Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GekImTc_GhmAn7IzHj_nN8EZC_o.roa
File:                     GekImTc_GhmAn7IzHj_nN8EZC_o.roa (raw, json)
Hash identifier:          yqquFnFO6PvwFgI7G6dtW5YcRnFHF2Jdkn6L4iSjWbY=
Subject key identifier:   19:E9:08:99:37:3F:1A:19:80:9F:B2:33:1E:3F:E7:37:C1:19:0B:FA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01E2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GekImTc_GhmAn7IzHj_nN8EZC_o.roa
Signing time:             Tue 01 Aug 2023 01:31:30 +0000
ROA not before:           Tue 01 Aug 2023 01:31:30 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug  1 01:31:30 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=19E90899373F1A19809FB2331E3FE737C1190BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:4b:ac:d7:65:2c:cf:27:d2:d4:3a:b2:37:
                    92:a2:85:a0:56:c1:55:7c:9e:a9:15:77:37:94:de:
                    fd:1a:11:d9:ba:fa:e2:38:56:ce:c2:f0:4c:3c:38:
                    e1:09:b8:ee:a2:d0:37:de:0d:f1:4d:d8:67:92:82:
                    dc:63:39:67:75:8b:9c:b9:07:63:30:fc:52:a7:3b:
                    67:0c:88:9b:5d:62:6d:55:79:04:64:01:b0:67:18:
                    a0:da:98:63:b6:6f:7d:73:ea:7e:60:67:5b:06:f9:
                    8a:f0:3b:16:e3:92:b3:50:e2:fb:21:df:e8:cb:2c:
                    79:0a:74:77:e6:a6:f9:57:2e:18:a7:5a:80:4f:97:
                    55:6f:87:bf:5b:69:33:f0:2b:e9:83:1f:78:f5:ee:
                    55:a0:8c:91:80:8f:37:a2:43:5b:80:d3:62:dc:30:
                    8c:88:b3:d0:7a:65:fc:81:dc:29:eb:c4:94:94:21:
                    0e:91:95:00:5c:94:1f:25:44:27:3e:40:f8:80:78:
                    85:c3:3b:2d:8c:85:a5:0a:9f:62:3d:6c:11:c2:94:
                    eb:0a:d9:2e:f6:f2:22:80:89:4d:d9:54:a4:97:5f:
                    cf:b7:e9:a0:e9:6e:5e:d5:19:0e:ff:c7:a0:02:50:
                    fd:56:d0:9e:60:43:1f:c9:89:8d:cc:91:97:ab:98:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:08:99:37:3F:1A:19:80:9F:B2:33:1E:3F:E7:37:C1:19:0B:FA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GekImTc_GhmAn7IzHj_nN8EZC_o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:f4:eb:2a:48:fe:d0:a2:00:11:1c:b5:66:49:cc:16:d2:
         01:11:68:2a:7c:6f:bd:df:72:05:08:1d:f3:0f:af:3a:28:65:
         83:f8:56:9c:a9:21:30:6e:4d:b7:65:43:3b:69:ce:5e:7a:71:
         52:6f:36:16:5c:22:56:0f:b7:a9:44:03:97:54:d6:7c:ed:10:
         b9:da:2d:31:19:ad:f5:f5:bc:eb:ce:84:2d:73:a2:19:dc:4c:
         cc:a6:46:0c:af:f0:6f:9e:72:e0:e6:11:29:ad:8d:d5:69:e1:
         cd:ad:4b:3f:41:4d:a4:d6:bf:0a:ad:17:45:b3:e4:17:25:66:
         e5:96:9c:f4:57:e4:c0:81:03:4c:0b:97:7a:f1:1e:36:e8:0c:
         81:48:da:74:6b:66:4e:79:79:40:9b:2d:5f:be:dd:66:9c:d7:
         7f:da:c4:15:c5:03:58:4d:c6:75:4a:43:ed:20:56:6b:5e:1b:
         cc:4d:cb:fb:bd:d2:26:29:2a:4e:4c:09:ed:17:f7:75:b2:4c:
         18:fd:ca:e7:4a:dd:43:f5:a2:a5:62:b3:31:41:5a:53:2a:12:
         64:85:42:10:12:93:4b:64:29:9d:6a:c5:90:f2:59:0f:1d:41:
         3d:46:86:82:74:bc:c6:9e:44:9c:7c:66:db:92:8b:cb:8a:6d:
         ea:76:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:11 2025 by rpki-client