Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/onO0CiTBy1He8Jqqgu-bSjSZyF0.roa
File:                     onO0CiTBy1He8Jqqgu-bSjSZyF0.roa (raw, json)
Hash identifier:          iXd7R+yvMHOl9ycW0NAo6k+DX/EOW7iu3oLhOkz0XUY=
Subject key identifier:   A2:73:B4:0A:24:C1:CB:51:DE:F0:9A:AA:82:EF:9B:4A:34:99:C8:5D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       015E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/onO0CiTBy1He8Jqqgu-bSjSZyF0.roa
Signing time:             Fri 07 Jul 2023 04:10:32 +0000
ROA not before:           Fri 07 Jul 2023 04:10:32 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.176.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:32 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A273B40A24C1CB51DEF09AAA82EF9B4A3499C85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5f:07:26:5c:3d:89:f3:d4:6f:10:d0:3d:b5:
                    e5:88:fe:2c:ad:44:1e:4f:b4:75:a9:f7:f8:b2:d6:
                    20:0d:53:2c:80:82:88:bd:79:70:4a:b9:5d:a9:74:
                    92:1b:f0:ad:ab:80:8b:0a:f9:dc:29:79:fa:51:93:
                    fa:a3:8f:36:a2:09:55:04:5a:9f:6b:e8:cd:c0:40:
                    50:47:ba:ce:e5:67:da:32:8d:c4:a4:25:97:ce:97:
                    ed:6b:8d:ca:70:db:78:4d:dc:bf:07:8d:cf:27:18:
                    9a:62:7a:ab:c5:66:22:45:28:98:c6:1d:be:f1:37:
                    49:1a:5e:2c:fa:ec:cb:4d:f6:ed:3d:1d:82:46:86:
                    46:51:72:df:98:45:0f:d9:42:84:22:6b:58:14:a5:
                    ba:2a:bf:8f:86:f4:1b:05:93:a5:3c:b5:5d:d7:df:
                    97:74:a4:86:3b:8d:37:2e:a2:59:ed:49:b2:ca:6d:
                    3f:d5:9e:3d:d3:78:c9:0a:7d:d3:ce:46:43:c5:df:
                    93:1c:2d:af:0d:04:51:b5:03:d7:9d:96:7d:66:80:
                    7f:28:5b:f7:20:c4:32:93:ee:45:ed:68:e5:07:fa:
                    84:e2:27:c4:aa:99:48:03:39:89:bc:af:7f:3a:a9:
                    95:83:d6:1e:d7:33:17:a3:95:23:63:3b:89:c6:a2:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:B4:0A:24:C1:CB:51:DE:F0:9A:AA:82:EF:9B:4A:34:99:C8:5D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/onO0CiTBy1He8Jqqgu-bSjSZyF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:1f:52:9f:3a:8a:95:a3:e2:2d:da:61:eb:0e:14:36:ca:5d:
         95:3d:ea:48:5e:7a:64:80:2f:05:ab:77:ab:da:16:df:51:35:
         9d:e6:34:ca:0a:9b:5a:cf:a0:80:bc:d4:51:0d:00:09:f0:9f:
         bf:39:72:36:15:dc:31:a6:e3:1c:17:d0:d9:ee:12:c6:8f:b1:
         38:24:38:10:db:ac:85:d8:e3:7d:47:e5:7a:aa:bf:26:df:e7:
         a7:dc:25:ae:bd:d9:9e:ba:d5:b7:e1:99:37:30:2c:2d:64:b1:
         2c:56:1a:7f:e4:23:af:3c:8c:47:b9:4f:a3:67:09:b0:23:b0:
         02:b0:86:70:8e:5d:86:16:03:6e:c0:07:93:40:08:4d:46:90:
         f0:c4:b3:eb:7b:96:a6:dd:78:f4:08:53:9d:41:d7:86:c6:9b:
         0c:34:a5:93:b3:e7:bf:be:70:39:e9:c3:a2:db:f6:54:58:22:
         82:0f:e2:27:28:57:74:73:ba:0c:f7:e0:f1:ad:70:f3:5c:d0:
         3a:f2:45:02:40:d4:dd:3b:54:64:10:e7:67:4f:45:94:fa:24:
         ba:dc:11:9b:23:79:b3:9e:29:1a:32:99:7b:d7:9c:8a:ff:2e:
         9f:15:e6:00:82:6f:22:e8:95:62:8d:67:e2:a0:95:c7:56:45:
         d4:4c:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:58 2025 by rpki-client