Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ck_xM3y4iQvzILVfdWJvVYTE60A.roa
File:                     ck_xM3y4iQvzILVfdWJvVYTE60A.roa (raw, json)
Hash identifier:          e83p5guYwWu6wdejnRCmS/CqWZgqmwalRd/8VvtvObY=
Subject key identifier:   72:4F:F1:33:7C:B8:89:0B:F3:20:B5:5F:75:62:6F:55:84:C4:EB:40
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       D5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ck_xM3y4iQvzILVfdWJvVYTE60A.roa
Signing time:             Thu 28 Jul 2022 05:37:47 +0000
ROA not before:           Thu 28 Jul 2022 05:37:47 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        180.131.118.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:37:47 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=724FF1337CB8890BF320B55F75626F5584C4EB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:5d:c8:1c:a8:8c:56:43:91:3d:f5:e8:ba:
                    ad:cb:14:f8:d5:4f:ef:ff:33:02:df:2f:41:81:b2:
                    a2:ad:b3:13:c3:e9:d4:cc:d8:a1:c8:21:ae:ce:00:
                    a6:b4:2e:f0:a3:e5:2b:76:e7:04:29:22:d5:79:d4:
                    42:5b:a0:18:50:dd:76:d1:06:d1:33:17:15:74:bd:
                    6e:88:84:48:4c:c6:a7:79:68:dd:3d:eb:b4:83:d4:
                    d1:c9:68:81:25:be:24:87:5a:16:28:b5:8c:2f:bc:
                    a8:41:6d:db:01:b3:a7:56:44:d4:53:c4:32:d3:1d:
                    67:ec:1e:ec:51:db:69:9b:bd:13:01:d6:0a:d6:2b:
                    c4:cf:9f:50:a7:43:38:46:a7:04:67:fb:1f:ce:0f:
                    30:c0:02:c0:e8:08:4f:b5:88:d5:2c:91:11:ef:f7:
                    c4:3a:e2:9d:ac:52:97:50:9f:64:e6:98:12:0e:10:
                    51:50:44:40:64:6a:cc:fb:45:bb:04:27:7f:69:23:
                    8a:2b:6f:db:63:bb:6c:42:a8:21:34:99:f2:df:1b:
                    0f:8d:98:49:bc:2d:52:c0:2f:18:2b:92:1f:13:4a:
                    3b:71:19:23:2d:a2:bc:13:6e:dc:6b:e3:3c:15:64:
                    42:bf:0f:a7:ac:43:c0:be:2b:42:ba:9e:44:af:67:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:F1:33:7C:B8:89:0B:F3:20:B5:5F:75:62:6F:55:84:C4:EB:40
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ck_xM3y4iQvzILVfdWJvVYTE60A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:07:a4:98:a7:f1:00:a8:a2:bf:cb:b8:0c:85:7b:02:66:d6:
         4d:32:03:89:fb:b5:68:1f:fe:ac:98:b0:2d:3f:de:4e:35:09:
         4e:69:78:87:c0:1d:20:f4:c2:2f:ef:60:19:e3:7b:90:c9:c1:
         1b:f9:42:87:e7:05:92:6d:d9:67:73:fc:7f:65:2e:f7:d1:4f:
         84:9e:c5:a3:d4:fc:fe:3c:55:07:49:7b:90:25:be:6c:b5:74:
         a9:f1:09:66:c7:1b:10:8a:1b:be:8c:9d:d2:2c:d6:1d:07:7a:
         d3:82:d2:50:8d:78:0f:6c:6b:f7:f0:3e:6c:3d:d5:c2:9b:cb:
         b8:34:ca:4a:53:ef:c8:06:88:02:61:c9:ef:a8:39:d4:89:16:
         46:2a:55:e4:34:28:07:3a:36:7f:ee:c5:99:08:4d:b4:c3:4c:
         74:5e:ef:ac:bb:d7:b6:eb:ce:d4:57:ff:fe:b1:9c:8b:09:09:
         c6:75:e3:f9:df:0a:1b:1b:06:50:c8:37:3c:5b:ff:4f:28:96:
         a1:61:2f:0a:8a:13:63:8d:45:52:ef:bc:be:44:89:fb:78:bf:
         ff:71:93:60:36:21:81:dd:69:84:11:df:63:8e:82:93:3f:93:
         cf:9b:55:16:8b:60:65:ba:c6:7f:39:e8:e9:2d:b6:15:5d:40:
         84:3c:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:03 2025 by rpki-client