Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UssTBKR1Mm1DrFtleUEDixNtkz0.roa
File:                     UssTBKR1Mm1DrFtleUEDixNtkz0.roa (raw, json)
Hash identifier:          NSDBNAsTw2AkNtttE39uHGkWKxCUcRfpRKMQnLq5KwI=
Subject key identifier:   52:CB:13:04:A4:75:32:6D:43:AC:5B:65:79:41:03:8B:13:6D:93:3D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UssTBKR1Mm1DrFtleUEDixNtkz0.roa
Signing time:             Tue 26 Jul 2022 04:56:52 +0000
ROA not before:           Tue 26 Jul 2022 04:56:52 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        122.145.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 04:56:52 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=52CB1304A475326D43AC5B657941038B136D933D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:59:f5:2a:20:0e:eb:b7:af:c3:7c:ae:53:
                    c5:71:bf:77:70:ff:41:4b:8f:86:39:cd:6a:2f:bd:
                    b9:9d:9a:01:e4:d4:56:d3:97:a9:07:87:b7:db:cf:
                    00:21:77:bc:34:3d:80:2a:51:c9:8a:3a:0a:ee:45:
                    07:31:85:13:35:61:cf:0a:60:16:ec:09:f0:b7:e3:
                    01:c7:c2:e7:5e:f7:9b:f7:19:10:11:e2:52:17:1d:
                    49:8d:b1:96:10:8e:6c:9d:88:ab:a6:04:ee:f6:0d:
                    50:71:92:48:05:c4:91:a2:89:dd:02:f6:f1:f5:d2:
                    0a:c6:1e:98:ca:72:11:e5:6e:6c:07:23:d6:f2:cc:
                    6c:4f:70:ec:a1:6f:4f:45:51:b9:88:fc:b6:b1:d3:
                    ca:ec:ba:6d:49:63:17:0c:87:34:94:ee:94:e0:30:
                    cc:08:90:cc:92:a8:0f:1e:9e:47:cd:ba:dd:89:89:
                    b5:c1:61:b5:7f:7b:4d:78:8b:2d:bb:c8:1c:da:32:
                    12:44:cb:fb:5b:ec:e3:94:af:9b:ab:41:21:2c:8f:
                    0f:7b:2d:eb:e6:c9:b8:a1:76:0d:fa:43:92:ff:b5:
                    9b:b0:ce:1a:4e:03:bd:ea:89:4b:e3:5c:27:bb:f5:
                    d8:3c:d4:f4:ca:63:d6:40:d4:cb:28:de:af:de:f4:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CB:13:04:A4:75:32:6D:43:AC:5B:65:79:41:03:8B:13:6D:93:3D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UssTBKR1Mm1DrFtleUEDixNtkz0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:76:d9:f0:44:46:1b:72:7b:bd:57:ec:23:48:cc:5b:53:
         49:04:ea:32:e5:01:60:f0:c9:be:e0:da:f9:9e:66:45:80:cb:
         26:21:f8:f8:92:5b:33:aa:b3:60:90:02:9d:62:f2:17:09:4c:
         53:49:81:78:e1:8e:e7:1b:dc:a0:80:2c:cd:ff:fb:02:a1:25:
         fb:0f:22:31:53:03:25:a2:00:65:d9:df:d2:73:04:fb:10:39:
         50:57:ca:83:ca:90:95:e1:29:44:00:87:28:54:65:1d:43:64:
         53:96:54:38:5e:73:49:28:26:d8:84:86:53:15:5a:3b:32:a9:
         73:6a:f2:f1:90:18:6e:b8:54:fb:04:1e:7a:f5:64:16:f7:fd:
         16:15:be:61:15:9e:ed:ca:cb:13:89:03:c4:6b:cf:1e:a2:82:
         ad:26:87:4c:ce:28:75:38:13:04:bb:18:44:58:8c:40:b1:06:
         1e:a3:ae:c8:32:ff:1c:89:75:ce:28:71:9e:06:f6:36:5d:30:
         ca:64:e6:cc:0a:d3:cd:a5:07:88:4b:cc:56:2f:da:0d:06:b4:
         c9:fe:89:9e:fc:e8:94:2b:47:21:eb:34:78:0d:a5:ce:75:7b:
         3f:45:ac:45:f8:07:d9:c7:fb:52:1e:ea:f8:c4:3b:a9:22:cd:
         16:25:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:01 2025 by rpki-client