Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mwG_Jl0LbKYAGKqQD0fzQJDaaxg.roa
File:                     mwG_Jl0LbKYAGKqQD0fzQJDaaxg.roa (raw, json)
Hash identifier:          /l3pRc8WVL/vYui5+0BDrOd6nAT47q4raNAp+IiA1dU=
Subject key identifier:   9B:01:BF:26:5D:0B:6C:A6:00:18:AA:90:0F:47:F3:40:90:DA:6B:18
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       15
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mwG_Jl0LbKYAGKqQD0fzQJDaaxg.roa
Signing time:             Thu 21 Jul 2022 08:07:39 +0000
ROA not before:           Thu 21 Jul 2022 08:07:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.133.8.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 08:07:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=9B01BF265D0B6CA60018AA900F47F34090DA6B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:6c:94:91:9b:a2:10:ad:c0:a5:86:a6:41:
                    41:2e:f5:ed:68:f1:7b:33:65:30:ae:53:58:84:a1:
                    f2:49:a3:a7:8f:bb:03:61:dc:71:11:f6:2f:d5:c9:
                    9b:f6:84:24:4c:64:76:7d:02:71:17:a9:2e:d7:96:
                    6c:f8:55:40:de:a8:df:7b:f2:11:79:e8:52:8f:7b:
                    54:d4:f8:c1:7a:05:16:da:85:49:17:d6:a8:f3:f8:
                    fd:89:32:41:01:3e:8b:a7:02:50:f1:5a:1e:da:ad:
                    dc:a9:fa:9b:72:c9:b5:3f:19:ed:f9:a8:78:e2:ab:
                    b0:4e:e8:8f:62:25:35:0f:80:e6:3d:20:60:b6:b6:
                    7b:6e:3a:d2:c1:54:68:14:11:0f:d4:10:f5:67:fc:
                    6e:3f:f1:2b:0d:d3:61:0b:6a:2b:e1:f5:d5:4b:7f:
                    d8:07:1b:53:b5:4c:b3:ea:e5:2e:b3:64:34:cc:80:
                    70:6f:86:f2:54:e5:02:ff:6d:33:ca:35:56:c4:9d:
                    26:77:c4:b6:55:fe:c8:de:3c:ff:58:62:5a:3d:b2:
                    b1:ef:57:88:9a:7e:34:3a:2c:a3:7d:54:9b:bc:4f:
                    2d:2c:1c:84:0f:32:f3:4b:9e:06:50:cb:26:18:d2:
                    2a:1d:cf:54:11:a4:34:f5:55:49:e9:f8:6f:ee:20:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:BF:26:5D:0B:6C:A6:00:18:AA:90:0F:47:F3:40:90:DA:6B:18
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mwG_Jl0LbKYAGKqQD0fzQJDaaxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:04:67:8d:04:b7:ae:65:c5:1a:38:f9:da:3f:4e:da:b6:
         f0:31:65:fb:85:61:e6:bd:bd:51:a5:de:fa:14:f2:7c:8c:c0:
         46:c2:43:d1:d7:a6:82:2a:37:2e:56:2e:44:3a:1c:88:f1:63:
         e4:06:ea:e3:40:09:2a:ff:64:7c:2b:95:01:6a:5a:57:c0:60:
         cd:92:72:4f:d8:e8:9e:dc:24:26:3a:bc:2c:9c:cf:15:59:d5:
         40:65:5e:aa:cf:00:a1:96:6e:5f:2e:92:1a:7b:89:9c:81:3e:
         f5:17:65:c1:bc:88:2c:ba:88:74:41:c0:5b:7e:c7:c8:86:c6:
         6d:80:4d:7b:39:19:71:4b:12:26:8c:01:23:db:14:cf:88:94:
         9e:53:b2:af:ca:11:c5:fc:ec:13:d6:7f:ee:27:69:17:62:91:
         1b:ec:f3:e9:0e:e7:14:09:c0:f7:c8:2e:b8:ad:be:06:89:cd:
         37:7e:45:c3:b7:ae:f3:1f:a1:2e:5c:96:4a:2e:20:ed:11:d2:
         3e:d5:0e:a6:0a:f1:75:81:ed:09:47:a2:27:1a:59:0c:9c:29:
         b6:fe:e3:48:12:22:49:db:21:10:27:f2:05:46:d2:32:49:3f:
         53:a8:eb:f1:11:0d:30:4f:a1:82:7a:d8:d9:22:b8:89:b6:95:
         a2:72:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:04 2025 by rpki-client