Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/qBDt7b8dytotrYeLhVk1SJ2hzvs.roa
File:                     qBDt7b8dytotrYeLhVk1SJ2hzvs.roa (raw, json)
Hash identifier:          h4pISOMB6T0ZZugAMfrgqugmYfzbOOcsxMG7YgjRPLM=
Subject key identifier:   A8:10:ED:ED:BF:1D:CA:DA:2D:AD:87:8B:85:59:35:48:9D:A1:CE:FB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01B8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qBDt7b8dytotrYeLhVk1SJ2hzvs.roa
Signing time:             Fri 07 Jul 2023 04:14:38 +0000
ROA not before:           Fri 07 Jul 2023 04:14:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.216.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A810EDEDBF1DCADA2DAD878B855935489DA1CEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:1a:8b:19:0c:d8:a5:ee:9d:ae:11:e3:59:
                    09:60:5e:63:b1:6e:40:43:3d:59:fb:a5:a4:03:4a:
                    9f:41:83:29:9a:99:ec:fe:e6:78:3f:81:34:53:b4:
                    c4:54:38:0c:a4:ac:ea:9c:3e:1e:8f:01:e7:b4:ec:
                    40:ce:82:f4:9b:75:ce:1d:f2:ee:d3:be:d4:08:21:
                    f0:fb:be:49:c5:03:27:76:a6:d8:58:8a:58:91:7c:
                    5f:2e:3f:dd:f5:19:cd:51:89:08:63:83:a2:b8:16:
                    7f:3e:36:37:40:ce:4d:fb:24:f0:c3:e1:d8:7f:9c:
                    15:47:93:c0:5a:ea:f7:9d:62:7b:5f:0f:bb:de:e2:
                    31:a2:6c:e8:71:36:f7:54:41:23:2a:83:b0:64:25:
                    d0:d8:ca:0c:99:c5:04:53:a2:5a:16:dc:fb:15:21:
                    0f:fe:fa:9d:b0:a7:8c:55:35:49:7e:e4:af:7d:86:
                    75:84:c2:79:cd:82:da:da:7c:52:ce:0d:fe:28:38:
                    0e:25:74:1e:bf:a8:35:62:50:0e:c5:aa:0b:79:db:
                    1b:d6:37:68:e0:80:c7:b7:c3:ec:48:1d:eb:6a:70:
                    b9:70:8a:55:25:0a:e3:9b:ad:0a:ff:fb:35:07:3c:
                    b7:e3:ce:24:64:20:b3:29:ae:0e:f2:72:30:41:1b:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:10:ED:ED:BF:1D:CA:DA:2D:AD:87:8B:85:59:35:48:9D:A1:CE:FB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/qBDt7b8dytotrYeLhVk1SJ2hzvs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:ab:e8:9d:18:43:92:9f:2f:9b:5d:43:46:0a:9e:ca:e6:
         d1:25:c0:8f:9b:4c:e1:8a:b8:7a:8f:59:a4:28:2a:79:77:75:
         f3:d3:bd:df:63:eb:6b:85:13:98:64:94:fc:b8:65:f4:3a:87:
         2a:fd:71:b8:d9:57:de:cd:c5:64:44:87:c1:1b:f1:21:25:89:
         d2:7e:a1:7c:3e:d5:ce:2d:01:b2:04:18:51:2b:ac:db:0b:d8:
         ef:f0:e2:f7:b5:39:10:4c:a0:e7:18:a0:5b:f9:e8:6c:89:2a:
         b3:14:88:07:91:a8:9d:90:69:4a:5a:ac:3b:5f:c6:bb:d4:24:
         f3:e7:ae:ad:09:b1:f4:80:7c:5e:d4:e9:fa:1c:4c:0c:71:24:
         1d:02:40:f2:ef:47:d4:bd:67:70:2a:80:c9:8c:8c:1e:44:a4:
         ad:c2:a0:39:2c:4e:f7:fa:57:33:97:b5:d4:73:11:b5:56:4a:
         fc:21:e4:01:f6:ec:aa:ee:49:ea:72:35:98:b9:cd:d9:77:13:
         97:e9:5e:3a:f1:b4:08:91:7e:4b:b9:71:2f:af:19:f8:ee:1a:
         70:89:6f:71:f4:31:15:c6:5b:7d:9e:8d:03:a5:33:a4:b5:53:
         8a:d4:45:a8:b9:d0:43:51:93:b2:26:96:21:ed:0c:f1:cd:96:
         a7:46:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:27 2025 by rpki-client