Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ke-r-dChKB67Q9an2lAljoUPfpI.roa
File:                     ke-r-dChKB67Q9an2lAljoUPfpI.roa (raw, json)
Hash identifier:          +F7NphAeFDzHpysPJvBnYeBi9ZHsEv/fU3xlGpfCY48=
Subject key identifier:   91:EF:AB:F9:D0:A1:28:1E:BB:43:D6:A7:DA:50:25:8E:85:0F:7E:92
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       014B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ke-r-dChKB67Q9an2lAljoUPfpI.roa
Signing time:             Fri 07 Jul 2023 04:08:25 +0000
ROA not before:           Fri 07 Jul 2023 04:08:25 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.92.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:25 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=91EFABF9D0A1281EBB43D6A7DA50258E850F7E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:26:bb:f4:f8:f7:1c:ec:a2:51:f3:a3:18:
                    07:eb:77:89:2a:e2:74:f2:bf:19:05:77:d4:8e:41:
                    2b:6d:ad:7f:e2:5d:8c:ef:ad:42:1e:30:1c:d4:34:
                    b9:27:df:7b:58:b7:b5:d9:d6:c9:df:2b:a5:de:8d:
                    b5:ea:d3:7f:cc:76:28:72:6c:14:51:47:ec:7f:60:
                    b8:f5:23:a6:0b:82:c9:18:45:4a:3e:cc:3f:77:cd:
                    53:b0:51:46:98:38:d0:0c:ac:a0:7e:a4:d8:78:23:
                    7c:8c:09:2e:72:ff:8b:c5:48:73:02:91:91:9a:4c:
                    60:dc:de:24:c1:e4:42:ce:1e:d7:15:f4:f9:9c:ae:
                    80:9b:b9:8b:e2:2a:fa:37:cb:d0:9f:2b:e5:54:9d:
                    08:c1:e6:c7:37:1f:0e:5d:7c:46:43:da:7c:26:e7:
                    56:1b:36:2b:24:76:2e:ac:e6:a4:f9:aa:ec:e4:32:
                    f5:63:41:96:08:c6:69:54:c2:90:f9:3b:68:1f:c0:
                    19:e0:75:87:0c:a6:30:59:59:e6:73:59:b0:e7:7d:
                    51:a7:3b:1d:b1:6d:70:d9:63:8a:13:60:85:4e:89:
                    0d:5b:4d:76:e2:a8:2f:b4:2f:56:ef:42:24:48:60:
                    d4:0f:c9:ae:49:43:d1:93:ee:2e:9a:04:3a:5e:09:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:AB:F9:D0:A1:28:1E:BB:43:D6:A7:DA:50:25:8E:85:0F:7E:92
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ke-r-dChKB67Q9an2lAljoUPfpI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:82:32:b2:b1:94:90:af:9a:a7:16:25:d8:0c:03:b2:52:
         3c:11:e5:48:d9:8a:07:71:b1:01:38:1b:db:fa:76:ff:8e:8d:
         2b:09:f8:5a:d0:6d:97:a0:7f:9c:8b:44:5b:24:4c:59:c4:91:
         c1:e9:2b:71:9d:ca:10:e5:d2:ed:66:89:79:26:56:c5:58:aa:
         09:f5:9b:79:de:e2:01:a8:43:f3:1b:ea:69:0c:27:ae:96:44:
         c0:ff:ab:25:21:ba:e9:29:8f:d9:05:49:50:9a:6c:ae:0d:ca:
         a9:11:a5:d2:78:96:27:9b:21:67:6a:fb:aa:ba:54:98:82:aa:
         0c:f5:d2:7c:77:46:0b:96:a3:61:f7:53:28:66:25:10:e9:10:
         0a:83:20:55:e2:b8:a7:13:9f:c4:ed:4d:a2:90:1a:16:2e:1e:
         ed:00:ff:74:74:ae:4a:dc:3e:47:2f:74:44:85:9c:95:e6:48:
         d9:0f:40:0e:d4:a0:2f:42:54:d8:bd:bc:5b:a3:bf:1e:dd:8a:
         5b:eb:c9:65:9d:31:1a:59:2f:1f:e6:47:ca:6e:75:bf:71:57:
         ca:9f:5b:18:f8:93:e8:86:d3:9c:d3:e6:36:c7:5d:8b:8d:df:
         1e:09:32:40:cb:d8:ac:a5:03:0e:fb:fa:9e:c5:98:c7:b1:2b:
         50:ee:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:37 2025 by rpki-client