Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NApwcy276cOCNILMYGDEBU_bceE.roa
File:                     NApwcy276cOCNILMYGDEBU_bceE.roa (raw, json)
Hash identifier:          KFphy6b3CSV3OtJNW/YT2dZrRNlo6ZBKG6P2kT8Irho=
Subject key identifier:   34:0A:70:73:2D:BB:E9:C3:82:34:82:CC:60:60:C4:05:4F:DB:71:E1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       98
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NApwcy276cOCNILMYGDEBU_bceE.roa
Signing time:             Fri 22 Jul 2022 06:33:39 +0000
ROA not before:           Fri 22 Jul 2022 06:33:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.234.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:33:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=340A70732DBBE9C3823482CC6060C4054FDB71E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ff:b3:f3:44:ad:fe:5c:0a:d6:a1:19:40:1e:
                    7e:a2:f3:09:ad:4d:98:84:85:e4:a5:a8:ed:9e:63:
                    b0:03:29:d4:98:8c:1f:02:6a:31:34:75:1c:3e:dd:
                    bf:aa:7a:a9:47:f2:11:ab:0a:25:b4:b3:5d:1e:26:
                    2d:2d:66:88:8c:30:99:bd:bf:d1:c2:33:88:31:f2:
                    a0:8d:6d:9e:a6:44:0d:33:33:bc:db:28:f0:8e:38:
                    d7:ad:ea:23:04:05:a5:02:d2:e7:6f:80:42:c8:2a:
                    a4:09:3d:76:26:9e:42:9b:20:43:ff:21:26:92:a0:
                    d5:ca:10:de:f9:ed:ed:e0:da:2b:b0:88:e6:c1:62:
                    49:d0:84:06:91:63:00:90:f0:c5:30:0b:7c:f5:48:
                    2c:a5:85:e5:f3:3b:00:dc:f1:3b:71:3a:d6:ca:d3:
                    9c:aa:e7:04:31:39:ae:78:2e:1e:f2:5e:86:b9:67:
                    68:a5:b0:f6:61:7e:16:79:f7:e1:d1:30:d5:80:e0:
                    e8:36:f1:f7:0a:4d:8f:ac:e5:50:39:fb:19:cd:d4:
                    07:ec:ad:1b:4e:53:c5:07:20:ab:e4:6f:61:c2:aa:
                    b7:6b:77:9a:85:f1:56:4d:79:f7:4a:1f:2b:cb:60:
                    42:7e:0a:06:c8:b9:6d:3c:2e:80:d3:86:4a:c2:03:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0A:70:73:2D:BB:E9:C3:82:34:82:CC:60:60:C4:05:4F:DB:71:E1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NApwcy276cOCNILMYGDEBU_bceE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:76:21:a9:07:8b:fb:73:4a:f6:e3:78:df:cc:75:2d:bb:6c:
         45:90:2b:33:95:2c:1d:18:66:61:e9:8a:1d:72:fb:e7:8a:31:
         85:a5:8f:b3:d0:c2:be:d8:85:35:e3:4b:f8:68:89:ea:e7:9b:
         92:63:4e:c2:95:e3:03:11:2d:e5:73:9a:c2:a0:25:cd:89:6e:
         c4:7d:86:cd:9d:57:c0:47:5c:81:d9:46:86:3a:d5:57:27:00:
         f5:ee:39:43:4d:e8:58:ce:3c:71:2e:68:ae:e9:cd:70:f5:c7:
         ce:f1:69:2a:f2:40:26:5c:50:81:be:6b:65:c7:2f:2a:f7:1c:
         4b:66:f8:d0:25:1a:ff:83:5a:73:e2:ab:9f:5e:72:dc:7f:15:
         78:77:56:23:7e:95:96:91:3c:64:f3:6f:1b:c2:ab:ac:80:31:
         4d:ae:4e:fe:3d:63:56:e9:8b:0d:92:11:4a:11:5b:65:8c:e6:
         1c:46:55:ad:94:5a:bc:f3:39:71:0c:01:4a:58:07:11:49:59:
         70:01:49:40:8a:3f:14:82:54:76:fb:9b:58:df:4a:c2:a5:9f:
         87:14:5e:09:70:45:3f:9d:cf:b5:b5:8b:7f:7b:18:63:01:18:
         7f:c6:d1:4c:8b:89:ab:b6:cd:bf:fa:0c:18:a1:93:54:13:7d:
         b5:85:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:37 2025 by rpki-client