Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/x60KPah3svhJNAVbWJl3ssgbFK4.roa
File:                     x60KPah3svhJNAVbWJl3ssgbFK4.roa (raw, json)
Hash identifier:          2mQoPpWA0F9kcM/l4rxHgg07ah2wtDCaq3lAO7wP0jc=
Subject key identifier:   C7:AD:0A:3D:A8:77:B2:F8:49:34:05:5B:58:99:77:B2:C8:1B:14:AE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x60KPah3svhJNAVbWJl3ssgbFK4.roa
Signing time:             Thu 28 Jul 2022 05:49:36 +0000
ROA not before:           Thu 28 Jul 2022 05:49:36 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.143.144.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:49:36 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=C7AD0A3DA877B2F84934055B589977B2C81B14AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:81:dd:f0:2f:e1:00:e0:e5:71:ad:33:0f:
                    e3:ca:05:a8:35:0c:8c:fe:75:d8:46:3e:bc:ce:a0:
                    a9:28:4f:e2:1b:ff:1c:ed:29:55:38:a9:1c:40:32:
                    de:f8:f4:4f:a8:9e:0f:79:4c:cb:e0:7b:b2:aa:57:
                    0e:4d:34:21:4a:1a:17:36:63:6d:62:5e:b3:c1:7d:
                    1d:d9:ab:94:8e:3c:2d:7f:75:94:76:dc:c6:3e:2c:
                    32:dc:42:89:19:f6:f4:c9:72:5a:21:9b:57:c3:c6:
                    05:73:c7:6b:f8:3b:5e:2b:74:25:4d:03:0f:b6:d1:
                    90:70:aa:f5:2b:cb:bd:02:6a:16:a4:c9:c5:c1:a9:
                    66:5c:e5:56:14:a1:25:0e:42:20:d3:c5:c4:74:8d:
                    77:78:5b:b0:af:a8:d7:f8:b7:2d:00:bf:a5:97:5b:
                    a4:6c:b9:2f:51:7d:e9:de:9f:a5:f6:3e:88:f1:66:
                    74:b8:04:d9:58:8d:d8:4c:c6:d4:41:83:a2:7a:83:
                    8c:91:86:57:e5:db:70:25:f3:a7:05:b7:7a:dd:53:
                    d2:8d:96:a6:a0:c7:c1:5f:35:d9:21:a0:65:e6:19:
                    ff:3c:05:db:9f:e7:1d:36:32:8c:ae:95:66:92:cb:
                    6f:68:49:f0:8f:ec:6a:6a:8f:69:6f:bc:d1:02:cd:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AD:0A:3D:A8:77:B2:F8:49:34:05:5B:58:99:77:B2:C8:1B:14:AE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x60KPah3svhJNAVbWJl3ssgbFK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:8f:cd:95:d9:a4:2c:c6:1d:a0:30:2d:6f:62:b7:52:f4:
         24:fb:15:8c:8b:4e:16:f3:28:df:66:48:ee:72:30:28:e3:c4:
         b0:14:3d:95:a5:21:6d:a9:79:3c:57:fb:83:cf:b1:a5:ab:24:
         23:f4:8c:78:90:16:54:18:87:3f:6f:84:0c:82:21:7e:5a:1c:
         7f:a2:0c:f9:2d:7d:cc:a5:75:b1:f8:9b:98:1d:de:05:ce:42:
         8f:4f:53:60:dc:67:ec:fa:38:14:92:a4:c3:9c:c7:cb:37:3a:
         45:05:28:a4:ad:98:f3:78:65:7e:46:50:3a:ed:d6:60:3c:44:
         7b:a9:df:c2:18:3a:32:96:cf:ec:59:0a:ea:51:ff:ec:ee:bd:
         b7:a3:38:69:67:8f:e7:d1:55:97:90:84:04:70:23:45:46:44:
         89:9c:65:54:b4:62:30:2a:39:95:49:77:f7:af:36:6a:4c:0e:
         e1:cd:45:d6:a4:56:42:ff:b0:bf:aa:07:37:6a:d2:9a:43:0b:
         3f:4c:af:08:44:f3:03:2c:07:63:8d:70:7c:13:0e:97:81:be:
         e6:d4:80:5c:f2:e9:5c:cd:e6:0a:8a:75:dd:bb:63:38:44:b6:
         a7:6d:4f:0f:d4:d4:1a:a2:28:1f:06:af:69:b2:b7:98:01:44:
         3f:bd:20:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:55:10 2025 by rpki-client