Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/T_yPRJ82WWT0uwxSjo_n2vidGgA.roa
File:                     T_yPRJ82WWT0uwxSjo_n2vidGgA.roa (raw, json)
Hash identifier:          emYcxoBg4qOOqECI0XdZov0FA+nLS59ji4SmhLwohc8=
Subject key identifier:   4F:FC:8F:44:9F:36:59:64:F4:BB:0C:52:8E:8F:E7:DA:F8:9D:1A:00
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       CB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T_yPRJ82WWT0uwxSjo_n2vidGgA.roa
Signing time:             Thu 28 Jul 2022 05:21:26 +0000
ROA not before:           Thu 28 Jul 2022 05:21:26 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        153.120.216.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:21:26 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4FFC8F449F365964F4BB0C528E8FE7DAF89D1A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:dd:cc:4e:00:e5:4c:2a:a0:54:b9:f4:e5:
                    09:7c:bc:0d:2d:42:43:8f:47:72:4c:e4:38:0b:05:
                    ba:c5:7e:f7:e5:a5:96:02:fa:61:90:a8:4b:3a:40:
                    ac:9b:32:2f:0f:8e:5c:e9:fe:d4:58:ce:34:9b:3d:
                    58:56:38:47:15:d6:66:3c:1c:a5:d6:4a:08:6f:a1:
                    87:d4:c1:19:80:b1:cb:de:82:e4:f7:a0:70:b2:f5:
                    68:fd:a9:e1:1e:2c:69:98:31:96:3e:d6:68:3c:58:
                    e2:97:07:ba:aa:fe:45:65:a8:13:b9:2b:74:64:92:
                    b7:1a:ec:2c:6e:2f:8d:4e:95:46:b2:cb:81:08:c7:
                    fb:88:52:c4:14:b2:d2:b9:25:dc:2e:c7:18:c8:67:
                    5b:01:cb:12:77:8f:74:9d:6e:74:b5:d7:57:bc:ef:
                    f4:3e:61:1a:d6:3a:dd:98:7f:9b:2f:6b:57:ed:d3:
                    d3:e8:be:ca:3d:45:2e:aa:6a:7e:6d:74:c4:a0:35:
                    09:d8:2e:d8:24:a7:61:55:2d:e8:43:2a:d3:6d:85:
                    8f:cf:77:45:bd:e6:6d:14:3d:d2:93:41:a6:6e:b9:
                    57:34:6b:de:e5:49:3a:d2:e3:ff:ec:71:37:6e:e2:
                    3d:53:68:a0:a8:89:c8:92:12:48:c4:65:ca:e2:2c:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FC:8F:44:9F:36:59:64:F4:BB:0C:52:8E:8F:E7:DA:F8:9D:1A:00
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T_yPRJ82WWT0uwxSjo_n2vidGgA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:43:9d:d6:3f:40:a8:53:ca:16:50:6c:92:16:6e:b3:d0:08:
         99:6a:3f:7d:5b:06:50:e8:04:2c:b5:99:22:48:da:30:1c:af:
         0d:62:da:6b:c0:47:a7:18:fc:0c:a4:33:f9:56:cb:be:d4:55:
         87:b2:87:04:01:24:c7:f4:ad:af:d2:17:c3:a1:d9:bc:fb:8f:
         55:2e:c1:9a:01:6e:0b:44:15:d7:e8:91:0f:7f:70:33:b9:29:
         6e:c2:c5:04:fb:d1:0f:16:35:49:65:9b:3f:95:25:e6:7b:e3:
         83:2b:01:16:5f:06:6b:39:c8:f1:d5:56:a0:b0:03:bf:f1:6b:
         dd:f6:e3:af:54:da:5a:0f:a1:16:4e:9b:de:f3:c8:6e:78:99:
         84:c7:d1:40:1d:6d:34:46:24:71:f8:62:6e:0d:0e:34:10:06:
         83:09:ae:82:9f:b0:37:64:f7:b4:c1:ae:f9:23:c6:e5:78:79:
         ff:67:6f:e0:cb:07:9e:42:2f:14:a5:9b:c9:f6:a7:89:d5:4c:
         ee:94:d4:47:e2:06:b6:76:1b:f4:63:06:29:fc:fe:20:18:fc:
         f9:bb:0e:49:b8:b5:dd:ab:d6:3e:07:a0:fc:e4:7d:9c:2f:9f:
         43:b2:5a:be:17:92:27:17:a1:47:62:09:df:16:32:29:51:45:
         00:22:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:41 2025 by rpki-client