Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RCRaF7s7MPc2k_gdanguGgZFbLs.roa
File:                     RCRaF7s7MPc2k_gdanguGgZFbLs.roa (raw, json)
Hash identifier:          n5CPHXxU8TMA/iwVRuL9s2ETt5MMoSNBOn609fRM0VU=
Subject key identifier:   44:24:5A:17:BB:3B:30:F7:36:93:F8:1D:6A:78:2E:1A:06:45:6C:BB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       6A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RCRaF7s7MPc2k_gdanguGgZFbLs.roa
Signing time:             Fri 22 Jul 2022 04:28:55 +0000
ROA not before:           Fri 22 Jul 2022 04:28:55 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.20.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:28:55 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=44245A17BB3B30F73693F81D6A782E1A06456CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:ab:84:67:b9:98:af:ab:46:6e:7a:10:5b:
                    de:3a:91:66:36:bf:57:87:b0:2f:4f:bc:5c:30:f1:
                    30:20:65:58:0d:4c:ae:e9:2e:49:61:7f:2c:2a:a3:
                    8b:b9:2b:12:a6:25:17:d1:a1:40:88:31:d6:0c:f7:
                    58:e6:f3:0b:34:14:24:76:be:27:fd:40:10:50:96:
                    6d:88:c7:7a:3e:24:3d:85:14:37:8d:f9:51:6e:38:
                    87:5a:af:cc:54:1c:33:ef:b5:22:a6:50:c2:b8:f2:
                    b4:c4:52:69:ee:fa:fe:c8:0e:49:14:6e:9d:51:ae:
                    73:f7:16:5e:16:ba:a2:ab:9b:b3:cf:c4:c9:cb:03:
                    ef:81:78:47:12:42:83:8e:40:da:92:dd:2a:68:bb:
                    4e:89:14:59:26:09:3a:87:06:96:c8:50:bf:99:f2:
                    d4:75:dc:ad:06:4f:a1:f6:f7:4f:81:81:fc:5e:dc:
                    51:05:ca:19:63:c2:28:d0:b7:19:c5:9b:9a:50:a3:
                    f2:f0:83:39:d7:cd:8e:fc:ef:fa:86:c5:54:b7:9e:
                    7a:d4:79:ec:e7:74:23:ef:c1:59:40:e4:29:53:72:
                    40:26:e2:88:f6:a6:10:f3:c7:ee:4a:93:e1:35:0c:
                    71:ff:3c:5a:d8:13:2e:91:40:75:d0:e8:92:27:a2:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:5A:17:BB:3B:30:F7:36:93:F8:1D:6A:78:2E:1A:06:45:6C:BB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RCRaF7s7MPc2k_gdanguGgZFbLs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b3:ab:00:df:60:d7:da:4e:19:00:5f:a9:54:03:b8:28:4b:
         a7:97:03:bb:4a:2a:ce:37:fb:52:cb:85:35:a0:66:3a:9b:22:
         a6:22:c8:4a:75:51:c7:8b:0e:65:04:f0:e7:04:0a:c2:1b:f1:
         7f:9b:39:79:af:b9:1d:7b:3d:05:4b:82:98:03:b5:0f:9d:2d:
         6d:03:50:d0:00:32:21:13:2a:be:b7:5e:7b:90:a2:08:46:e9:
         1e:a0:68:02:43:92:f0:f9:00:b7:29:39:7d:0d:de:85:17:99:
         48:a7:72:02:7b:3a:b5:2d:a6:ee:7c:b2:9f:7e:6f:90:8e:a7:
         77:c4:96:df:54:ac:fe:30:e3:0b:50:a2:8c:f4:f5:a4:fa:a6:
         d9:a4:1b:82:49:d4:b9:28:f1:7b:b4:0b:03:ae:3b:6e:30:91:
         fb:f3:90:3c:9c:04:cf:ed:bd:1f:0c:a9:b9:af:5d:8d:c9:f7:
         96:e9:2e:21:a7:68:bc:be:b6:c8:4b:87:1e:d4:ee:06:6f:e0:
         4b:71:e4:3c:8f:22:6d:a3:a8:37:45:fc:48:f7:05:59:78:a6:
         9b:08:ec:d7:61:bc:be:ef:f4:12:9c:84:38:e1:82:24:d7:7e:
         03:02:b9:da:e4:b2:7d:81:31:6f:fc:92:1d:b1:c2:4c:3d:f9:
         ff:90:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:34 2025 by rpki-client