Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lvbEs75HNymLkJok_E0jfBiF3VU.roa
File:                     lvbEs75HNymLkJok_E0jfBiF3VU.roa (raw, json)
Hash identifier:          K6gyN6eF7EAdRzzANNt+GHCXuYjgqS+lEWtSECJrYrM=
Subject key identifier:   96:F6:C4:B3:BE:47:37:29:8B:90:9A:24:FC:4D:23:7C:18:85:DD:55
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       09
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lvbEs75HNymLkJok_E0jfBiF3VU.roa
Signing time:             Thu 21 Jul 2022 07:11:15 +0000
ROA not before:           Thu 21 Jul 2022 07:11:15 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        14.128.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:11:15 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=96F6C4B3BE4737298B909A24FC4D237C1885DD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:2a:b5:dc:d7:f8:6d:94:19:1d:a8:9b:b2:
                    fd:87:11:5d:df:17:ac:70:50:2f:0c:45:00:c8:e8:
                    0e:c3:eb:b0:15:e2:61:75:15:f4:9e:b8:c6:5f:34:
                    d0:c3:7a:2f:c5:7c:b0:71:e4:d1:ba:14:b0:84:4d:
                    40:05:c6:7c:a8:cf:fa:02:6d:62:31:c3:2c:91:c2:
                    45:37:cd:5b:4a:8d:9e:a9:9b:18:16:94:a0:a9:ac:
                    ea:6d:20:ea:6a:1f:f4:d3:91:64:b4:eb:c9:5a:a2:
                    82:64:06:d1:87:85:18:88:0b:c7:3e:45:e9:a8:e0:
                    a4:1a:6e:30:c9:a1:43:a1:12:48:69:47:2e:b6:5c:
                    8e:01:12:b7:7f:f6:13:47:e6:f4:6e:da:8f:35:d7:
                    35:18:fd:a3:7a:4e:3b:b7:11:34:84:ef:fb:51:e9:
                    a4:7b:4e:b5:8a:03:7c:5f:d8:7a:4e:42:86:37:65:
                    d3:1a:79:e6:65:3e:7d:c7:2a:8a:1b:e0:d3:fc:96:
                    eb:c5:07:00:87:f8:71:19:f5:84:eb:f7:65:b9:99:
                    08:3b:56:eb:68:8d:b4:2c:bd:4b:93:3c:36:3f:71:
                    9f:c0:fc:03:00:46:75:42:9e:8f:8e:a4:91:79:03:
                    00:c0:99:9b:e0:8d:27:c7:51:b4:ef:27:39:94:65:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:C4:B3:BE:47:37:29:8B:90:9A:24:FC:4D:23:7C:18:85:DD:55
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lvbEs75HNymLkJok_E0jfBiF3VU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:8d:da:3d:cf:50:0a:54:60:c8:99:41:32:f7:06:73:3d:
         10:f7:8c:5d:79:cb:5c:29:5c:cb:cc:2d:33:01:65:61:4e:c4:
         0f:5c:5c:f3:01:f9:d5:6c:9f:73:67:7d:8c:a4:0a:cb:d4:a2:
         99:49:ff:23:48:db:ad:18:8b:f7:a7:1c:fa:3e:ef:30:5e:ce:
         2a:3f:db:6d:7c:db:1d:05:e9:e8:ad:38:37:4e:af:2e:85:f4:
         1b:1a:ae:84:06:4d:85:e6:b3:12:97:18:cd:a0:74:1d:e7:30:
         f1:e2:1f:d2:8a:45:fa:00:30:dc:14:19:40:4a:fe:ab:90:42:
         46:58:ed:d7:fb:09:59:c1:be:b3:33:e5:02:a8:45:23:a4:a1:
         bf:31:d9:c9:88:1d:7d:28:22:cb:dd:f2:7e:93:02:bd:06:01:
         a9:46:cd:9b:77:d7:5e:cf:df:54:d9:d9:b8:64:b8:1e:e7:27:
         d6:eb:5a:61:a3:6b:9f:f5:94:4e:5c:6f:85:a6:3d:40:cb:97:
         a3:e9:cf:ec:a2:ee:12:d6:08:42:f3:f4:1e:71:ac:c6:02:00:
         25:1a:af:64:22:c6:14:22:ac:a1:bb:65:05:3e:3a:57:0e:26:
         b2:a1:d2:9f:88:26:7f:18:0d:3d:11:db:3d:a5:fd:dd:5b:99:
         10:b7:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:38 2025 by rpki-client