Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tFZLnTUleYMm2o83GkQ_22mnjhY.roa
File:                     tFZLnTUleYMm2o83GkQ_22mnjhY.roa (raw, json)
Hash identifier:          P5B4FMtRqMTVgz8VCCMh+qPM9MMbNXo6ES18ucTCnEc=
Subject key identifier:   B4:56:4B:9D:35:25:79:83:26:DA:8F:37:1A:44:3F:DB:69:A7:8E:16
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       F2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tFZLnTUleYMm2o83GkQ_22mnjhY.roa
Signing time:             Wed 24 Aug 2022 04:43:39 +0000
ROA not before:           Wed 24 Aug 2022 04:43:39 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     4686
IP address blocks:        124.255.224.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug 24 04:43:39 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=B4564B9D3525798326DA8F371A443FDB69A78E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:3a:c8:92:df:ba:cd:e0:6a:f9:a1:36:32:
                    95:0e:46:e1:80:14:81:18:2f:a0:e5:ca:2b:a0:3d:
                    13:04:1b:98:60:16:28:66:b5:1f:c6:36:e0:a0:1a:
                    0b:b6:4c:db:8f:a0:da:99:5f:9b:09:58:37:7e:fb:
                    c3:ea:a9:fb:16:a8:ee:ec:86:bc:e0:ba:54:dc:d5:
                    52:a5:e2:66:49:7a:b7:8b:79:8c:61:62:d4:78:6d:
                    c2:14:5b:76:85:72:12:e0:cd:9e:f2:1e:06:f2:c4:
                    09:1d:ca:33:2a:5b:6d:05:0c:a3:0b:c9:18:d7:6d:
                    a0:ee:df:dd:65:39:e1:c7:aa:21:9e:27:2a:89:b7:
                    3f:b7:06:85:2b:ea:2d:01:81:cd:16:ec:ff:0a:25:
                    ac:59:8c:d2:df:e8:1a:06:15:c1:2c:60:1b:fb:de:
                    1d:22:9a:43:a0:8a:2b:c4:a1:77:70:ac:e3:12:9c:
                    0a:6b:31:b8:4f:a8:8b:24:3e:43:da:ad:3c:3d:d9:
                    85:e9:05:6a:82:bd:cd:fa:1c:17:75:39:d3:c3:2e:
                    95:10:1f:54:d2:05:65:9e:f0:52:ad:40:2a:5c:24:
                    aa:14:fe:91:c2:b8:f6:26:e3:8c:68:80:9f:a9:6a:
                    dc:4b:7a:0a:91:9e:bd:1c:5a:da:3b:93:d7:e8:aa:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:4B:9D:35:25:79:83:26:DA:8F:37:1A:44:3F:DB:69:A7:8E:16
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tFZLnTUleYMm2o83GkQ_22mnjhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:51:ec:cc:27:5b:30:1d:fe:82:27:e9:c2:b2:db:29:4d:1e:
         33:94:f8:c8:9a:7c:7c:22:61:63:a0:e4:59:65:ee:a3:40:e0:
         3e:44:3b:e9:c1:7c:0e:1c:d2:3f:54:02:c8:bf:89:13:46:da:
         af:57:68:5a:db:ec:d2:40:9a:2c:d1:78:23:4f:2e:f9:e7:0a:
         6f:e1:48:30:ca:ab:66:86:16:2f:8c:75:f8:48:e0:8a:42:14:
         5c:4b:74:fd:c3:8d:d8:04:d0:f5:6e:22:1a:b6:c7:24:eb:f9:
         87:d0:92:02:af:e9:25:03:6d:eb:a5:b0:13:32:6b:37:25:a4:
         b4:3c:22:78:90:ee:29:bc:7f:23:a9:e4:0d:36:c9:68:fc:69:
         c1:1e:32:4b:94:95:c8:d1:e6:ff:91:88:c2:dd:b2:d0:97:e1:
         5e:26:93:5b:68:94:86:ad:dc:d5:de:2c:f0:37:05:a7:8a:d7:
         1e:57:c3:e9:58:c3:59:01:1c:62:a5:1e:4a:90:f1:5e:5c:2b:
         9e:17:99:e8:1b:5f:54:f6:0e:6a:21:8d:37:9e:f4:8e:50:28:
         83:58:b4:d0:06:6d:06:85:58:c4:a6:9f:23:33:89:f6:53:cb:
         dc:3b:59:b9:7f:89:8a:aa:ff:4a:83:a8:4a:25:11:69:41:55:
         e8:df:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:04 2025 by rpki-client