Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/P-vYpfi86Kkj95Yz-FPkCxcDWus.roa
File:                     P-vYpfi86Kkj95Yz-FPkCxcDWus.roa (raw, json)
Hash identifier:          R+4ODLf11boI4XMazWtcZJnmbsL9srZuQDLF1kH3BoY=
Subject key identifier:   3F:EB:D8:A5:F8:BC:E8:A9:23:F7:96:33:F8:53:E4:0B:17:03:5A:EB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/P-vYpfi86Kkj95Yz-FPkCxcDWus.roa
Signing time:             Thu 21 Jul 2022 07:45:39 +0000
ROA not before:           Thu 21 Jul 2022 07:45:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.132.16.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:45:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3FEBD8A5F8BCE8A923F79633F853E40B17035AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:68:37:ec:db:55:bb:7e:e8:ac:87:ed:e4:
                    ec:60:4a:48:d6:66:13:67:c6:4d:fa:e8:da:da:28:
                    49:29:b3:b1:77:60:c7:b9:28:82:06:b5:d9:7d:5d:
                    1f:a3:e8:54:68:39:12:98:fc:75:f8:57:d8:92:71:
                    fe:6d:a9:69:b4:bb:11:4a:93:09:88:16:f1:6a:7f:
                    3a:21:23:71:3f:56:b7:71:75:7e:00:4e:51:31:a9:
                    7e:b8:ee:10:60:7d:7b:d3:ac:3a:33:e9:62:df:5d:
                    65:b3:7d:10:b3:77:aa:3e:9d:e4:2f:fb:23:af:1c:
                    ed:d5:78:5f:b1:59:a5:83:b3:44:2f:ff:ca:56:a8:
                    43:43:d6:85:8d:bf:b9:23:6c:f5:36:83:94:5f:61:
                    b9:79:a9:14:be:41:75:c1:11:28:a5:a8:3e:2c:12:
                    a0:be:b7:8c:40:37:19:02:fb:f8:7d:0a:3d:a2:77:
                    8f:2a:e1:36:23:29:96:62:1c:9b:65:28:53:7f:2a:
                    af:f5:68:81:49:04:dc:4d:1e:79:6f:33:3a:aa:a2:
                    24:9a:1d:e9:a8:5e:6b:aa:7f:77:5f:09:1a:34:79:
                    ee:ce:70:65:8b:db:b0:10:38:05:3f:69:d1:ed:d1:
                    37:00:45:cf:28:c6:fb:e7:36:3c:fc:f8:01:5b:62:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:D8:A5:F8:BC:E8:A9:23:F7:96:33:F8:53:E4:0B:17:03:5A:EB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/P-vYpfi86Kkj95Yz-FPkCxcDWus.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:92:af:1d:72:e1:64:23:a1:77:54:1c:ea:64:2d:ab:5c:41:
         0b:59:97:f9:66:ec:c0:05:2c:23:b1:e9:8e:88:b8:37:6e:24:
         d7:fe:fa:e2:8b:29:ef:a4:ab:c8:c0:42:a8:ea:14:a0:29:44:
         72:df:5c:27:ba:82:7d:19:a4:25:d3:5d:1f:8d:e7:af:21:14:
         df:61:48:53:7a:4d:75:39:cc:1a:3c:b5:6b:23:e5:6f:86:13:
         b3:b8:a2:41:8b:06:6c:fa:de:89:a8:83:c1:d7:ec:46:7b:84:
         ad:46:07:fc:ed:0e:f1:d7:aa:5b:4a:ba:91:11:fe:95:70:d6:
         05:67:5f:5c:36:b4:70:7d:1c:ea:dd:89:22:c3:02:b8:2b:39:
         0b:9f:3d:f4:67:57:5a:f1:7e:20:be:f0:c1:d1:2b:de:d0:de:
         54:1e:3c:d8:34:d7:51:c4:58:c5:bc:15:dd:4a:cd:36:0e:f1:
         05:2c:a2:cb:c4:10:ef:52:24:5f:53:47:ba:97:f1:9d:0b:70:
         ea:e5:77:81:4e:3f:d8:34:ff:d8:aa:80:82:06:66:48:a4:6b:
         7b:98:ac:60:7d:5f:75:1b:10:9a:0d:21:f9:89:07:15:af:c3:
         a9:8b:9b:27:93:a0:fa:d0:0f:67:53:b1:d5:ec:c3:d1:21:57:
         b3:5e:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:10 2025 by rpki-client