Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SqGmqRt7uDXAjUyp8fVVP4fInO8.roa
File:                     SqGmqRt7uDXAjUyp8fVVP4fInO8.roa (raw, json)
Hash identifier:          nxv67mvLZrPBxDBMwmXe1LSSZxIjYwYMQieUN4hhyhI=
Subject key identifier:   4A:A1:A6:A9:1B:7B:B8:35:C0:8D:4C:A9:F1:F5:55:3F:87:C8:9C:EF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       A1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SqGmqRt7uDXAjUyp8fVVP4fInO8.roa
Signing time:             Fri 22 Jul 2022 06:39:42 +0000
ROA not before:           Fri 22 Jul 2022 06:39:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.215.0.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:39:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4AA1A6A91B7BB835C08D4CA9F1F5553F87C89CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:b7:1c:18:f8:c2:71:e7:18:ef:ce:20:29:
                    bc:02:b7:72:ff:22:af:76:21:1d:de:eb:80:8c:d8:
                    b9:33:ba:31:15:5d:10:2f:7f:17:e7:aa:d0:3d:25:
                    d2:32:09:b0:8b:db:50:ad:e6:be:bc:6e:fd:60:b9:
                    aa:a9:af:02:c7:d4:e7:98:fe:26:c9:35:45:7b:29:
                    97:9a:83:d7:95:86:f5:31:47:c1:a8:8e:2c:f3:c8:
                    b6:5c:1d:65:15:e7:dd:53:93:e9:ca:9d:b7:d4:d9:
                    a8:71:b6:55:0b:62:97:9f:7d:e8:34:c5:29:35:cb:
                    8a:ff:80:57:26:e3:13:fa:aa:ea:6f:47:41:2b:64:
                    dc:93:77:19:3d:08:c1:db:41:68:ed:e0:49:e3:84:
                    c9:fc:db:b9:da:bd:5c:da:0f:bd:8b:e4:0e:e3:e5:
                    49:ee:a0:50:60:b9:21:7b:a7:42:97:4f:96:0b:5b:
                    25:3a:13:c0:27:84:98:b6:8b:f8:4a:0a:23:aa:d1:
                    6c:07:74:c4:fe:5b:63:f8:32:80:60:49:f4:56:93:
                    1a:ff:2b:21:3f:6d:74:b6:31:fd:b2:1d:f0:45:4e:
                    42:ca:2b:f5:e5:36:76:e0:fd:2b:c2:d4:68:a6:4e:
                    54:3d:b4:30:4f:17:d9:9f:f7:84:e6:b2:61:f2:9f:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:A6:A9:1B:7B:B8:35:C0:8D:4C:A9:F1:F5:55:3F:87:C8:9C:EF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SqGmqRt7uDXAjUyp8fVVP4fInO8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:93:ac:7f:a5:e2:43:29:31:b6:e0:3b:72:57:f6:ca:0b:a9:
         52:60:88:cb:58:9c:f9:4e:a9:c7:86:26:d6:b8:1e:8e:0f:8f:
         07:a5:72:68:85:a8:f5:dd:e7:67:e8:e0:1b:ec:db:51:f4:b0:
         01:b7:fe:c7:ae:41:6e:ad:2d:ba:74:af:21:77:6e:f7:c2:8c:
         60:f7:cc:00:58:19:df:14:6b:d5:b9:8e:01:b9:c8:75:4e:10:
         92:89:d5:08:e3:19:63:d8:3d:59:56:50:b1:15:70:48:96:f0:
         c6:ee:e2:21:f4:36:e8:cd:76:28:f3:da:ca:a1:5f:43:32:c1:
         7b:0a:18:93:11:71:f5:6c:3a:48:b4:a0:4f:48:a1:66:26:ca:
         78:86:c4:2b:d7:62:0e:8d:3e:99:58:31:bf:7b:35:4e:2d:f0:
         c4:45:4a:47:85:5a:50:a6:3b:70:74:4f:d3:6b:c6:75:f5:dc:
         cc:3a:86:b2:88:68:1f:9c:6b:80:45:f1:03:24:1e:32:0a:c7:
         26:16:a3:de:da:1b:85:d1:0b:f6:f1:98:25:3a:f9:c4:23:3c:
         ae:e6:3e:33:73:87:22:2d:0f:92:47:06:f6:07:50:b2:fa:0e:
         71:d8:89:2c:0b:d1:c5:8e:bd:2a:fe:ff:3b:38:3e:4a:5a:99:
         4b:56:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:10 2025 by rpki-client