Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OU1bhdPKgyZQV22OUFEOCUeCp58.roa
File:                     OU1bhdPKgyZQV22OUFEOCUeCp58.roa (raw, json)
Hash identifier:          q8eJtCwMwrAvoeeMqSJKBuE/TRtK71CHaccnv0n5Agk=
Subject key identifier:   39:4D:5B:85:D3:CA:83:26:50:57:6D:8E:50:51:0E:09:47:82:A7:9F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       99
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OU1bhdPKgyZQV22OUFEOCUeCp58.roa
Signing time:             Fri 22 Jul 2022 06:33:40 +0000
ROA not before:           Fri 22 Jul 2022 06:33:40 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.234.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:33:40 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=394D5B85D3CA832650576D8E50510E094782A79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:c2:3b:f4:7e:be:73:c4:70:47:3a:ed:a3:
                    90:9a:85:32:6c:c4:f8:da:18:fa:ff:20:aa:f3:33:
                    79:28:51:b0:0d:cd:5c:b1:2d:e6:8e:0a:65:7f:f5:
                    9f:bb:b3:e3:ea:93:78:70:cb:f0:fc:bb:03:19:cc:
                    56:44:8c:0c:71:c4:a0:47:47:8b:e7:e4:0b:3d:2e:
                    b3:75:1c:62:c2:b9:47:9c:a4:b4:40:2e:a5:31:11:
                    a6:a3:5e:c3:5a:56:d6:c2:a3:07:63:a5:c0:7b:7c:
                    85:f4:4e:f7:9d:4d:04:d6:34:f4:5f:0b:f8:dd:b9:
                    d3:1d:f6:e5:13:aa:fc:1a:49:00:2f:4a:b0:61:fc:
                    98:e0:53:ff:19:f1:a2:a6:a5:8b:2a:df:c9:41:f0:
                    35:84:7e:0e:e9:5a:bf:ca:40:ea:37:bd:92:06:48:
                    b7:31:6e:a2:20:6c:c1:bd:d9:b3:d9:58:e7:65:b1:
                    58:67:8b:3d:e2:7f:fb:2c:ca:72:0d:2a:d5:2f:49:
                    05:03:14:ea:67:25:67:15:17:6c:cd:f7:9f:98:05:
                    56:9f:f4:07:97:cc:d3:35:a9:eb:14:24:62:31:7f:
                    e8:79:04:fc:94:9c:01:ea:7c:d8:ec:37:e0:40:7d:
                    22:66:52:64:35:fe:fb:bc:cd:a9:a1:70:01:d6:97:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4D:5B:85:D3:CA:83:26:50:57:6D:8E:50:51:0E:09:47:82:A7:9F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OU1bhdPKgyZQV22OUFEOCUeCp58.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:9a:9f:fa:8f:f5:f1:4c:35:32:1d:d7:f7:7a:71:a9:e5:e4:
         ba:76:66:ff:76:71:18:a6:81:25:71:b4:ed:80:d7:e2:c9:d0:
         7f:28:7a:70:cf:6c:f0:fd:8e:22:9d:c4:e6:9a:f9:23:62:30:
         a5:5d:e7:a1:3d:d9:e4:2a:74:ba:fd:82:62:fc:5d:dd:6f:03:
         f6:04:f5:29:e9:6f:26:e9:15:c8:83:0e:1e:c6:37:2f:8f:83:
         dc:62:6e:36:99:57:d9:d0:d2:00:b5:be:f1:17:02:3b:36:5a:
         b8:ae:2d:6d:f5:a5:a3:20:15:81:32:ae:80:af:96:5f:09:4c:
         84:d2:cc:c8:3e:1b:ec:63:f5:d0:ad:6f:6b:5c:a2:26:56:a7:
         db:2a:04:00:aa:db:34:00:c8:cd:eb:cf:3b:28:03:06:20:43:
         a8:3a:59:ed:99:95:08:84:6b:b7:79:e5:4f:82:3f:04:1c:75:
         25:a8:66:7b:5c:6a:c8:a3:17:5a:cd:5d:e2:61:cf:30:35:fa:
         19:03:ec:b2:1c:ca:1a:12:2e:12:41:d8:b8:35:32:9a:6c:35:
         ff:70:e6:23:45:ba:c8:0d:78:9b:2c:0c:5e:ac:7f:dd:3f:1e:
         5f:27:cb:01:46:35:67:74:a6:69:55:e1:47:7b:59:a4:5f:a8:
         4d:aa:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:56 2025 by rpki-client