Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Pc63B7nucCIqC3pevi3KKnHxyNI.roa
File:                     Pc63B7nucCIqC3pevi3KKnHxyNI.roa (raw, json)
Hash identifier:          YSbkNWrVzE7LslHzTgMaxpZzRfW89i1jMU92vUJEyyQ=
Subject key identifier:   3D:CE:B7:07:B9:EE:70:22:2A:0B:7A:5E:BE:2D:CA:2A:71:F1:C8:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Pc63B7nucCIqC3pevi3KKnHxyNI.roa
Signing time:             Tue 26 Jul 2022 04:58:38 +0000
ROA not before:           Tue 26 Jul 2022 04:58:38 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        113.213.242.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 04:58:38 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3DCEB707B9EE70222A0B7A5EBE2DCA2A71F1C8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:30:bc:98:ef:38:8d:2b:22:90:20:e2:2e:
                    fe:3d:cf:11:ed:28:73:af:1b:4e:7a:67:f0:e1:4e:
                    f2:5f:cf:09:cd:2b:66:97:67:e8:ed:89:02:e0:97:
                    76:c8:64:26:4f:5c:34:40:67:70:34:db:91:39:72:
                    e2:3f:b4:d5:5f:df:7c:b9:b6:a1:b1:23:f2:eb:7d:
                    b8:08:73:a6:eb:1e:02:00:e7:f1:42:0c:78:a3:62:
                    76:2d:c5:19:97:8a:64:43:94:2c:f9:65:ed:51:5d:
                    69:52:aa:d0:87:95:64:80:3f:fe:79:05:1a:29:76:
                    2c:49:a2:df:85:32:01:d7:81:d6:7c:25:4e:95:45:
                    81:b2:4c:ef:7b:cb:60:e9:e3:66:ad:9f:50:f9:24:
                    5d:5e:2f:25:f2:8b:58:f6:e3:6c:3c:fa:07:5d:be:
                    58:aa:b3:03:14:91:68:dc:57:6e:29:63:b9:33:85:
                    0c:0c:7f:25:2b:b3:9f:5f:75:cc:a7:bd:3e:b8:fd:
                    91:51:f2:60:00:11:ec:b4:04:59:73:f6:5e:15:93:
                    b1:b7:85:d1:12:15:2d:b5:93:e0:ca:47:82:c0:40:
                    56:60:80:9c:93:ab:92:ce:7b:00:8c:55:81:d7:b7:
                    2e:78:78:b0:bc:2d:a1:aa:e9:86:fc:b2:98:37:83:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:B7:07:B9:EE:70:22:2A:0B:7A:5E:BE:2D:CA:2A:71:F1:C8:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Pc63B7nucCIqC3pevi3KKnHxyNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:df:e6:d0:6c:7f:03:4b:ce:f0:b1:08:5b:a0:cc:55:c3:
         e6:4f:b1:37:5f:b1:f9:eb:bc:d8:9c:80:bc:92:fb:6e:91:3b:
         86:f9:33:fa:11:e7:2c:2e:7e:c1:b9:53:70:6d:ae:54:27:4d:
         f1:e9:6f:c0:94:d0:3d:66:35:58:96:c9:fa:de:4f:d2:27:8a:
         30:fc:d6:52:53:32:df:b6:e2:0a:d5:b1:07:e2:72:60:00:c5:
         7a:2e:5f:05:c2:99:dc:88:7e:dd:e0:a5:ce:05:ef:e2:64:ce:
         09:f4:d3:28:8a:53:9e:72:a9:2e:b0:c9:74:74:ee:5b:37:bf:
         05:a3:61:fd:e7:3b:70:30:7d:5a:89:c6:c8:28:ac:e1:43:72:
         32:6c:5e:7f:d1:c0:8e:ec:6a:43:63:05:52:a5:4d:54:bf:93:
         48:9c:86:58:6f:3f:14:f7:ea:ce:e3:2d:85:d0:a7:d2:63:0f:
         40:71:c0:f3:f6:4b:38:43:97:17:14:1b:e2:01:c0:cd:1b:8e:
         93:c2:f7:03:4e:c8:eb:08:4a:35:62:ba:21:6e:2b:9c:56:34:
         ef:31:b3:6e:1c:cc:f6:d3:63:86:ab:45:64:bb:a8:3b:60:1e:
         38:8e:00:8b:5d:35:9b:fb:e3:f6:38:7f:6e:3d:a5:2e:4a:3e:
         67:df:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:19 2025 by rpki-client