Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ltmnt8xWXVnZNfzbismyzqHxXsw.roa
File:                     Ltmnt8xWXVnZNfzbismyzqHxXsw.roa (raw, json)
Hash identifier:          XgMJmTyhbudvFX4oT8Aleq56T6LrqGAgjpF9M/uQHYU=
Subject key identifier:   2E:D9:A7:B7:CC:56:5D:59:D9:35:FC:DB:8A:C9:B2:CE:A1:F1:5E:CC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       06
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ltmnt8xWXVnZNfzbismyzqHxXsw.roa
Signing time:             Thu 21 Jul 2022 06:59:14 +0000
ROA not before:           Thu 21 Jul 2022 06:59:14 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.120.180.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 06:59:14 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=2ED9A7B7CC565D59D935FCDB8AC9B2CEA1F15ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:ac:95:78:c2:73:2b:2b:c7:29:6b:a4:6d:
                    28:e8:42:e5:84:2a:c9:2f:80:81:b4:31:fd:bd:bf:
                    16:6a:22:76:0e:1f:80:24:4d:78:a5:02:78:4f:af:
                    09:1a:72:6b:8f:d8:08:3d:44:d5:2d:d0:9c:54:bd:
                    3b:a3:0a:89:63:3a:92:42:cb:81:dc:d1:08:6b:c6:
                    9d:fe:7b:b4:55:a1:81:c0:2c:03:78:67:9f:65:20:
                    26:12:02:ca:ca:f2:43:fd:a3:a1:62:22:6c:b5:0a:
                    cd:e7:10:62:5c:e6:7a:af:f6:07:c2:f7:2c:e3:02:
                    55:93:67:09:13:ba:8d:d3:7e:ba:6d:e0:12:e2:b2:
                    03:a9:3f:8a:a1:ed:aa:7d:1b:59:f7:dd:f8:0c:8b:
                    6d:1f:15:98:21:f5:e1:ce:5c:ec:a7:c3:51:23:31:
                    46:3a:fd:91:df:60:d3:10:6c:97:72:9c:0e:84:ff:
                    5e:d5:d7:2f:f6:1a:41:75:57:b9:ec:39:cb:57:c4:
                    93:f1:e8:8d:78:78:6d:57:ba:43:5e:4b:b9:9f:00:
                    de:49:81:df:5c:3b:54:13:26:b5:7b:ed:ca:41:f8:
                    49:23:7b:5c:70:e0:6f:13:b4:0a:9f:25:1e:2a:c1:
                    1d:11:69:2a:eb:5b:6c:05:48:ef:c1:03:17:f5:bd:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:A7:B7:CC:56:5D:59:D9:35:FC:DB:8A:C9:B2:CE:A1:F1:5E:CC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ltmnt8xWXVnZNfzbismyzqHxXsw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:e3:9c:a4:9e:87:d9:67:42:aa:40:24:bd:7f:7c:63:de:ad:
         95:74:e9:cc:05:1e:94:8c:92:d9:79:24:69:a5:3c:f7:58:2c:
         77:60:a0:18:9e:da:8b:1a:e9:9d:bb:bc:1c:d1:e1:cd:9a:9d:
         6e:b2:07:34:61:8f:9e:8f:be:ac:f8:9f:ee:92:b8:e5:a4:40:
         1b:51:bb:15:38:9e:6a:6d:87:73:c6:7a:4d:6e:ba:81:3a:a0:
         3c:3f:4d:41:fe:08:be:1a:e6:df:3c:59:b6:9e:c6:ea:2e:14:
         dc:14:94:8c:8e:00:40:13:55:d8:a4:b1:34:c8:e4:9c:c8:a9:
         22:36:40:a0:ae:ba:83:df:e3:f1:ce:09:06:b1:ad:85:53:9d:
         40:b1:e0:fd:c2:1c:37:ba:6d:0d:16:a2:44:c9:7a:18:5f:35:
         b2:35:06:6c:9d:75:a4:ec:81:74:f8:97:b2:6c:7e:2a:bd:c3:
         c9:05:51:6e:d4:73:1b:95:7b:c3:73:86:a8:ed:02:b7:96:f0:
         11:ff:88:2c:9c:42:2a:67:0b:e2:1c:6b:66:66:1e:dc:cf:97:
         c1:b8:56:6d:0d:7a:6e:18:1e:ba:fd:c1:d0:6e:1a:bd:38:e9:
         4e:34:59:00:6f:52:95:0c:2e:0d:26:74:9f:11:13:69:49:3f:
         5c:dd:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:11 2025 by rpki-client