Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UzwDny2cAwkiSQIrYjiFHrYHG4A.roa
File:                     UzwDny2cAwkiSQIrYjiFHrYHG4A.roa (raw, json)
Hash identifier:          1+vtHavqMHknT6nlElWiEe8ySrTMh4ald6eRvhZzsFg=
Subject key identifier:   53:3C:03:9F:2D:9C:03:09:22:49:02:2B:62:38:85:1E:B6:07:1B:80
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       3A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UzwDny2cAwkiSQIrYjiFHrYHG4A.roa
Signing time:             Fri 22 Jul 2022 01:10:07 +0000
ROA not before:           Fri 22 Jul 2022 01:10:07 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.24.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:10:07 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=533C039F2D9C03092249022B6238851EB6071B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:17:b2:26:08:ed:06:05:16:12:4c:29:93:
                    26:22:b9:2f:de:a3:75:f5:c7:8c:89:d5:c0:66:31:
                    07:a1:1c:21:71:6d:82:3f:56:ac:89:cd:a7:7b:68:
                    ec:73:73:1e:14:9a:5b:0d:2a:d1:64:d5:1d:1b:37:
                    21:b9:27:da:2f:01:15:f4:72:d2:14:f7:f0:9e:f2:
                    55:0f:a2:b7:a1:a5:69:c9:d9:c6:83:7c:34:b9:41:
                    22:c4:40:56:d2:30:c4:a0:c2:52:af:b5:66:96:4c:
                    65:09:7b:d8:e9:fa:1a:5e:fd:e5:b1:7b:40:bc:68:
                    f2:cc:87:20:b2:64:f9:37:78:fd:d6:2d:d8:63:be:
                    6d:6e:61:28:80:9f:aa:56:04:82:34:64:d7:68:3f:
                    68:4d:5d:2c:53:d9:bf:c6:01:be:3d:04:d8:6f:75:
                    69:12:1f:ab:18:e9:a5:f4:e5:0c:6b:e3:fb:b3:39:
                    03:e5:b4:b8:91:68:87:28:b0:40:7a:0d:3a:d3:8e:
                    08:a9:6d:57:d7:f1:4e:3a:28:d1:ea:d5:68:39:af:
                    8f:c7:23:74:ee:4c:2c:0e:92:df:f3:e1:75:63:19:
                    49:4c:3a:a4:5b:2d:82:81:cf:8d:67:8b:57:43:01:
                    f8:d7:b7:01:9f:ae:8e:61:dc:3b:40:59:02:a1:51:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:03:9F:2D:9C:03:09:22:49:02:2B:62:38:85:1E:B6:07:1B:80
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UzwDny2cAwkiSQIrYjiFHrYHG4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:f2:67:0d:1e:23:40:1a:09:f7:81:53:5f:74:11:d4:71:
         d1:52:43:fc:b8:92:16:53:cf:4a:8f:75:1b:85:a8:f6:56:b0:
         3c:01:6d:2e:9c:ad:82:38:3b:e1:fb:79:b5:6f:9c:af:c0:20:
         2b:a0:67:7d:3e:2a:af:e7:6a:ba:b8:cd:a7:da:63:86:e3:9f:
         4f:36:d1:f6:89:65:84:8b:cf:54:dc:1d:c6:84:ac:93:cc:9e:
         ac:91:25:65:17:ee:09:4d:74:3d:ea:81:cf:70:f9:be:52:5c:
         64:a0:49:30:31:a6:d4:41:6f:ea:87:74:e5:a3:86:4a:64:ac:
         94:e1:50:98:46:c6:c2:6d:92:42:e9:c0:4f:dc:42:00:5e:5f:
         3f:01:4d:e7:04:98:ee:92:a1:f3:49:94:fc:f1:a3:67:22:a8:
         1a:33:fc:ef:ea:44:a0:a6:35:9c:2c:73:d4:66:29:8f:19:72:
         0c:0e:a2:c6:fd:48:ac:ec:0c:7f:8a:9f:a0:a6:ca:9d:97:1c:
         53:0e:2e:fc:fb:8d:10:24:f8:0c:13:d8:51:c9:cc:d5:af:8d:
         6f:67:56:d7:3c:4d:79:b1:d9:4b:67:5a:8d:89:ef:ce:ff:21:
         92:73:f4:61:51:36:e5:ae:e4:69:d7:17:31:dc:d8:ed:06:73:
         9d:98:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:00 2025 by rpki-client