Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/KRAq9VgnfSJanmelQAChhrZZldY.roa
File:                     KRAq9VgnfSJanmelQAChhrZZldY.roa (raw, json)
Hash identifier:          pN8EIVUMXt6Aq2krI1wUavqBzbyjR95rH/5NAQVHWrk=
Subject key identifier:   29:10:2A:F5:58:27:7D:22:5A:9E:67:A5:40:00:A1:86:B6:59:95:D6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01C1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KRAq9VgnfSJanmelQAChhrZZldY.roa
Signing time:             Fri 07 Jul 2023 04:14:41 +0000
ROA not before:           Fri 07 Jul 2023 04:14:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        153.120.208.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=29102AF558277D225A9E67A54000A186B65995D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:00:06:5d:b7:91:2a:f7:28:e6:f0:64:58:
                    2f:fc:93:8a:9d:38:25:9b:99:f5:ed:63:5e:13:75:
                    81:4d:8c:04:6b:69:e7:06:39:28:cd:1b:7c:69:e8:
                    1e:3a:8a:97:68:63:d9:10:08:ee:ea:05:a7:8f:74:
                    ab:3f:23:1b:51:a7:42:a4:f6:b9:1f:e3:f0:8b:e1:
                    ee:40:40:29:d5:bf:2a:4e:96:f6:7f:ec:34:ae:f3:
                    6e:4e:7d:cf:a1:9e:36:8d:7e:ec:82:2f:3e:f8:00:
                    3e:5a:57:b9:ce:20:63:f9:0f:8e:77:df:0b:a2:e3:
                    89:e5:9c:32:64:31:41:50:e2:f5:72:44:ed:1a:e5:
                    37:cb:2e:2c:c9:9f:bd:e7:bd:52:bf:1c:68:6d:49:
                    08:cb:7a:76:95:6a:9c:75:9e:9f:f6:8b:01:9e:bc:
                    25:29:9a:8b:ff:08:29:e4:da:72:d7:6a:eb:54:c6:
                    e9:b6:03:bf:a7:8b:cc:5c:ab:a0:12:a2:8f:63:0a:
                    30:2f:82:ee:92:18:3a:0f:09:da:27:fa:cd:40:81:
                    84:5d:08:ab:ac:ce:97:71:f8:c6:f6:2d:87:2d:7a:
                    8f:40:16:4d:3f:3f:bd:56:cf:89:a3:10:16:5f:0b:
                    5e:b6:2e:7f:be:8a:a2:bf:a8:44:39:d4:ad:f0:51:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:2A:F5:58:27:7D:22:5A:9E:67:A5:40:00:A1:86:B6:59:95:D6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KRAq9VgnfSJanmelQAChhrZZldY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:40:be:99:4b:11:6b:eb:ba:f8:24:00:e4:72:be:55:e8:5a:
         75:3f:72:6f:f7:d0:e1:e7:8a:de:6e:75:80:da:65:5d:fb:9e:
         af:62:5d:fc:0b:58:a6:4a:4d:cd:27:64:99:15:f3:9f:0c:41:
         9a:9f:75:54:7d:f8:07:54:77:e2:66:24:13:39:be:13:d4:d5:
         f7:2a:9b:0d:20:44:dc:ce:18:8f:e8:e9:06:f2:e3:e7:78:39:
         00:8b:9a:60:bb:9b:7a:55:30:16:b3:39:90:43:ff:35:ed:c9:
         2c:ef:64:64:95:64:34:cf:94:a0:17:46:3c:24:b1:9f:d8:75:
         19:b7:0f:fb:df:01:a6:1c:8d:11:a7:b8:42:29:83:9d:7d:63:
         f3:65:5d:a9:39:d8:19:cc:08:16:0c:97:9a:15:47:ae:cd:b5:
         bf:da:df:cb:e7:6b:7b:13:0c:8d:2a:65:b3:6b:fc:5e:61:b8:
         68:81:f2:4f:9c:8b:13:92:94:bc:77:82:00:ed:19:5f:0c:b3:
         ad:e8:0b:82:26:cf:51:5c:69:6a:c5:47:7a:15:ae:ba:f5:a7:
         49:74:99:e6:ec:1a:e0:49:17:80:18:da:7f:95:0d:f9:c6:ca:
         e6:07:7c:5e:b2:55:ea:a1:09:c2:a1:69:6e:cd:ae:a0:d8:eb:
         80:de:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client