Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/3-0EShBSMY2U995jrczFtYttVa8.roa
File:                     3-0EShBSMY2U995jrczFtYttVa8.roa (raw, json)
Hash identifier:          ZpE0YlHgoTRilHTJTXVQ0x5k88AvUqvLX72uMyMvD2A=
Subject key identifier:   DF:ED:04:4A:10:52:31:8D:94:F7:DE:63:AD:CC:C5:B5:8B:6D:55:AF
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       13
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/3-0EShBSMY2U995jrczFtYttVa8.roa
Signing time:             Thu 20 Oct 2022 06:24:20 +0000
ROA not before:           Thu 20 Oct 2022 06:24:20 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        210.141.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:24:20 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=DFED044A1052318D94F7DE63ADCCC5B58B6D55AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:aa:68:dc:59:ba:42:74:46:ac:5b:81:c5:
                    38:55:64:b9:d3:96:4b:c5:33:ae:2d:90:30:fe:2f:
                    4f:87:c6:be:66:c1:4e:a2:9a:20:b3:99:d5:d9:8c:
                    92:f9:02:1c:35:cf:b8:02:d1:db:50:ab:d4:b3:06:
                    c1:f6:e6:42:d2:c1:59:7a:be:be:42:27:f2:9a:56:
                    ae:33:90:80:49:51:b1:27:29:57:57:6b:54:b0:a4:
                    34:99:3c:2a:e1:4c:b3:55:87:c3:62:19:38:63:72:
                    68:64:f6:b4:c5:4d:45:da:f5:17:d8:11:f5:39:e5:
                    7f:90:b0:37:b0:a3:f9:4a:af:e8:99:35:cc:64:3a:
                    fa:2f:cb:cc:5b:5f:cf:dd:34:fc:36:3d:03:22:e9:
                    1a:ff:c2:75:16:17:e7:de:50:f7:a2:05:a8:6d:00:
                    07:11:eb:df:69:72:fa:8c:92:2f:dd:2e:d7:d6:84:
                    ad:8f:96:e4:c2:2a:a5:59:c7:ae:92:86:52:0c:71:
                    c1:fb:8d:c7:06:e5:0e:a5:62:f8:3a:19:09:2b:39:
                    92:43:8e:ba:42:43:f5:d9:05:53:c4:39:f5:1d:3f:
                    8e:07:56:82:88:3b:1b:8e:c3:ca:bb:20:d5:56:7d:
                    c2:62:2f:f0:ae:02:ee:13:b9:a6:92:e6:ba:fd:8b:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:04:4A:10:52:31:8D:94:F7:DE:63:AD:CC:C5:B5:8B:6D:55:AF
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/3-0EShBSMY2U995jrczFtYttVa8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:80:04:84:e5:d9:f9:41:5e:47:1e:37:81:d5:e2:2e:53:ac:
         e5:b3:33:00:a2:03:35:28:f3:cd:03:3c:f7:81:ba:a6:9a:31:
         4f:66:00:26:b8:84:86:b3:0e:c1:52:df:88:ea:94:88:f3:50:
         99:64:f8:6c:d3:03:d0:94:ba:25:85:00:92:8e:01:dd:a7:03:
         ab:df:31:0b:df:3d:58:e3:ab:75:f3:30:4f:7d:61:94:0d:86:
         38:b6:eb:d8:4d:f9:a7:13:32:c2:28:9a:68:34:cf:76:cf:33:
         2b:ca:aa:c8:8c:ad:b6:95:c6:ed:d8:a5:9e:e4:de:11:11:b3:
         0f:5d:bd:9c:d6:8a:05:39:9e:78:e3:fc:08:83:b3:45:07:d8:
         28:7b:81:ed:4a:b1:d8:cc:b0:a4:b2:31:9c:6d:25:b5:76:48:
         ab:4f:f3:c1:df:ea:48:f1:0a:b5:b4:25:29:35:35:f2:40:16:
         c7:58:36:bd:75:2a:37:79:96:4c:be:56:c1:2b:df:29:00:30:
         d0:0e:72:57:b6:3b:e6:a5:d8:c3:5a:34:df:8e:d8:38:ff:8f:
         0d:39:4f:19:b5:21:fa:e5:08:98:cb:82:26:0e:ef:d9:99:e7:
         25:38:ec:b4:eb:d2:9e:ba:7c:72:28:c7:03:51:64:7a:97:f7:
         52:c4:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:11 2025 by rpki-client