Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QJPQYi9SbO0tpALYfoLWza4RaHI.roa
File:                     QJPQYi9SbO0tpALYfoLWza4RaHI.roa (raw, json)
Hash identifier:          M4H4NxwZXLdcfYkiGzLHWDS1iEJ8pu4sarBr1IX51Bg=
Subject key identifier:   40:93:D0:62:2F:52:6C:ED:2D:A4:02:D8:7E:82:D6:CD:AE:11:68:72
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       13
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QJPQYi9SbO0tpALYfoLWza4RaHI.roa
Signing time:             Thu 21 Jul 2022 07:55:36 +0000
ROA not before:           Thu 21 Jul 2022 07:55:36 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.133.92.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:55:36 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4093D0622F526CED2DA402D87E82D6CDAE116872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:65:0a:00:0a:82:54:4f:06:2f:89:13:2c:
                    9f:90:22:56:91:67:1f:69:f0:d3:c8:7e:df:54:d6:
                    a3:fa:41:cf:e3:e3:06:f1:a1:61:11:2e:95:8f:47:
                    75:2f:98:56:2b:f2:87:f4:d2:3d:e4:df:35:57:9d:
                    76:5c:f5:55:8d:b1:bd:56:24:9d:1e:8b:99:e1:51:
                    d9:a3:35:cb:96:09:87:15:87:1b:da:c0:8b:34:b7:
                    c0:b4:29:91:93:43:9b:cb:02:d5:90:90:94:ea:40:
                    1c:25:c8:44:78:56:36:1e:66:8a:f6:ac:dc:bf:1d:
                    68:a6:3e:18:68:5d:ad:c4:70:df:c3:2b:04:5b:23:
                    63:7f:81:86:72:eb:71:fe:4a:b1:06:1f:5a:60:9a:
                    f2:41:7b:bf:80:ac:0f:69:6f:87:e7:24:6c:5b:ad:
                    c3:ce:86:c1:e9:95:8d:db:37:95:c9:15:13:06:f6:
                    8f:5c:00:11:37:86:cc:95:99:16:5f:1b:f9:c3:b4:
                    12:71:05:22:01:81:cf:6a:57:db:e8:bc:18:4b:db:
                    61:d6:a7:43:71:84:c1:d6:d0:f6:2c:a9:5b:33:ad:
                    76:ed:b5:d0:2e:34:95:d1:86:1c:e5:15:50:ba:04:
                    80:02:7b:f2:96:1d:c7:fc:32:19:37:c9:3c:6e:e5:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:93:D0:62:2F:52:6C:ED:2D:A4:02:D8:7E:82:D6:CD:AE:11:68:72
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QJPQYi9SbO0tpALYfoLWza4RaHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:68:90:96:f0:fd:ea:16:c8:1c:d4:df:2f:b4:9f:72:8b:
         00:50:dd:0f:5f:3c:2a:7b:d8:27:be:da:83:03:b2:d3:91:d8:
         5c:a5:7a:df:12:4d:75:cc:a8:5f:27:b6:b6:35:35:02:df:88:
         81:27:a7:6e:a0:aa:98:5d:4b:0c:64:a1:3c:c8:bc:94:5b:47:
         1c:94:0c:60:fe:91:16:c5:ce:11:9e:74:a0:36:61:a3:0e:d5:
         1c:2a:ff:7e:b2:b0:73:84:8e:d9:c8:3e:26:c9:7f:19:a2:c9:
         29:c8:13:a4:a2:c2:24:38:36:2e:79:67:8d:0b:e8:e5:f6:23:
         80:20:e3:de:ff:0f:ae:90:26:8c:3a:7c:34:57:08:7e:11:04:
         f6:c9:e8:39:2c:9a:9a:33:56:35:c7:49:70:1f:e9:fd:f3:f8:
         3f:be:34:c6:ff:f4:90:ba:43:43:fb:74:f4:8b:30:b9:4d:c6:
         c0:ee:eb:89:8a:c3:b1:0a:5b:a1:35:13:28:38:4d:23:65:74:
         24:ad:3b:ff:6b:a7:4f:7d:56:6d:80:02:70:77:8f:41:98:d1:
         c4:ac:89:85:32:7e:3c:5f:54:5d:3e:ae:53:9b:d9:f9:ab:41:
         de:db:cc:0d:68:3f:0d:b1:a6:9b:c4:99:58:60:21:93:88:0b:
         0b:0d:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:08 2025 by rpki-client