Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dJAx5fwkBMBhdQKBTKFwpdSUbfk.roa
File:                     dJAx5fwkBMBhdQKBTKFwpdSUbfk.roa (raw, json)
Hash identifier:          6ibr1vfyYW4xC28Y5hV4wqvQUcd4BWGWY1Ha73K4sOw=
Subject key identifier:   74:90:31:E5:FC:24:04:C0:61:75:02:81:4C:A1:70:A5:D4:94:6D:F9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       A4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dJAx5fwkBMBhdQKBTKFwpdSUbfk.roa
Signing time:             Fri 22 Jul 2022 06:45:33 +0000
ROA not before:           Fri 22 Jul 2022 06:45:33 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.208.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:45:33 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=749031E5FC2404C0617502814CA170A5D4946DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:3c:6d:5a:5a:af:55:05:c9:cc:5b:a0:d4:
                    82:10:d2:a2:30:29:92:3f:a3:7b:f1:bd:9c:9e:94:
                    4d:29:89:ec:ae:bb:07:2f:6e:44:6e:59:25:e3:54:
                    45:3b:ea:af:98:64:64:6b:72:a5:fd:62:cd:be:27:
                    29:8b:14:99:9c:fb:89:36:75:f8:b6:e6:00:1c:79:
                    6e:31:59:87:54:0f:9b:ef:fa:cf:7b:d5:28:f2:fd:
                    3b:e1:11:ab:b5:bf:b8:c1:fa:8d:dc:55:34:c4:e6:
                    c8:fe:52:0c:08:0e:c5:34:be:57:fd:2f:c3:19:79:
                    9f:a3:5c:ac:f1:77:bd:49:a6:61:a8:28:a1:49:7e:
                    93:63:54:2e:4c:eb:db:d3:a7:c1:e9:cd:54:21:2a:
                    03:f3:4d:bf:40:6a:1f:87:4c:95:c5:e8:27:ba:2e:
                    37:a5:04:c7:49:67:cb:9e:9f:7d:37:76:45:12:96:
                    cb:7d:9a:4e:58:d9:c5:7e:a0:96:80:95:86:b0:3a:
                    4b:f9:e7:f1:83:95:f4:98:18:a5:d7:da:29:c8:0c:
                    af:2b:cd:34:ab:c9:8b:29:39:e1:04:42:82:36:03:
                    de:e4:2d:7d:46:01:d0:04:4c:42:10:3c:c3:dd:13:
                    d0:e1:c9:89:32:e2:26:77:2f:16:75:05:d9:82:71:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:90:31:E5:FC:24:04:C0:61:75:02:81:4C:A1:70:A5:D4:94:6D:F9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dJAx5fwkBMBhdQKBTKFwpdSUbfk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:e0:d2:c9:d2:01:14:76:5d:53:89:a2:36:fa:b7:cb:87:
         84:94:10:b5:ea:08:22:43:67:69:8d:0b:fa:c4:52:4c:4b:2e:
         b0:1d:a7:6e:bc:0f:37:95:4d:0a:89:28:63:91:1b:b3:17:21:
         d4:b6:9c:1d:74:ad:ac:f9:c2:b5:28:73:f6:29:1f:33:47:e2:
         72:c9:a1:18:d8:43:49:5a:48:88:ca:cd:2d:38:03:ae:48:0a:
         6e:ce:95:2e:f5:23:96:1c:ae:0f:72:2e:13:ed:89:42:8f:34:
         a6:42:25:4b:a6:f8:8f:86:e0:23:bd:07:b1:ac:06:3b:05:60:
         8f:21:6b:4f:6d:5f:e9:24:45:81:76:8a:57:a7:e0:1d:d0:07:
         ff:2b:e5:0d:a6:24:cd:38:af:24:2f:22:42:b4:5f:51:76:1b:
         42:c4:f5:77:19:82:be:0b:16:84:ed:95:6c:c7:84:b1:08:65:
         d7:80:de:77:cd:ab:a8:f7:87:d7:96:c7:57:73:3f:45:fa:0f:
         4c:60:df:d1:64:0f:9d:22:85:67:d8:81:7b:86:b6:d9:ad:56:
         58:89:f3:84:7d:e9:3a:fe:47:6d:31:6a:9f:b2:52:61:77:55:
         a0:f4:e9:6d:d2:b8:53:f9:ee:ef:3f:b1:2d:5f:43:7e:57:cb:
         fa:91:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:51 2025 by rpki-client