Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WADkmWUbtM4AYAMQcozzbzmKU2I.roa
File:                     WADkmWUbtM4AYAMQcozzbzmKU2I.roa (raw, json)
Hash identifier:          IQVQlmNhrTyqPaEkCmfIGyAIuA4yCGjdgZE0jdMkf0w=
Subject key identifier:   58:00:E4:99:65:1B:B4:CE:00:60:03:10:72:8C:F3:6F:39:8A:53:62
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       1E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WADkmWUbtM4AYAMQcozzbzmKU2I.roa
Signing time:             Thu 21 Jul 2022 08:41:42 +0000
ROA not before:           Thu 21 Jul 2022 08:41:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        119.150.104.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 08:41:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=5800E499651BB4CE00600310728CF36F398A5362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:92:2f:dd:c8:37:e8:4f:03:e3:3a:10:57:
                    f5:87:5a:e6:93:f4:f3:b4:96:52:28:ce:ff:a6:c3:
                    78:cc:90:bf:94:78:37:48:61:2d:2b:3d:83:f9:3d:
                    82:1b:5e:46:a7:0a:e7:3c:1c:d5:19:3b:a3:2a:65:
                    ac:ba:99:6f:c8:2b:f1:0e:c0:83:b1:0d:2d:cc:89:
                    52:24:23:f6:ab:67:ba:8e:f2:73:0b:bb:a1:ef:3d:
                    04:e1:12:0a:ae:34:7b:c7:f7:e8:4e:27:f2:7b:73:
                    58:9b:11:cf:4c:8d:ce:d6:af:4e:ed:4f:18:2d:4f:
                    7e:d6:8d:9a:eb:59:4c:d3:9d:ea:26:40:3d:19:58:
                    87:a0:bf:d5:86:ab:bd:c4:00:58:57:81:f0:05:4b:
                    63:a5:43:67:55:9e:ce:87:5b:04:66:9d:0f:3e:1b:
                    7e:8e:45:d9:8b:82:1d:d7:f4:c8:77:e1:61:e4:10:
                    06:63:a2:cc:96:1f:40:8d:0d:21:95:57:72:d0:d5:
                    99:e5:cd:2c:a8:4b:23:17:5c:32:92:43:94:1d:d4:
                    60:bb:4a:58:ed:55:5b:3b:7d:d7:a4:e8:48:35:e1:
                    e7:d2:f1:55:32:64:7a:ab:30:b9:4a:01:f6:95:ed:
                    93:b7:d6:54:3a:f3:0c:c9:69:19:1b:df:df:95:1d:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:E4:99:65:1B:B4:CE:00:60:03:10:72:8C:F3:6F:39:8A:53:62
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WADkmWUbtM4AYAMQcozzbzmKU2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:44:60:58:f6:a9:47:0f:c4:d4:3d:38:ce:20:55:9d:d1:
         20:6b:80:59:dc:ad:90:b6:f3:d8:47:a4:27:82:32:85:72:62:
         74:74:5e:ea:62:29:19:e8:67:14:ae:05:b6:e8:bc:49:b7:ed:
         37:17:a2:55:71:b6:3b:78:9e:32:4e:c0:46:b1:67:a7:25:c4:
         da:21:48:09:01:2f:81:fc:07:ad:ec:69:3c:ae:1c:1e:21:84:
         90:de:e9:5e:c3:57:f2:05:5e:4c:64:c5:57:96:20:74:9d:b3:
         6c:13:42:69:89:c4:d1:b4:4a:14:2f:26:88:3b:ef:01:c2:f2:
         c4:0d:9f:29:3f:45:3c:b5:11:59:7e:bb:33:90:5f:eb:f2:3e:
         12:2c:93:c2:e4:9d:90:46:14:d8:31:2b:1e:34:12:54:72:1e:
         e0:f7:99:38:cf:ae:0d:f7:07:53:cb:80:e2:d9:ca:68:53:79:
         9c:a2:17:b9:91:8b:89:ab:3f:f8:25:0f:56:e6:7b:9c:43:66:
         41:5d:dd:ed:02:04:91:5d:60:6c:5b:f7:04:a2:58:a5:dc:0e:
         83:43:f4:81:93:01:02:72:f9:44:2e:0e:0d:55:a5:01:55:fc:
         41:51:03:62:01:97:17:78:b0:ca:e9:47:63:0d:a3:8f:7a:0b:
         80:28:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:52:42 2025 by rpki-client