Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Lw1d_j4Ng0LtV0J88KMRV9FWxT8.roa
File:                     Lw1d_j4Ng0LtV0J88KMRV9FWxT8.roa (raw, json)
Hash identifier:          H082qb2lL9Ycn/RxIyFbHPneHsPSwuvCEf0zdCTViEI=
Subject key identifier:   2F:0D:5D:FE:3E:0D:83:42:ED:57:42:7C:F0:A3:11:57:D1:56:C5:3F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0198
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Lw1d_j4Ng0LtV0J88KMRV9FWxT8.roa
Signing time:             Fri 07 Jul 2023 04:12:41 +0000
ROA not before:           Fri 07 Jul 2023 04:12:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=2F0D5DFE3E0D8342ED57427CF0A31157D156C53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:8e:d0:99:b9:fa:0e:d0:51:dd:3b:1e:b9:
                    a5:fe:d0:af:aa:8f:57:11:cd:7f:23:1b:d8:e3:8d:
                    2e:e2:3d:06:ce:f5:66:e6:a7:3c:af:48:f4:66:8e:
                    a1:95:9e:a2:e8:fa:07:58:22:45:cf:89:84:5d:72:
                    a5:fa:87:85:60:f4:75:1a:ad:a1:a6:09:32:03:9b:
                    c7:45:40:40:31:3e:74:8a:1d:85:c9:14:73:f1:03:
                    97:dd:c7:88:aa:1e:e3:82:e1:0f:b6:c3:ef:25:46:
                    6c:14:6a:60:6f:61:78:ba:4d:41:95:04:02:46:50:
                    9a:e2:dd:7a:2b:1d:e2:41:a7:f1:6c:50:4b:a4:e6:
                    e4:d1:17:b6:65:aa:07:ba:b3:5e:ee:90:29:97:b5:
                    a9:8b:93:e8:a0:96:89:05:c1:08:92:f6:34:63:aa:
                    8c:96:da:d3:f2:d1:36:1e:86:95:3c:1c:01:bf:dc:
                    8f:21:da:eb:ae:ce:ba:cd:8b:62:e3:36:38:d7:0b:
                    ee:d8:47:83:a6:c3:41:fe:4a:76:29:6c:cf:97:c4:
                    20:fa:ee:95:a2:50:aa:f0:ea:b7:90:49:03:82:66:
                    e7:31:d2:06:1a:98:d0:83:b6:9f:6a:5b:e5:e3:b5:
                    5f:44:ea:f5:19:1a:0f:84:af:64:5b:e5:a7:00:15:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:5D:FE:3E:0D:83:42:ED:57:42:7C:F0:A3:11:57:D1:56:C5:3F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Lw1d_j4Ng0LtV0J88KMRV9FWxT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:da:ed:9e:9e:aa:45:ae:a1:d7:bd:38:7b:7e:6b:4d:b1:0b:
         f0:1c:36:1a:18:36:11:6c:bb:fe:42:7e:9c:97:7a:92:b9:0d:
         9c:f0:ef:21:d6:a7:51:7c:6e:b6:60:2f:ee:18:30:57:cf:a5:
         61:df:2e:a3:65:83:5b:aa:aa:ce:b3:8e:61:43:9b:34:dd:3b:
         7f:0f:8f:d6:d0:c6:d9:61:c5:8a:a8:e0:23:d7:23:a9:68:0b:
         7f:fe:19:b6:f4:4c:00:39:8a:af:86:bb:90:9e:c8:c4:6a:78:
         1c:dc:58:27:4f:ce:19:38:0a:f5:96:b2:bf:43:12:90:a5:2c:
         8b:7c:f2:f8:a7:7e:73:66:ca:e2:8f:da:d1:6f:15:2f:59:78:
         31:c5:c8:16:3d:15:20:44:4c:a9:a2:c8:5d:e4:41:86:04:28:
         57:1f:5a:e2:e9:9a:d0:c7:0b:df:dc:c3:6c:09:9a:ff:2b:e1:
         79:02:ab:29:6c:70:95:71:d2:bf:7e:25:ad:a9:53:dc:75:98:
         9f:95:f2:ad:49:c6:ff:cf:cb:06:75:83:0a:82:19:dd:c3:35:
         53:ec:cb:e0:65:79:2c:f2:70:b9:4a:02:fc:9c:98:65:58:34:
         ea:b9:88:51:17:30:1c:2b:b9:f5:1d:6e:6f:3a:7a:ae:0b:7c:
         3b:7c:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:01 2025 by rpki-client