Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/j9jhoHeENeg5vmiCxqc2FPDH18o.roa
File:                     j9jhoHeENeg5vmiCxqc2FPDH18o.roa (raw, json)
Hash identifier:          082//jvwRtct178KjKK2gThDStNvcJxDUOHm5qW/a54=
Subject key identifier:   8F:D8:E1:A0:77:84:35:E8:39:BE:68:82:C6:A7:36:14:F0:C7:D7:CA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j9jhoHeENeg5vmiCxqc2FPDH18o.roa
Signing time:             Fri 22 Jul 2022 08:58:23 +0000
ROA not before:           Fri 22 Jul 2022 08:58:23 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.24.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:58:23 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8FD8E1A0778435E839BE6882C6A73614F0C7D7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:05:be:74:c1:bf:22:9a:6d:60:4a:38:2a:
                    41:75:62:d8:03:34:e6:50:16:57:72:72:79:7b:be:
                    78:64:d6:20:2b:b5:4f:cb:4d:c9:89:01:f3:a4:5d:
                    78:b5:6c:60:54:4f:73:ad:ed:4d:39:03:ec:f9:98:
                    6f:10:b6:2b:c2:ff:0b:2b:84:38:37:6c:a4:08:29:
                    ff:ef:41:ca:64:0a:e0:f6:e6:35:e5:40:f1:5d:fc:
                    45:ec:40:e7:d6:b2:bd:66:af:4a:35:85:06:c3:dd:
                    a4:cd:b6:02:34:97:49:fe:89:b3:23:64:2e:12:14:
                    91:71:15:9e:6e:6c:f2:60:d4:ee:67:76:13:4e:d4:
                    13:65:11:93:78:f6:f5:ae:72:c2:67:44:b0:53:9a:
                    5c:38:f6:42:5c:13:b4:92:f8:28:a8:a8:38:e8:6d:
                    60:f5:1b:92:b9:a6:bf:c6:c2:7f:88:94:88:19:07:
                    50:11:44:83:7f:fa:85:f6:d5:6a:b2:37:d9:09:2d:
                    10:9c:a2:19:1c:28:04:9b:82:10:43:49:1e:34:75:
                    1d:9b:4f:42:02:21:56:08:0d:2c:4c:b2:0e:1a:eb:
                    a4:01:c3:70:65:53:d3:03:5e:bc:19:04:79:4f:3a:
                    0b:f7:e7:e8:50:59:ac:4a:88:3a:94:43:d3:3d:06:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:E1:A0:77:84:35:E8:39:BE:68:82:C6:A7:36:14:F0:C7:D7:CA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j9jhoHeENeg5vmiCxqc2FPDH18o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:8d:40:b8:f8:34:ec:33:cd:b2:f7:8e:ba:eb:5b:71:08:
         81:6c:c3:be:5b:5c:0b:4e:81:6a:ba:f3:a0:15:c4:2c:59:99:
         6c:44:84:5c:ba:d5:84:aa:b1:b3:a0:43:e4:aa:26:8a:41:95:
         ed:7c:b8:fc:65:69:33:d3:85:d3:c4:fb:d1:15:31:7c:5c:ca:
         04:ce:6e:31:d0:0a:80:1d:f6:69:33:0a:1e:20:14:18:c1:12:
         d0:c6:16:8b:2c:7c:fc:95:d0:32:38:e2:dc:65:26:9e:83:5b:
         0d:2e:6e:29:50:e2:92:d3:a2:47:77:5d:43:fe:71:c8:07:2c:
         a8:3d:07:48:91:02:e1:30:a3:df:ac:aa:88:ef:1c:34:0d:bf:
         92:0e:cc:74:c1:c8:71:54:46:9f:64:50:f8:53:21:e2:d5:43:
         44:24:f2:cd:c6:92:53:b1:9c:2a:8e:3f:13:60:21:5b:ec:38:
         5f:2d:26:3c:a2:6e:5f:41:72:6f:f3:bb:19:46:b8:a5:48:2a:
         2e:4e:a6:25:ca:62:83:79:6c:0e:f1:4e:c2:c9:df:9e:7a:79:
         d9:da:be:45:f5:dd:b2:91:7c:7d:df:7f:91:d7:a5:d6:00:9f:
         df:cd:48:21:db:43:21:17:23:8e:58:93:f3:5d:10:9c:67:bd:
         3e:7c:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:40 2025 by rpki-client