Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7kInoKzziXVkLieeon0AvUesoz8.roa
File:                     7kInoKzziXVkLieeon0AvUesoz8.roa (raw, json)
Hash identifier:          HRXz9VUp6QZqyesUsMgP5h+s/YfiUuwwdCcsI1Ad/X8=
Subject key identifier:   EE:42:27:A0:AC:F3:89:75:64:2E:27:9E:A2:7D:00:BD:47:AC:A3:3F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       18
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7kInoKzziXVkLieeon0AvUesoz8.roa
Signing time:             Thu 21 Jul 2022 08:29:35 +0000
ROA not before:           Thu 21 Jul 2022 08:29:35 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 08:29:35 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=EE4227A0ACF38975642E279EA27D00BD47ACA33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:5c:b6:7a:d3:b8:0f:39:66:31:70:0b:da:
                    54:15:6d:86:7a:1f:c0:81:e7:c0:e8:f4:64:e0:69:
                    32:26:b2:bc:ef:f7:bb:5b:0b:5d:54:57:15:18:b3:
                    48:76:0e:60:52:be:ec:d4:4e:d9:5c:77:92:76:c4:
                    b2:a2:96:4a:10:47:1b:61:8a:56:b6:97:34:ab:f8:
                    ed:8c:14:4c:92:f0:2a:a3:c3:2f:39:be:d0:12:64:
                    bd:16:13:8e:16:9c:48:c4:a7:9f:f5:0f:6b:df:20:
                    70:5d:af:dc:5c:fc:18:5e:5e:3b:fe:df:04:d5:ba:
                    f4:ac:ef:bc:73:76:62:51:15:f6:22:ae:ee:57:e3:
                    33:be:f9:f8:7c:de:8d:f6:e6:ce:1c:b9:33:03:80:
                    e7:8f:e9:28:d4:2a:92:7a:7f:5a:7c:79:e0:8b:3a:
                    03:15:51:98:78:5d:dd:6a:90:51:11:c0:75:d4:09:
                    23:a6:f5:cc:0e:34:af:1d:72:97:f0:87:70:3d:41:
                    a5:02:da:1b:70:34:ea:e7:4a:c8:f7:58:82:9b:5b:
                    b5:13:83:65:80:0e:85:0e:d4:0c:7f:36:9b:25:77:
                    a1:00:16:71:da:d3:f8:7d:af:83:a5:9a:f6:ea:4e:
                    e5:ab:34:9b:9e:23:e1:26:67:aa:99:f1:f7:57:5b:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:27:A0:AC:F3:89:75:64:2E:27:9E:A2:7D:00:BD:47:AC:A3:3F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7kInoKzziXVkLieeon0AvUesoz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:65:1a:71:d1:76:5c:86:be:09:2c:a3:7e:6d:93:0d:a3:
         2f:72:96:2e:c4:56:4a:e0:7f:d6:9a:02:0f:93:15:1d:b0:f2:
         ad:3a:3e:4b:be:66:d1:7a:0f:e9:01:02:14:0a:f0:f3:94:8c:
         5f:39:af:90:ff:54:9b:74:40:f2:6b:62:9b:d8:20:49:bc:c5:
         78:07:45:71:02:af:17:2a:18:3d:8d:91:35:b6:9a:3c:4b:bc:
         20:51:d3:20:77:3e:f4:03:08:30:fd:70:10:aa:4e:d8:33:93:
         e5:7e:4e:a8:9a:8a:26:33:14:88:ac:5b:18:d5:a2:be:64:7d:
         f9:e7:21:e1:7c:7d:27:21:3e:3f:ca:1b:f7:7a:56:6c:60:dc:
         5b:de:51:0f:7d:58:bc:4d:cc:60:d9:51:0e:4b:6d:92:68:db:
         08:9f:40:0d:f1:26:39:7a:38:c8:af:3b:10:3a:f6:61:f7:83:
         af:d8:d3:5f:83:ff:9f:00:49:80:17:ce:92:07:08:f3:0b:f4:
         96:81:41:22:a2:63:1b:bb:c6:84:de:40:fb:e6:41:37:87:bf:
         30:a9:de:ef:3f:89:ea:17:86:10:8d:7a:14:24:8e:4b:5e:53:
         89:69:1a:8f:46:d8:89:56:f0:be:00:b9:e8:98:4e:09:05:f8:
         8c:aa:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:25 2025 by rpki-client