Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nTbEy_CYwmmNDPSJFNzuOFrEnsw.roa
File:                     nTbEy_CYwmmNDPSJFNzuOFrEnsw.roa (raw, json)
Hash identifier:          tN4E0YvvnBGXv1wYXfkftVAtUs25pLxK459YQaW8NeM=
Subject key identifier:   9D:36:C4:CB:F0:98:C2:69:8D:0C:F4:89:14:DC:EE:38:5A:C4:9E:CC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       EB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nTbEy_CYwmmNDPSJFNzuOFrEnsw.roa
Signing time:             Thu 28 Jul 2022 05:59:42 +0000
ROA not before:           Thu 28 Jul 2022 05:59:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.159.140.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:59:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=9D36C4CBF098C2698D0CF48914DCEE385AC49ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:e0:66:ec:a7:62:1b:35:fa:71:03:b7:91:
                    09:f5:09:e2:51:2e:6e:66:35:95:db:7c:58:09:b0:
                    ce:6e:57:eb:25:23:92:68:54:bf:76:a5:ca:ad:00:
                    46:98:1c:b6:50:d1:d4:bb:7f:cc:8c:f1:21:58:24:
                    f7:9b:14:7e:f4:49:a2:3c:f5:a7:b6:b5:5b:bb:f2:
                    14:c4:9a:b3:d5:3d:0a:07:5a:85:74:57:f9:10:f7:
                    86:98:05:0e:29:39:69:b1:39:d4:ad:91:5d:d7:28:
                    f2:8d:88:9d:ff:a1:0a:87:a3:a8:e8:8f:c2:d0:06:
                    12:d6:c0:03:24:e6:04:ba:b5:df:b6:e6:d6:8d:0d:
                    6e:12:a7:e7:9c:34:2b:bf:a6:54:ed:0d:a4:1e:8a:
                    8b:12:84:dc:b6:f1:bb:86:f9:b3:c7:98:3d:71:80:
                    14:53:93:d1:4d:c1:fe:4d:95:ca:b8:cb:26:55:91:
                    af:91:3d:41:85:16:c1:50:ab:3a:a3:c4:ed:97:5d:
                    39:e6:58:4e:a9:18:94:cb:1b:9b:92:ff:0e:b0:c4:
                    39:b5:47:84:2d:ff:1a:9d:4a:74:b5:e5:a7:39:e1:
                    d8:57:77:f1:0a:06:47:99:95:68:14:03:e0:c1:eb:
                    5a:bf:b9:64:75:f9:f8:13:8a:5b:d6:ba:74:24:e5:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:36:C4:CB:F0:98:C2:69:8D:0C:F4:89:14:DC:EE:38:5A:C4:9E:CC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nTbEy_CYwmmNDPSJFNzuOFrEnsw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:2d:89:45:29:30:34:8e:9f:d2:e5:66:04:5f:5c:1d:05:
         a3:e6:47:ce:e5:c6:11:83:1a:5e:ed:76:18:15:f7:a6:7b:8c:
         52:f6:0d:74:9f:e2:20:fb:e3:16:75:f0:35:a6:81:31:54:c8:
         eb:84:26:2d:3e:db:6d:d5:4c:b8:b7:44:94:83:72:60:9d:e1:
         5a:4b:f3:1f:11:33:a6:08:c1:62:3c:4d:60:be:16:4c:08:09:
         a7:af:f7:a5:b7:76:d1:d0:96:51:59:0f:34:61:62:41:70:4a:
         fe:73:dc:84:27:8f:b6:f4:97:95:08:5e:e5:e0:74:07:3d:a2:
         f0:40:ee:26:cb:39:a9:15:c9:d9:78:fe:f5:64:bb:14:3d:b0:
         53:3c:fc:d2:7b:97:06:9f:85:b5:f0:64:0e:97:e7:c1:7d:ee:
         b7:17:89:c6:57:54:c5:a0:56:b7:eb:06:bf:9c:6c:23:1f:14:
         aa:12:42:c5:c7:4b:30:17:8d:7f:83:a5:85:25:39:6b:9d:2c:
         bf:fb:3e:97:c2:be:14:64:db:07:bf:68:a9:7e:09:d9:f9:f3:
         c2:43:6c:5e:5e:2f:8e:fd:1e:6b:fe:27:c6:11:61:99:37:43:
         8b:55:71:74:d1:1c:22:4b:bc:e7:5d:cf:d0:a2:29:83:c2:d9:
         a1:02:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:27 2025 by rpki-client