Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TSag64hORZHGonJdOYuh5ytFOas.roa
File:                     TSag64hORZHGonJdOYuh5ytFOas.roa (raw, json)
Hash identifier:          VQ2T0XAHrqzgGEs1aHztZSOPUNj5p330wwcnFf+Ray0=
Subject key identifier:   4D:26:A0:EB:88:4E:45:91:C6:A2:72:5D:39:8B:A1:E7:2B:45:39:AB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       95
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TSag64hORZHGonJdOYuh5ytFOas.roa
Signing time:             Fri 22 Jul 2022 06:29:30 +0000
ROA not before:           Fri 22 Jul 2022 06:29:30 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.234.32.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:29:30 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4D26A0EB884E4591C6A2725D398BA1E72B4539AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:7d:aa:16:38:de:3d:3f:72:a7:8f:36:64:
                    40:91:e2:68:b0:b6:c0:6c:da:b1:e7:3f:6e:8f:31:
                    9c:b5:f4:78:48:9b:9f:ff:7b:6f:a3:b7:b9:b1:6a:
                    81:97:e8:b0:11:03:11:05:90:78:98:f1:e5:54:7a:
                    fe:fe:c3:15:ce:87:db:0a:35:88:9f:f0:5a:a3:f4:
                    c5:79:16:0d:9d:44:7d:88:be:d8:ba:08:84:a5:8a:
                    df:d7:88:f1:72:8d:13:81:62:a0:54:8a:4a:d2:c6:
                    c9:68:a9:af:6c:6c:25:49:7d:9d:06:aa:9b:43:65:
                    76:0e:2c:a3:8b:28:6e:b5:96:e0:12:66:07:ee:9b:
                    c9:fd:a4:f9:7e:ca:e6:9f:b5:fb:d9:89:23:23:80:
                    db:ce:55:81:94:a6:4f:95:dd:ad:fb:40:69:6a:57:
                    85:d6:48:bf:38:30:b0:22:45:1c:1d:94:b3:92:52:
                    ea:fd:56:18:8f:d5:4c:bc:70:36:ad:98:33:94:64:
                    63:c7:a1:a6:df:ed:fa:5f:de:6e:4a:e7:73:10:df:
                    cc:de:51:78:6f:ca:5c:58:43:a3:4a:f0:4d:0e:42:
                    45:e8:1c:27:95:d4:a9:a0:10:19:0e:02:73:10:1c:
                    e6:10:cc:8a:26:29:fe:c3:22:d1:ae:e9:51:d9:56:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:26:A0:EB:88:4E:45:91:C6:A2:72:5D:39:8B:A1:E7:2B:45:39:AB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TSag64hORZHGonJdOYuh5ytFOas.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:32:1e:9a:c5:f1:a1:02:15:95:78:62:ec:7c:0b:75:18:cc:
         bd:e4:76:e5:ee:e6:a1:dc:5e:82:36:1e:2d:ba:d5:af:1f:a3:
         ee:e0:55:3c:2c:d8:6e:d3:95:2b:ce:6f:2c:8b:38:32:fd:98:
         0a:f0:3d:22:ba:d3:99:c4:44:0f:4a:79:e7:9c:a4:b2:0b:f7:
         cb:16:0b:92:42:f5:cf:50:9a:24:2f:b3:7f:b3:45:6b:52:5c:
         ba:bf:31:c1:b2:74:b0:f2:db:50:7e:67:3d:44:99:a3:a5:4b:
         6f:73:a9:54:da:5e:4e:55:15:51:77:d4:cb:2b:92:a3:1f:84:
         26:36:11:a2:0c:c9:bd:4f:9c:d9:30:02:76:57:7b:40:d0:be:
         8e:9b:10:fe:86:45:1b:61:02:56:20:27:e0:c3:1b:0e:49:6c:
         c7:3e:48:cf:1b:d9:f0:05:3c:8f:12:ba:06:8e:a1:25:30:0a:
         64:74:04:b9:f9:99:98:16:bd:c8:3a:b4:30:d5:13:7a:cf:8a:
         1b:5e:ac:98:ee:f1:5a:b3:34:96:07:8f:70:d8:4b:93:fc:b9:
         97:d8:1a:06:2f:67:a5:af:54:40:06:de:c8:c2:1d:c1:59:cc:
         30:cd:0a:cd:ef:ec:31:0b:96:c2:02:43:98:4d:5a:1b:aa:85:
         63:df:3f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:23 2025 by rpki-client