Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ep-8mH26pQRzqNDhlKZdHmsp8B0.roa
File:                     ep-8mH26pQRzqNDhlKZdHmsp8B0.roa (raw, json)
Hash identifier:          y0kARyTwKFCnBQshzBu5hSJI9s4hPQdpyZTMOMYihUo=
Subject key identifier:   7A:9F:BC:98:7D:BA:A5:04:73:A8:D0:E1:94:A6:5D:1E:6B:29:F0:1D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ep-8mH26pQRzqNDhlKZdHmsp8B0.roa
Signing time:             Thu 28 Jul 2022 05:49:36 +0000
ROA not before:           Thu 28 Jul 2022 05:49:36 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        183.181.128.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:49:36 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=7A9FBC987DBAA50473A8D0E194A65D1E6B29F01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:3d:4c:e4:91:8f:fa:6d:ce:9a:37:3f:ea:
                    e7:d2:43:9b:75:ce:3a:89:fb:e5:0f:27:fc:64:0f:
                    93:36:d3:67:ab:48:e1:f8:70:4a:d1:75:96:15:a3:
                    05:7e:55:65:ca:8d:2b:2d:57:78:4f:cf:cf:6c:8e:
                    12:20:37:ab:16:48:f3:52:24:da:ce:ee:00:0b:39:
                    ba:84:ba:13:c8:74:c1:7a:da:b8:83:f6:6d:f3:ee:
                    86:e5:0f:a3:9e:06:bf:b9:ad:98:2a:01:03:50:0b:
                    14:aa:30:06:ef:7d:19:9f:5c:a1:0c:39:4d:63:0f:
                    22:20:1e:7a:78:d6:ec:bd:d9:14:ba:2c:c2:07:25:
                    25:11:63:23:6b:c8:35:60:05:10:fe:67:f4:5d:63:
                    55:96:21:4e:9e:ea:e9:2f:c9:76:c3:0a:68:a5:61:
                    4c:ff:55:e6:2e:35:8c:2e:8c:2f:04:d4:02:55:68:
                    1a:68:75:47:86:fe:1b:64:20:d8:a1:63:34:f2:80:
                    f6:99:44:b9:28:dc:19:50:ab:a4:a5:24:ca:e9:be:
                    52:b2:fe:c6:21:e9:f6:23:2b:dd:ba:1a:02:cd:5d:
                    36:c3:20:68:a1:cd:fc:ba:d9:6e:96:44:98:37:39:
                    79:11:0c:03:eb:d7:39:69:9d:e7:2d:28:c1:1e:1a:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:BC:98:7D:BA:A5:04:73:A8:D0:E1:94:A6:5D:1E:6B:29:F0:1D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ep-8mH26pQRzqNDhlKZdHmsp8B0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:93:3f:a1:f7:02:a4:9a:d4:eb:ca:8a:61:d7:cd:73:7d:ae:
         a3:ae:5f:d6:60:36:bb:71:79:4e:0d:cb:22:d0:ff:4a:3b:6f:
         da:1f:fe:cd:d6:b9:c4:a1:81:16:8d:4c:b1:0c:2c:f1:b9:ca:
         02:98:16:d7:4a:c0:9f:0e:6d:f1:c6:cf:a5:9e:ba:fd:3c:e9:
         7e:b0:1e:e2:c1:66:83:50:8e:20:dd:c9:c5:71:3c:bb:b2:1b:
         8d:8c:ad:fb:c2:82:dc:ff:8a:68:e3:c7:6f:b8:94:0b:b7:ae:
         e8:59:90:5d:c3:9a:af:24:e9:84:a2:df:b6:04:74:6d:67:2c:
         bf:01:0c:cf:df:48:9b:af:d1:b4:d0:42:4b:2d:0e:43:90:07:
         60:48:f5:14:b2:b7:68:1f:a0:0c:98:7d:76:fb:d3:89:f9:51:
         a9:d4:c7:e0:5f:76:fb:4b:b4:d8:72:28:82:81:e9:b4:1a:95:
         b0:8e:27:b6:a8:f7:fe:c4:9b:27:84:45:01:8a:22:53:cd:40:
         32:03:99:95:5c:4d:8b:ec:1a:50:8b:73:00:66:56:90:52:5d:
         87:7b:65:63:07:22:75:f4:a6:f5:c4:2e:c6:ce:26:28:93:b5:
         38:26:5c:61:cd:0c:4c:a1:31:46:02:ff:24:21:40:c2:56:aa:
         b9:ec:fb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:10 2025 by rpki-client