Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/88jVANn08kpB1At-s-vQK6Z3Jik.roa
File:                     88jVANn08kpB1At-s-vQK6Z3Jik.roa (raw, json)
Hash identifier:          hXI9uQhUR5u7v/aycBrSPF/qNrO3dpN/xRJoWmpWRgA=
Subject key identifier:   F3:C8:D5:00:D9:F4:F2:4A:41:D4:0B:7E:B3:EB:D0:2B:A6:77:26:29
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       07
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/88jVANn08kpB1At-s-vQK6Z3Jik.roa
Signing time:             Thu 21 Jul 2022 06:59:14 +0000
ROA not before:           Thu 21 Jul 2022 06:59:14 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.120.184.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 06:59:14 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=F3C8D500D9F4F24A41D40B7EB3EBD02BA6772629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:6c:bb:e0:01:e4:5c:2d:7a:38:f4:1a:12:
                    76:3e:5e:52:2b:68:4c:7c:56:2d:f5:a5:c6:d6:77:
                    65:60:61:22:7b:9e:cb:eb:16:52:96:4e:3a:ff:8c:
                    39:dc:62:e4:5d:31:53:d8:8a:09:1b:c2:53:28:4e:
                    36:12:99:ad:d7:8c:a2:39:5e:30:7a:a0:06:4f:8a:
                    00:25:fa:31:69:89:da:66:9a:b2:95:2a:4e:59:ad:
                    c5:b6:fd:e6:93:7c:e9:d8:7f:94:8f:ca:7e:c7:e0:
                    f9:fd:f0:03:c0:57:1e:66:fb:b5:ab:84:02:d4:da:
                    70:1a:4a:d4:2e:53:04:7b:cd:03:9a:78:c9:84:ca:
                    59:1d:67:36:93:00:ad:c3:bd:76:f7:8d:ea:d4:bd:
                    03:94:96:31:56:23:17:99:78:7f:88:fd:66:c6:78:
                    b6:47:81:56:24:25:30:b1:8c:15:74:38:29:0e:5d:
                    cf:45:a8:a6:83:f4:73:d7:a5:07:ef:17:ce:d4:b9:
                    24:c0:07:3c:e3:f7:e0:8c:34:37:25:7c:7e:4e:cd:
                    a7:94:de:13:2d:14:29:e9:b0:2f:9d:c8:45:3a:62:
                    72:5f:4a:8b:6a:d4:21:6a:89:3d:18:db:2b:e6:2a:
                    92:cb:42:d7:5c:8a:b9:69:e7:dd:2e:f8:dc:11:6c:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:D5:00:D9:F4:F2:4A:41:D4:0B:7E:B3:EB:D0:2B:A6:77:26:29
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/88jVANn08kpB1At-s-vQK6Z3Jik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:58:1b:50:93:cc:f6:4f:36:b1:04:b0:23:6c:36:63:d5:cb:
         5c:6b:b5:c8:38:74:99:63:fa:11:a3:ee:3e:01:41:7c:55:7b:
         b3:55:8a:a3:f6:b4:a6:26:3e:ce:74:b7:48:31:cb:fc:10:e9:
         de:ff:12:f9:e8:4e:49:4a:d4:58:4e:94:c4:98:17:47:91:c8:
         f9:e3:db:78:7b:66:88:19:59:dd:05:84:6a:45:e0:43:d8:e3:
         0c:32:1d:28:e1:02:a0:32:27:33:10:74:79:81:70:9e:ba:f0:
         66:80:a6:ef:b4:83:a6:a9:fa:79:52:89:7a:22:d3:11:86:39:
         4c:c1:e3:3b:fb:b5:72:66:ba:2f:92:a8:70:ec:93:8c:44:ef:
         2b:98:d2:0b:41:0d:4d:d0:26:b4:17:40:ed:1e:33:c3:ae:88:
         4d:8b:67:f0:38:66:30:cb:a4:81:d5:bd:66:a3:cb:3b:7c:c6:
         f8:2a:fc:2d:13:3f:9d:32:a7:76:9d:50:19:1c:82:71:12:4a:
         90:d8:8a:ad:d1:55:f9:0e:bc:fe:d2:ce:4e:ee:14:90:10:f7:
         8d:a9:3d:4c:65:dc:0e:1b:0f:ff:a1:c0:48:10:70:9b:a9:33:
         5f:04:69:cf:27:ea:7a:0d:4d:e7:a8:81:ae:bc:33:3f:d2:6d:
         27:b8:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:13 2025 by rpki-client