Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dyIXjwFHXSNRsoS6ucqOgSUJmjM.roa
File:                     dyIXjwFHXSNRsoS6ucqOgSUJmjM.roa (raw, json)
Hash identifier:          5oIA8C/9/WY4VW672WSRYW2bfGH+MEYD1pmJnbqWuOc=
Subject key identifier:   77:22:17:8F:01:47:5D:23:51:B2:84:BA:B9:CA:8E:81:25:09:9A:33
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dyIXjwFHXSNRsoS6ucqOgSUJmjM.roa
Signing time:             Thu 21 Jul 2022 06:11:06 +0000
ROA not before:           Thu 21 Jul 2022 06:11:06 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.188.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 06:11:06 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=7722178F01475D2351B284BAB9CA8E8125099A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:85:f2:29:2f:c4:40:55:49:64:60:f4:72:
                    b3:60:4d:08:ec:84:a1:d3:92:01:56:33:55:eb:9e:
                    72:b1:57:e3:24:fd:80:6f:36:a5:30:5a:a8:d7:29:
                    96:e2:17:b3:89:77:99:a2:83:96:e3:fe:c3:93:50:
                    af:5f:02:a4:ab:15:fc:83:31:d1:6d:db:38:1c:2e:
                    0a:36:ba:93:1a:9b:ee:f1:60:cc:75:a5:07:37:df:
                    e0:01:2b:23:db:a8:33:14:1f:c5:96:be:85:1b:d7:
                    99:ac:f7:b7:e4:9d:47:88:e7:ca:24:6b:76:3f:f9:
                    4e:46:3a:53:c9:44:39:6b:9d:1e:5e:9c:39:16:23:
                    7d:a9:05:b3:41:ff:fb:8f:2d:44:7d:56:01:d5:b6:
                    db:a0:0e:38:dd:4a:1f:d9:98:36:aa:44:f7:5b:14:
                    54:0e:b6:c6:b6:e6:e1:df:4a:98:1d:ea:c5:6c:c3:
                    b9:90:6a:bd:c5:e2:12:e9:2d:5a:87:bd:75:6f:4f:
                    ea:b9:9c:83:08:94:a7:62:72:75:e4:5a:f3:76:26:
                    6e:31:d7:ea:91:0f:1d:91:ad:5f:cc:97:96:87:a9:
                    d3:05:73:7d:22:8a:44:da:10:26:37:86:e0:0f:fe:
                    b7:15:38:87:3c:72:0e:d3:48:01:66:32:63:71:1f:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:17:8F:01:47:5D:23:51:B2:84:BA:B9:CA:8E:81:25:09:9A:33
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dyIXjwFHXSNRsoS6ucqOgSUJmjM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:81:5e:2e:e8:a4:ca:13:df:fd:9f:e7:97:8a:91:ca:fd:
         b7:07:48:f8:61:94:47:15:21:3a:14:c1:42:f7:99:24:dc:71:
         6c:f2:d7:8f:30:28:97:71:66:2f:8e:49:88:5b:bc:37:8a:75:
         c0:fc:8a:f0:7d:a3:c2:d3:e2:7e:37:0b:5a:bb:56:f0:eb:a1:
         43:31:14:df:7c:73:de:f4:4a:82:55:b7:e8:da:67:b6:31:38:
         32:17:be:a7:05:24:e7:d6:94:ff:dc:9a:70:fd:e7:a6:7c:0c:
         35:b7:cf:d1:aa:88:ec:f1:0a:10:44:18:5d:b8:6c:b7:55:23:
         a9:da:db:dc:48:aa:12:54:b1:5f:03:65:51:5c:24:6a:ff:45:
         8f:3d:d5:6d:28:06:95:ad:b4:2b:48:b8:d3:22:3e:5d:e4:03:
         8f:e9:10:36:0e:6d:3d:55:ef:ff:f4:46:ce:aa:63:3e:93:f5:
         4a:1a:c0:79:ff:50:3f:64:f3:1b:78:34:e3:75:9d:ef:fa:f6:
         68:5e:cb:18:b2:2f:9e:6b:42:68:41:40:47:0f:f4:fc:74:5f:
         e2:bf:c1:66:97:00:07:1c:7f:a6:c1:95:ec:16:29:2d:94:55:
         16:53:ad:f5:05:13:7a:7d:dd:18:33:80:e3:90:bd:d1:3b:15:
         f6:d7:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:52 2025 by rpki-client