Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VSVEDU4oLL2PMHsZgBpj87tmtx8.roa
File:                     VSVEDU4oLL2PMHsZgBpj87tmtx8.roa (raw, json)
Hash identifier:          Plak990NSc7CwmkDtUn+cI6HLNVtBaZNX9quZY2tt4c=
Subject key identifier:   55:25:44:0D:4E:28:2C:BD:8F:30:7B:19:80:1A:63:F3:BB:66:B7:1F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       96
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VSVEDU4oLL2PMHsZgBpj87tmtx8.roa
Signing time:             Fri 22 Jul 2022 06:33:39 +0000
ROA not before:           Fri 22 Jul 2022 06:33:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.234.52.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:33:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=5525440D4E282CBD8F307B19801A63F3BB66B71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:34:9e:fd:d2:75:85:ba:ba:25:d6:fc:0c:
                    63:51:c3:4e:26:06:1e:92:44:e3:a2:e4:d5:5e:ae:
                    03:53:c5:ed:bb:3b:58:00:29:d0:de:3a:e3:f7:eb:
                    1d:09:6a:30:6b:85:2f:0d:79:15:c8:04:5d:29:91:
                    a8:f0:81:7a:63:92:05:fe:bb:46:11:f9:f2:82:fb:
                    d0:ce:4b:db:e7:2e:79:9b:e2:59:0d:39:c0:1b:53:
                    1d:38:ea:d3:f3:e7:76:00:62:ab:e6:ec:e3:cf:6c:
                    c8:0a:13:e5:1a:56:c0:d1:31:b9:75:2f:f9:1d:3d:
                    5e:a7:7e:10:b2:66:6c:f7:be:7b:ba:d1:08:32:ce:
                    88:33:fe:47:97:64:99:c8:72:ab:ae:d2:8e:34:38:
                    ef:d4:97:2c:f7:eb:8d:e8:03:c4:20:c9:e7:f3:5e:
                    c7:1a:82:1b:c0:65:55:a3:4f:a7:b5:aa:b5:dc:45:
                    77:ae:94:db:d6:48:e9:b8:43:57:9f:e7:c2:c4:32:
                    c5:a8:4c:eb:75:c6:38:d9:eb:0b:29:50:dd:97:97:
                    3c:57:9f:2a:b9:6c:c1:4a:16:7e:27:21:8b:ca:d1:
                    ae:55:a6:a0:b6:c9:08:d7:d6:53:b6:80:f7:7e:1d:
                    4a:54:f9:36:db:f6:cc:93:25:0d:4f:65:ab:8e:c5:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:44:0D:4E:28:2C:BD:8F:30:7B:19:80:1A:63:F3:BB:66:B7:1F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VSVEDU4oLL2PMHsZgBpj87tmtx8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:75:87:ef:8c:c4:6e:93:ae:d8:71:7c:77:83:f3:3a:e4:69:
         1a:de:ce:ab:ce:9a:22:12:12:de:49:06:3a:f6:1d:c8:ca:f8:
         93:f1:16:10:62:f2:c9:7d:d4:33:96:4c:9a:64:c6:7b:43:68:
         14:12:c7:3c:e1:b3:48:84:6a:7c:f4:85:c4:84:df:b5:ed:93:
         fb:62:89:ba:88:8a:ef:25:41:22:e6:6c:e6:e1:a3:cb:96:b3:
         a8:c9:48:20:a6:26:82:e0:ef:62:7b:25:c0:28:58:df:a7:be:
         17:d6:7e:6a:fe:1d:ec:cb:5d:4b:51:57:42:63:fc:8a:91:6e:
         15:45:15:4d:d0:79:11:44:45:7c:52:ae:f4:39:85:df:54:66:
         77:de:7a:ce:71:a7:f2:11:b4:97:d8:c1:94:74:27:6a:e5:84:
         6f:04:a9:27:7e:0b:74:d1:d5:f1:9e:1b:51:04:2f:95:0b:ea:
         d8:4f:0f:71:31:09:bf:4b:13:64:e4:ce:97:ad:9d:5a:d9:ec:
         4c:44:b6:b8:ee:bb:5e:8d:fc:f4:dc:92:1f:26:ff:29:7d:b2:
         c6:f0:47:9e:5c:e8:5c:90:d5:5a:6f:33:3e:1c:09:5d:04:92:
         e3:1e:43:7c:20:78:75:3c:f5:49:b5:3d:7b:f8:4a:72:22:94:
         fa:b5:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:20 2025 by rpki-client