Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/iSgU1q50MA25rkgXjj2xrieV5nE.roa
File:                     iSgU1q50MA25rkgXjj2xrieV5nE.roa (raw, json)
Hash identifier:          fy0u3oxNMQ2p1Q2VDB1SeVgCo5Y4z3DlPaXZDF+Gg7A=
Subject key identifier:   89:28:14:D6:AE:74:30:0D:B9:AE:48:17:8E:3D:B1:AE:27:95:E6:71
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       78
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iSgU1q50MA25rkgXjj2xrieV5nE.roa
Signing time:             Fri 22 Jul 2022 06:01:31 +0000
ROA not before:           Fri 22 Jul 2022 06:01:31 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.120.212.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:01:31 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=892814D6AE74300DB9AE48178E3DB1AE2795E671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:d5:26:90:95:38:6f:b8:75:80:ad:62:41:
                    d9:54:39:02:ff:dd:18:25:99:b1:48:f9:1e:2a:2d:
                    6f:00:58:dd:b1:a4:c4:76:d7:da:c4:6b:a4:15:a1:
                    76:c9:ca:fb:ec:53:06:61:9a:b9:34:8c:0a:11:5f:
                    1f:44:83:b2:3f:2b:71:53:33:f2:a5:62:be:60:49:
                    23:db:ad:87:24:22:fe:be:d3:7f:3d:13:ca:e0:85:
                    76:18:4d:ce:34:38:7b:35:6c:f5:5a:a0:8d:57:82:
                    58:42:93:b4:fb:b3:49:0e:51:07:a1:43:1b:39:e0:
                    f2:42:21:a1:44:34:72:e4:69:d8:f8:f8:42:0c:92:
                    6d:22:4b:a1:2d:54:c5:f2:f1:5d:1e:fb:09:89:1d:
                    27:e7:d6:72:24:62:a6:1c:09:52:87:11:99:a4:9a:
                    40:be:3e:32:9c:df:8a:34:66:2e:08:43:d0:93:f2:
                    93:4c:05:0a:30:44:48:b1:50:12:31:c6:e0:a8:e8:
                    d4:8a:0b:50:be:df:53:7e:67:5f:be:5f:9f:48:7f:
                    b3:44:71:ab:a2:e1:3f:4f:d8:5c:68:0a:38:aa:22:
                    83:9a:8f:a1:9f:c1:15:7a:bc:93:60:28:56:87:6e:
                    b0:55:6f:d0:2c:ed:a7:0a:3d:b5:b0:7d:45:45:21:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:28:14:D6:AE:74:30:0D:B9:AE:48:17:8E:3D:B1:AE:27:95:E6:71
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iSgU1q50MA25rkgXjj2xrieV5nE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:c2:72:ae:47:72:aa:a2:9e:f5:45:64:e8:0b:22:6d:55:
         75:25:9a:20:2d:31:15:f4:e7:f5:d4:59:73:08:ab:a4:f0:05:
         21:d4:19:b6:14:8c:9a:9c:51:c1:ad:c9:3d:ca:c8:88:bc:ac:
         08:87:d4:b2:00:26:aa:04:54:7c:63:c2:5e:86:f3:24:1e:29:
         2f:52:4a:70:d7:1f:dd:49:7e:72:5c:9c:28:a8:e8:d4:55:83:
         87:ee:0d:fa:84:70:db:ba:00:b8:b9:82:1f:c2:19:06:33:49:
         a1:79:78:e0:d8:c1:5b:e3:fc:ac:f8:16:3b:27:24:8b:49:8f:
         88:83:37:0b:0f:28:3e:2e:f8:94:6f:54:77:7a:64:ae:4f:17:
         8e:fa:68:64:a7:d0:bd:a4:fa:61:b8:4e:d1:03:9f:53:d4:0b:
         cd:95:38:76:92:6b:19:c7:4e:45:c9:9a:84:36:e2:2f:c6:a9:
         7b:18:6b:bd:78:c9:4e:d4:62:53:e7:80:0d:0f:95:7b:1d:47:
         10:39:df:74:47:ab:2b:c4:01:4b:3b:98:37:1d:38:9e:5a:4f:
         71:91:20:6f:be:8e:24:9b:3a:74:6a:27:22:a0:73:61:9c:f9:
         9b:3d:a7:ab:b3:b6:5e:00:0e:ed:4b:cb:2b:4e:af:70:ad:4e:
         96:cd:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:17 2025 by rpki-client