Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DwBXYeVBAEyG-z_4VknzkIieNm0.roa
File:                     DwBXYeVBAEyG-z_4VknzkIieNm0.roa (raw, json)
Hash identifier:          NEdZieDLJXN3sOUFdHizAa0RTEz7kj7dPHCCc3QpOe8=
Subject key identifier:   0F:00:57:61:E5:41:00:4C:86:FB:3F:F8:56:49:F3:90:88:9E:36:6D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       7D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DwBXYeVBAEyG-z_4VknzkIieNm0.roa
Signing time:             Fri 22 Jul 2022 06:09:19 +0000
ROA not before:           Fri 22 Jul 2022 06:09:19 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.44.64.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:09:19 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=0F005761E541004C86FB3FF85649F390889E366D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:0a:17:6c:67:e5:f5:19:4c:eb:e5:9c:c4:
                    f5:cf:a3:70:3d:a0:94:cd:4f:6b:40:97:41:f5:27:
                    b9:6c:e3:c6:6e:0a:d4:74:54:c7:4d:6e:3c:da:f9:
                    bb:f0:8d:f6:8f:77:f4:20:d3:5d:89:f8:13:df:a4:
                    b7:af:b7:eb:de:df:c2:43:f9:45:3b:60:dc:9d:4c:
                    82:03:d5:e8:19:f4:46:ca:fb:ec:49:d1:e3:ca:5d:
                    d4:77:81:4d:91:80:a6:3d:2a:0b:3e:78:eb:e1:8d:
                    19:6a:55:bd:94:68:10:f7:60:87:96:eb:d1:24:74:
                    83:93:e7:aa:44:17:3f:db:77:cd:06:62:24:02:00:
                    1b:52:2f:af:8c:c6:a8:d0:25:77:dd:aa:67:57:6d:
                    d1:59:22:86:71:7c:4e:69:31:d6:03:09:45:2d:f1:
                    7f:b4:46:c6:30:2b:ca:43:0c:03:0e:ff:e7:39:53:
                    c3:d1:38:2a:d8:8f:0c:b6:78:b0:9a:d9:f8:6e:99:
                    18:b1:4c:23:40:e1:58:5f:3c:f5:67:8a:0c:e4:60:
                    a2:04:29:33:d2:25:15:e1:6f:1b:14:7e:14:63:19:
                    73:6e:e0:58:2f:57:0f:de:39:27:2b:86:d3:e8:ff:
                    f4:35:49:d1:13:ae:01:9b:37:2f:56:2d:d9:b5:29:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:57:61:E5:41:00:4C:86:FB:3F:F8:56:49:F3:90:88:9E:36:6D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DwBXYeVBAEyG-z_4VknzkIieNm0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:89:7f:29:5c:ec:ac:23:84:bc:88:6a:f4:a0:35:4c:a7:f6:
         c9:31:16:0b:44:5a:f2:a5:61:77:a9:05:bb:27:12:cf:8b:f2:
         a8:0f:a1:29:a8:61:e1:92:de:05:38:97:19:48:0b:78:11:80:
         f7:25:70:cf:58:7f:55:c1:48:fc:24:f8:62:ce:d7:26:7b:07:
         ef:71:6f:17:b6:97:f3:4a:37:04:04:e8:2b:d4:42:4b:0f:1a:
         e3:7e:65:b3:dd:e5:6d:1e:c3:98:5f:78:3f:e1:01:81:2b:d9:
         be:4a:85:63:14:d1:7e:eb:fd:c2:64:98:69:ff:02:5e:3c:54:
         58:cb:77:21:87:12:db:ae:cc:cd:a4:91:b6:f0:8c:66:f1:33:
         4c:a8:31:7e:39:e8:9b:f8:c8:ef:87:b9:b6:5f:a8:31:d1:a1:
         a3:30:92:1c:af:b6:6e:4a:4e:76:35:7a:64:28:b7:dd:b2:a9:
         da:a4:d0:8c:05:81:9c:f4:73:be:ec:48:61:57:b9:94:d8:fd:
         7d:17:e5:86:31:8c:8a:93:9e:e3:60:25:a2:ee:14:05:f7:03:
         48:fd:d5:e8:67:f2:a3:cc:e2:ac:d9:1d:51:87:4e:bb:d2:6f:
         56:df:86:a6:cb:f2:d7:02:5a:a5:db:4e:85:63:2c:05:3b:aa:
         68:15:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:11 2025 by rpki-client