Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WKGyUmuMxoN1rJ13lt_g7t5gQOo.roa
File:                     WKGyUmuMxoN1rJ13lt_g7t5gQOo.roa (raw, json)
Hash identifier:          NCMsoWDK9vYlGfo4YaRmAIKt6/wKIkxBG4grJku9V08=
Subject key identifier:   58:A1:B2:52:6B:8C:C6:83:75:AC:9D:77:96:DF:E0:EE:DE:60:40:EA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       C3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WKGyUmuMxoN1rJ13lt_g7t5gQOo.roa
Signing time:             Thu 28 Jul 2022 05:11:24 +0000
ROA not before:           Thu 28 Jul 2022 05:11:24 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        122.145.120.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:11:24 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=58A1B2526B8CC68375AC9D7796DFE0EEDE6040EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:2c:15:a9:aa:84:11:da:3b:56:3b:85:ab:
                    45:16:74:fa:c7:dd:30:62:50:9f:3f:81:31:ca:21:
                    74:bd:bd:05:ab:b5:93:ef:d4:27:12:83:d6:b5:19:
                    60:13:6d:50:04:7b:1c:fe:a5:87:9f:da:90:94:2b:
                    cc:77:0b:20:86:1a:9d:1c:d6:06:f0:02:38:f3:30:
                    db:7c:62:f3:ad:f9:45:26:6c:46:c5:20:0e:d0:4b:
                    22:6d:53:90:5f:4b:5c:1c:c7:0e:bf:60:89:47:bc:
                    78:a4:67:3e:8b:8a:5b:fa:92:51:e4:95:c5:87:16:
                    54:0e:bf:de:59:f0:28:0b:82:15:20:90:32:7c:1a:
                    8b:61:59:b1:00:c8:03:c1:f6:42:18:77:a0:eb:8e:
                    8a:fe:33:a0:b5:a9:48:f4:34:0b:02:ae:17:a3:52:
                    a7:06:d9:db:5a:28:ae:3a:88:bc:89:70:10:d2:4e:
                    cb:a9:22:e4:d5:ee:c5:9a:2c:e1:67:ee:71:89:0c:
                    78:d1:22:25:d9:4b:e1:f8:76:23:6d:29:db:ab:f3:
                    22:d3:fd:4b:f4:54:22:b6:68:12:34:80:2a:56:90:
                    0e:93:04:38:0c:03:b6:1f:9d:00:ed:ed:65:f8:53:
                    bb:07:c5:75:b2:cd:e1:86:d5:fc:8c:c3:89:47:41:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:B2:52:6B:8C:C6:83:75:AC:9D:77:96:DF:E0:EE:DE:60:40:EA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WKGyUmuMxoN1rJ13lt_g7t5gQOo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:62:1a:cb:d4:3c:24:4b:93:7c:e3:a9:c5:53:80:af:fa:a6:
         cf:e3:17:e1:2d:d8:42:eb:d9:e2:78:a4:ea:20:52:c4:f4:59:
         50:4c:5e:36:69:44:26:73:56:4e:93:e2:db:f9:6b:0e:9d:da:
         cf:ec:35:1b:cd:20:aa:f8:58:cf:92:40:6e:08:6d:f3:9f:3d:
         55:45:48:aa:31:b8:71:b9:17:7a:c4:d9:cd:ae:39:a2:10:1e:
         87:06:f2:b3:80:d0:73:98:38:75:cd:61:30:0d:6c:21:da:b0:
         1b:f9:2e:83:d5:aa:97:ed:5e:69:e6:ac:f0:e7:b6:8c:15:c6:
         2e:91:9c:47:a0:31:06:3f:ca:78:a2:8c:31:60:06:b5:dc:8d:
         b7:dd:82:c3:74:28:bb:13:b8:26:fd:5e:ad:a5:d6:3b:13:dd:
         35:a7:07:d5:60:34:6f:82:c0:ec:8b:ea:64:92:f4:9c:4d:64:
         e4:49:1a:f4:58:1f:81:f2:46:40:47:43:4d:d3:3e:d3:94:6a:
         54:0f:b7:97:c5:b0:64:f3:63:0c:07:87:58:bb:d2:0f:65:b7:
         b9:38:ba:cf:92:7a:17:98:ae:c4:70:c7:75:0a:ed:41:6c:99:
         11:23:63:2f:9e:47:55:9f:a8:9c:95:ce:2d:1e:a5:20:5a:07:
         c6:32:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:13 2025 by rpki-client