Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/O0GNFwdS_N0BFWBQoM3Pgd3StEg.roa
File:                     O0GNFwdS_N0BFWBQoM3Pgd3StEg.roa (raw, json)
Hash identifier:          m+88mBlFEsvND7zCXPNZLMz42lzbaDrtB/0qi/tS/Ig=
Subject key identifier:   3B:41:8D:17:07:52:FC:DD:01:15:60:50:A0:CD:CF:81:DD:D2:B4:48
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       3B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/O0GNFwdS_N0BFWBQoM3Pgd3StEg.roa
Signing time:             Fri 22 Jul 2022 01:10:08 +0000
ROA not before:           Fri 22 Jul 2022 01:10:08 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:10:08 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3B418D170752FCDD01156050A0CDCF81DDD2B448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:9d:72:0f:48:ba:bd:61:59:85:18:a1:2f:
                    97:d1:2a:89:12:d8:0c:c4:13:2d:21:01:9a:f1:85:
                    c4:f3:a8:3f:3c:3e:fd:65:65:3b:26:64:ed:a7:33:
                    4e:7c:21:26:2d:87:d8:f1:1c:bd:08:a4:12:74:02:
                    c8:a6:f7:88:b7:2d:d6:aa:ba:7a:8d:71:18:0b:1c:
                    2e:7d:74:54:86:bb:9f:52:dc:99:e8:68:19:de:07:
                    e9:6d:3e:99:f9:9d:e7:cd:73:d9:da:d1:5f:a8:7a:
                    3e:6f:b4:95:9c:26:e6:ba:e9:53:ba:65:61:ec:b8:
                    1b:61:e1:b8:13:6c:67:47:21:2a:a9:a4:b2:c9:4f:
                    ab:62:56:8a:32:ff:62:c2:28:1b:7e:ad:b5:95:e0:
                    60:1e:ea:9b:3b:14:8b:22:7b:05:c5:cd:c8:51:7e:
                    e4:7b:41:3b:b4:39:48:90:0d:7b:bb:78:8c:24:81:
                    43:f3:6a:22:5e:b2:ed:a2:3a:72:0f:80:f4:49:48:
                    81:5c:e1:09:9f:b6:dc:64:9b:00:82:1f:99:25:0c:
                    ae:7d:91:8b:e7:c7:dc:54:ed:03:c4:3e:e8:e7:bc:
                    cf:a2:18:5d:59:2a:3a:58:df:06:8c:44:18:19:0b:
                    a7:07:c5:ee:dd:24:1c:09:ab:9b:ad:42:f3:79:3f:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:41:8D:17:07:52:FC:DD:01:15:60:50:A0:CD:CF:81:DD:D2:B4:48
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/O0GNFwdS_N0BFWBQoM3Pgd3StEg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:6a:da:62:c4:42:7c:8c:57:ff:43:1d:f5:24:25:c6:72:
         76:3e:1d:3a:3b:41:c5:b3:08:6e:17:51:81:90:a2:db:eb:5c:
         99:41:bd:81:9f:02:91:54:2b:79:6e:23:cb:3d:14:12:db:40:
         66:a1:a1:5d:21:ad:9f:21:f6:d2:e4:f1:b8:cd:0b:ce:83:3d:
         b4:bb:cb:47:4c:13:26:36:25:26:8c:e0:d4:19:d5:71:35:59:
         bb:f8:28:82:9b:47:71:d8:94:a7:d9:a1:be:5f:d7:5e:65:b2:
         cc:bb:dc:5b:f5:70:bf:86:cc:d8:be:9c:ab:16:61:e3:79:eb:
         24:61:ec:d5:ec:da:0c:a9:fc:37:bd:3e:06:59:49:bf:79:55:
         6c:b9:af:e8:31:3d:a9:fe:d1:31:66:a2:3e:f6:6b:05:2f:89:
         25:bb:84:03:42:9d:0b:56:35:b1:c5:c2:1b:35:fa:6d:c4:7e:
         07:91:60:27:f5:4a:cb:49:27:cd:08:17:de:c1:21:72:f3:d3:
         af:3b:c4:f2:98:cc:ea:0f:1d:28:ea:e4:b7:c7:18:5d:cc:a7:
         cc:a7:ea:45:69:4c:c0:3b:5b:7b:4e:d0:f8:20:b1:3d:03:ac:
         64:c5:1c:25:e8:fb:37:fb:28:dc:ff:da:cf:19:96:e2:86:4c:
         cb:57:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:41 2025 by rpki-client