Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z-PUSc1a-vVaPo_jxKR-WuFEu7Y.roa
File:                     Z-PUSc1a-vVaPo_jxKR-WuFEu7Y.roa (raw, json)
Hash identifier:          Z0RyMGFLrej3vOCaN0h4FXmRDaUYwD+2+n72FX49o4g=
Subject key identifier:   67:E3:D4:49:CD:5A:FA:F5:5A:3E:8F:E3:C4:A4:7E:5A:E1:44:BB:B6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       39
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z-PUSc1a-vVaPo_jxKR-WuFEu7Y.roa
Signing time:             Fri 22 Jul 2022 01:10:07 +0000
ROA not before:           Fri 22 Jul 2022 01:10:07 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.22.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:10:07 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=67E3D449CD5AFAF55A3E8FE3C4A47E5AE144BBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:e3:83:19:a8:7f:d0:3a:2f:19:4a:25:e5:
                    15:e8:22:4c:e1:ea:9c:94:c8:2a:23:92:77:7c:a7:
                    db:48:c1:1d:39:19:41:c5:64:61:3e:96:e9:7f:0f:
                    d4:33:fa:39:be:bd:d4:dc:c7:c3:63:0c:4b:07:d9:
                    39:eb:74:cd:5c:43:17:b1:cd:75:8b:87:e4:90:0a:
                    6f:1f:76:25:b2:57:8a:2f:d7:b1:3f:49:25:94:ea:
                    56:b1:20:22:46:91:50:fd:81:a5:d3:58:ff:be:19:
                    7c:e9:fc:38:d3:af:e4:d9:cd:9f:c6:e8:32:1c:93:
                    45:ac:de:1b:b6:ae:ef:1c:3a:3e:ed:e3:3c:40:af:
                    2d:b1:a0:83:d7:c3:a8:4c:75:06:52:7f:ec:bf:4d:
                    c1:90:96:a5:ae:cb:98:26:0e:28:a2:b2:ee:8e:8c:
                    ab:a3:4d:39:14:3e:b3:e7:c6:d2:c3:cf:7f:1d:95:
                    46:91:ed:80:5a:d2:6a:dc:36:2b:cb:1c:3d:2e:56:
                    47:26:fd:f7:e3:fb:39:de:34:c4:b5:81:f1:52:87:
                    33:15:71:a4:03:85:b1:45:13:82:5d:10:bf:40:16:
                    b1:17:a8:87:bc:8a:7b:c7:53:ef:cc:42:18:2e:59:
                    b4:87:cf:9c:76:5f:94:5d:ec:25:e6:e0:99:dc:e2:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:D4:49:CD:5A:FA:F5:5A:3E:8F:E3:C4:A4:7E:5A:E1:44:BB:B6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Z-PUSc1a-vVaPo_jxKR-WuFEu7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:db:36:c6:97:b0:82:6e:f5:c8:43:52:02:27:b9:90:82:
         31:9f:f5:42:14:95:53:51:47:f1:65:3e:8e:49:3c:2c:1a:46:
         c3:c2:96:10:8b:8d:f7:18:b4:c6:58:99:5f:bd:d7:cd:fb:53:
         c5:e3:63:27:94:4f:2b:0d:94:11:61:78:8d:5b:9d:96:03:58:
         c3:42:ba:08:ba:9b:bd:03:17:ae:31:86:ef:ab:bf:63:2d:20:
         97:67:8a:f4:5e:95:29:3f:26:54:cc:43:58:35:f5:c1:47:c6:
         4f:b5:6e:ff:c1:ba:e0:4d:b0:1b:36:cc:eb:6d:21:2c:dc:8a:
         50:31:5e:f2:98:c8:b4:6a:06:06:7e:e4:a7:3d:b2:0d:e1:77:
         0b:cc:e7:df:87:8d:71:fb:ea:1c:cc:33:59:66:86:5a:99:b4:
         6b:ab:1d:17:ed:b3:75:06:ff:29:94:a0:10:2a:5c:c5:a1:ae:
         df:1b:75:25:11:b5:8c:54:7d:43:74:e7:82:93:96:fd:42:66:
         bc:88:72:5b:ba:98:a7:4c:72:01:35:cd:41:d4:e4:a3:a5:18:
         35:62:fd:c2:7e:a2:78:ec:f0:62:86:3d:85:a7:7a:07:76:9b:
         02:c6:11:2c:57:34:49:54:49:49:e0:b0:f8:1a:69:20:d0:4a:
         3f:68:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:51 2025 by rpki-client