:2a:0d:64:fd:c4:3a:62:0a:66:
         18:aa:54:1a:20:69:a7:1e:4b:c0:37:82:d6:c4:bb:3b:c4:e3:
         65:8d:18:60:db:09:93:fe:7e:bc:85:35:56:37:81:52:d0:6b:
         43:6d:ed:84:5f:54:f6:93:06:08:57:58:11:46:a2:8e:f3:d4:
         49:a3:45:96:a0:1f:11:ca:8f:6a:95:fa:98:0f:64:a0:e1:46:
         7e:6a:d5:3c:77:59:ca:19:80:03:fe:07:42:77:fb:c0:3c:9e:
         f8:4f:4a:fd:02:6e:23:c1:3d:13:30:b5:63:03:62:62:f6:13:
         7e:8a:dd:7e:31:d3:98:70:d5:31:df:f5:87:c5:a6:ab:b7:69:
         67:a2:2b:79:9a:f6:11:e2:c2:d0:38:5d:6f:8a:46:12:2e:ef:
         77:4b:07:95:30:f8:8f:1a:9f:58:1a:cf:3c:d9:95:5f:3e:d0:
         77:ae:98:03:7d:3d:7f:d5:21:bd:d5:c0:65:9b:cb:15:93:8a:
         de:8c:d8:1f:f5:a7:3d:8d:0f:f1:1d:aa:30:b5:7a:aa:3e:ed:
         61:67:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:18 2025 by rpki-client