Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pHBTFNTt6eBAHVUg9XdXOheu5LQ.roa
File:                     pHBTFNTt6eBAHVUg9XdXOheu5LQ.roa (raw, json)
Hash identifier:          AQsfcVMv4nGxEZ70UUFrQW08GIO7Z/91lMXxmg50PzE=
Subject key identifier:   A4:70:53:14:D4:ED:E9:E0:40:1D:55:20:F5:77:57:3A:17:AE:E4:B4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0141
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pHBTFNTt6eBAHVUg9XdXOheu5LQ.roa
Signing time:             Fri 07 Jul 2023 04:08:21 +0000
ROA not before:           Fri 07 Jul 2023 04:08:21 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:21 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A4705314D4EDE9E0401D5520F577573A17AEE4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:8a:a8:ba:bd:30:21:c2:f8:49:54:c3:61:
                    2d:e3:02:02:b8:66:eb:f4:cd:20:0b:95:30:b4:d6:
                    ab:62:68:76:1f:e2:12:7a:44:3d:68:2e:00:f7:e7:
                    93:9a:00:30:c1:6c:13:99:b3:5a:6b:68:e2:25:9b:
                    2a:8a:b4:68:13:7b:7e:6d:22:28:ff:32:46:2d:4a:
                    d1:c8:a0:b7:46:8c:8e:c9:b6:82:9a:4e:96:7f:c9:
                    68:37:ec:d2:65:3f:cb:b9:27:61:d0:6c:90:f3:1e:
                    1d:46:1f:e3:99:fc:52:31:74:cf:3f:f3:86:9b:b9:
                    c8:20:a4:ea:a8:9b:e1:a2:79:3c:d9:d2:bb:6c:2e:
                    7b:2c:af:e7:dd:a5:2f:1c:8f:3b:fc:bc:0d:42:a4:
                    ba:54:a0:e7:d3:7f:5f:69:6b:d8:31:d2:78:e2:d4:
                    70:cd:d1:14:e2:8e:4b:6c:83:7f:48:f8:63:7a:fe:
                    95:ba:1f:d8:3b:a4:60:f2:0a:59:1e:cc:f8:f4:1c:
                    fd:b5:6e:6d:de:66:cd:2d:4c:4e:fd:1b:ed:6e:d6:
                    c1:9b:1f:ec:e6:9b:2d:f2:41:a7:a6:26:15:37:ce:
                    5b:ff:96:b4:74:12:04:e8:f2:73:25:4b:eb:ca:70:
                    f1:7f:07:e6:95:28:3e:4d:d4:48:8c:b0:11:65:27:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:70:53:14:D4:ED:E9:E0:40:1D:55:20:F5:77:57:3A:17:AE:E4:B4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pHBTFNTt6eBAHVUg9XdXOheu5LQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:6f:02:8b:df:fd:c1:60:f3:d5:0f:b6:08:4e:18:9b:10:
         4d:a4:45:d6:41:b1:1b:89:81:67:01:97:ab:b0:88:51:d0:08:
         47:7f:50:c0:6d:59:f4:06:a4:b8:7b:f9:d0:93:12:1e:e9:96:
         8d:50:8b:dc:fa:f4:ee:24:91:4f:08:a2:05:a2:06:1f:3f:14:
         1b:58:39:88:31:78:29:8d:5d:62:11:61:18:b3:11:db:15:ba:
         2e:ce:d5:e0:78:bb:67:17:12:b7:96:b7:71:4b:6a:fa:aa:cb:
         4a:82:04:33:22:6f:fd:8a:88:55:b3:74:dc:ff:e9:f4:6f:a3:
         f4:95:f5:7f:c6:08:bc:73:73:af:67:b2:7c:90:99:32:54:33:
         90:cd:da:c5:b6:8e:dd:d4:e7:53:f0:13:3d:62:82:5f:e8:e4:
         fe:95:7c:3c:80:6e:8b:4f:7d:e0:73:5d:40:7d:48:5f:85:49:
         6e:44:dd:62:c6:af:7f:73:c3:eb:dd:74:bd:27:72:91:15:f1:
         7c:a1:e4:69:5c:fa:1f:34:3a:cf:69:7c:88:9e:cb:1e:33:a6:
         46:28:7d:13:1d:18:e7:09:79:88:64:34:0b:d2:4c:c0:36:c0:
         fd:70:2d:58:ed:7c:d6:22:22:ee:71:fa:2b:2e:c8:e1:f4:b0:
         62:99:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:56:07 2025 by rpki-client