Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/is7pDPdyGnpqi5hMaadzF-2On90.roa
File:                     is7pDPdyGnpqi5hMaadzF-2On90.roa (raw, json)
Hash identifier:          PEyNzuFftIc4/PIbo/LTlLIjPgKe3SJ2zfK5iRAbucY=
Subject key identifier:   8A:CE:E9:0C:F7:72:1A:7A:6A:8B:98:4C:69:A7:73:17:ED:8E:9F:DD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       27
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/is7pDPdyGnpqi5hMaadzF-2On90.roa
Signing time:             Fri 22 Jul 2022 00:10:12 +0000
ROA not before:           Fri 22 Jul 2022 00:10:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.72.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:10:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8ACEE90CF7721A7A6A8B984C69A77317ED8E9FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:fd:ee:96:82:e2:f9:06:bb:cb:9e:2d:dd:
                    f1:85:70:b9:ef:3e:27:1e:66:ec:9d:f7:bf:1f:f0:
                    60:45:ef:89:55:6e:fe:b7:14:00:ab:06:e7:3d:c7:
                    78:75:cc:9c:d2:83:16:77:d0:3e:e4:83:c7:68:0f:
                    cb:7b:c5:8c:7d:88:44:a8:3e:80:7d:aa:8c:63:4c:
                    7e:7f:87:ac:6d:48:9e:42:26:e7:44:fc:25:22:22:
                    e9:13:d6:87:e6:24:27:0e:f7:f6:ee:bd:df:88:39:
                    c9:1a:56:67:2c:dd:62:ed:25:04:78:1d:71:3c:17:
                    b5:ae:8d:e6:2f:7b:28:cd:cf:ab:3e:61:fa:75:a9:
                    76:f9:9e:6c:63:3b:c7:3a:e0:09:1d:de:12:ca:c8:
                    3c:1c:03:b2:13:bc:96:b3:0b:d0:94:72:ca:a7:fc:
                    a2:1f:a3:78:99:59:d1:ff:5a:3c:21:a1:d7:a8:e8:
                    19:83:50:12:65:8a:57:4e:b3:8a:c8:a8:22:e5:49:
                    bb:5d:e9:56:ed:ce:0e:35:e8:93:16:9c:c6:df:01:
                    1e:aa:dd:c3:fc:33:d0:ea:2b:ff:70:d0:da:51:c7:
                    db:fc:fc:81:70:ba:52:93:81:28:b9:d6:f9:f8:cf:
                    f6:0a:7b:cf:e7:53:26:ea:72:89:93:e0:f3:7a:f1:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CE:E9:0C:F7:72:1A:7A:6A:8B:98:4C:69:A7:73:17:ED:8E:9F:DD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/is7pDPdyGnpqi5hMaadzF-2On90.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:bc:ba:97:d8:6f:fd:e6:1c:af:df:5b:dd:cf:f4:b5:ca:
         1b:8f:bf:6a:86:5a:79:11:2e:0c:28:e2:84:75:04:e4:3b:a2:
         ca:06:bb:0d:eb:14:af:5a:7d:5b:4a:c8:8c:c7:f5:71:77:84:
         45:d6:94:00:8b:80:2c:56:49:7a:a4:da:b4:f9:ac:54:77:03:
         d4:99:18:ed:1f:43:e2:0f:05:0c:35:d1:02:3c:03:6b:86:a2:
         bb:ec:c8:8a:62:2c:e4:35:b6:0b:e3:6b:1d:61:34:57:88:2d:
         b6:01:a3:28:9c:d1:ac:9c:d9:4f:b4:3a:35:61:5e:05:c4:6d:
         e5:26:9d:e8:cd:3c:6a:26:95:5d:39:c1:04:4c:53:26:36:f0:
         40:58:3c:70:a5:71:9f:6f:ac:15:49:b2:46:8b:b4:15:93:c2:
         db:e4:25:1e:ec:e5:c0:c8:4b:e8:95:c9:18:1b:c8:fe:83:b3:
         aa:56:20:24:2f:41:66:e1:67:12:7f:d4:a6:85:4d:3b:d9:e1:
         3f:86:9e:d6:57:78:07:b7:ec:21:c8:68:6e:7a:f9:c6:65:68:
         ef:68:c2:7e:3d:bb:96:e6:32:26:ef:ef:b7:74:b3:91:b8:99:
         25:5a:56:19:79:87:34:b0:a0:f7:67:7d:1e:84:b4:9c:74:2c:
         fe:1d:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:26 2025 by rpki-client