Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IsUj05sny5vT42v0zd5UpO_stts.roa
File:                     IsUj05sny5vT42v0zd5UpO_stts.roa (raw, json)
Hash identifier:          zyKCCBcrtFsLz3jQ59HCVIKR5oVDrFK+4dJPiOOhROs=
Subject key identifier:   22:C5:23:D3:9B:27:CB:9B:D3:E3:6B:F4:CD:DE:54:A4:EF:EC:B6:DB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       D6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IsUj05sny5vT42v0zd5UpO_stts.roa
Signing time:             Thu 28 Jul 2022 05:37:48 +0000
ROA not before:           Thu 28 Jul 2022 05:37:48 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        180.131.120.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:37:48 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=22C523D39B27CB9BD3E36BF4CDDE54A4EFECB6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:60:05:34:03:74:82:35:f1:71:df:08:0b:
                    6c:6f:06:bd:e9:90:4a:38:17:23:d6:71:ef:51:59:
                    b1:5f:8b:ee:9d:a3:fe:84:e3:be:b2:81:0c:f3:8c:
                    20:54:1f:c4:2a:f8:2a:c9:72:df:27:96:9b:f0:fc:
                    6d:e3:57:76:7d:78:8b:16:aa:4f:c2:ed:98:3f:b3:
                    87:35:83:4c:29:e6:e4:7c:73:f0:a4:52:ab:f5:0e:
                    be:35:23:af:7d:d3:e6:43:2c:2b:9d:f7:aa:20:73:
                    b0:c3:6e:de:f2:65:4c:35:a0:a0:74:c0:03:df:e9:
                    60:b4:74:e3:ec:b6:61:9f:28:bf:52:af:fc:be:4e:
                    e2:f1:17:25:32:d8:f8:fb:88:af:0a:c8:c2:31:99:
                    ba:d2:c9:36:94:27:ff:3f:9e:e2:a6:44:d9:2b:98:
                    12:36:a9:e9:7b:9f:08:66:67:b1:7d:64:64:95:80:
                    57:1c:08:1c:22:60:41:5e:ed:be:49:60:40:51:58:
                    51:f5:12:0f:f6:ef:29:29:48:f2:83:1f:10:c8:8b:
                    61:78:3e:9b:fe:8b:ee:af:57:41:e6:47:98:00:8b:
                    69:1a:f9:3f:aa:5f:62:d4:57:0a:22:f8:6f:a9:ec:
                    1b:6b:32:64:35:1c:3d:64:e1:49:ba:a8:1d:10:c9:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:23:D3:9B:27:CB:9B:D3:E3:6B:F4:CD:DE:54:A4:EF:EC:B6:DB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IsUj05sny5vT42v0zd5UpO_stts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:29:c0:7d:35:0e:51:6b:ef:1f:df:a3:18:e2:ea:b7:47:
         2b:f1:7c:ee:2d:6c:90:69:a2:2b:e7:c3:fb:af:eb:fd:b8:59:
         fd:3a:8d:2e:e3:98:a6:09:a3:e4:2f:ff:eb:17:2a:d3:1c:34:
         3c:e0:7b:4f:cb:dd:11:93:cb:6a:3b:5a:9d:06:34:e5:6b:b6:
         39:89:b6:47:5f:5c:79:7e:ae:c6:57:31:0c:31:59:46:69:34:
         e3:1d:14:aa:72:ad:f4:32:06:35:95:b9:b2:c4:d7:62:b7:d5:
         0e:c4:7c:fc:e5:9d:a0:22:2d:d3:f6:ee:db:9a:02:22:e1:ac:
         10:fd:5b:b5:51:f9:2a:a4:80:86:12:c6:c8:32:a0:92:b8:66:
         6a:48:9f:71:bc:a9:68:11:cb:d3:f9:0f:95:4b:c7:b0:17:83:
         26:e5:0a:29:8c:37:29:39:72:0e:02:44:b4:2a:0a:1c:49:e5:
         ef:81:ff:c0:4b:5c:19:81:8f:dc:26:78:48:1c:04:90:a0:ea:
         07:dd:e9:29:3c:68:b5:b8:78:a8:c1:ff:b9:4e:9f:e4:b3:c0:
         92:5d:9a:f3:88:bc:a8:9d:14:b2:58:c7:16:8a:c7:a0:de:48:
         e0:0c:9d:8e:1a:14:0f:bb:3a:b0:e9:db:37:0e:8c:60:df:61:
         01:9b:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:11 2025 by rpki-client