Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zS4MRRzikngD3JLImUkW64FOd7A.roa
File:                     zS4MRRzikngD3JLImUkW64FOd7A.roa (raw, json)
Hash identifier:          yRVBIUd6wPMpkWAHE6lwH7ovhUw7qUZSvke99QfPEL8=
Subject key identifier:   CD:2E:0C:45:1C:E2:92:78:03:DC:92:C8:99:49:16:EB:81:4E:77:B0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       BB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zS4MRRzikngD3JLImUkW64FOd7A.roa
Signing time:             Tue 26 Jul 2022 05:06:41 +0000
ROA not before:           Tue 26 Jul 2022 05:06:41 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        175.103.180.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 05:06:41 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=CD2E0C451CE2927803DC92C8994916EB814E77B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:ff:78:23:35:48:7a:f4:14:59:eb:bb:5c:
                    fb:be:1c:90:fb:1c:55:30:46:85:67:42:28:f0:a5:
                    aa:77:5e:57:ff:6a:90:16:e3:a9:a4:69:6c:17:dd:
                    53:99:a4:0c:9b:4e:ef:79:13:4b:f6:5f:ad:f5:09:
                    3f:05:8d:a2:be:4c:9c:15:4c:d0:dc:3b:0d:85:ba:
                    1f:d8:7e:e0:ec:11:fd:82:13:71:7d:b2:0d:de:d9:
                    99:9c:ae:1f:44:bd:73:1d:13:36:c5:bb:10:75:2e:
                    43:e8:48:95:be:56:da:d8:55:2e:1e:46:3a:f4:30:
                    24:13:13:3e:b8:5c:86:6b:7f:6d:73:f4:0c:d9:47:
                    a2:94:89:1c:2b:8b:09:0b:61:c2:02:e0:5c:d9:b5:
                    1a:87:f3:9e:d9:6a:6a:66:aa:5b:28:d0:cc:92:bb:
                    44:5b:ff:06:78:f0:aa:fb:bc:47:fc:a7:9b:6d:75:
                    aa:c3:1f:b8:32:3f:27:3a:f9:d9:27:80:7c:d4:96:
                    81:5d:dd:3c:61:8e:63:bd:db:08:c6:bd:23:1a:ed:
                    16:a5:e2:09:7e:50:f7:66:c9:44:c4:97:86:cf:c8:
                    f4:a9:49:7c:55:45:b8:78:8a:0f:1d:84:b2:7d:bd:
                    d9:41:7d:c1:08:b3:32:db:3d:a6:2f:f0:32:09:bb:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:0C:45:1C:E2:92:78:03:DC:92:C8:99:49:16:EB:81:4E:77:B0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zS4MRRzikngD3JLImUkW64FOd7A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:08:af:f5:e2:67:4f:92:34:75:3c:c4:93:15:5e:a9:7c:21:
         96:db:1e:07:da:be:56:5e:5b:4a:24:c1:32:96:85:e8:cd:98:
         e5:25:16:22:4b:28:a3:b2:5e:05:b9:83:65:68:24:00:2d:43:
         e7:2b:ab:e1:d2:63:3a:d6:e9:df:34:bf:8a:2e:da:75:35:64:
         14:e1:7a:3b:90:55:a9:ad:af:0a:69:45:1d:9b:da:18:e6:d2:
         12:e7:62:90:f5:85:8a:d1:af:fc:65:77:68:b1:a4:51:5d:69:
         55:ec:c2:40:e9:93:9a:76:b8:4d:4c:c5:39:6f:cb:68:88:d8:
         69:40:91:c2:37:c6:8f:92:d3:f9:20:04:e0:27:9b:e8:a5:41:
         85:9a:73:7f:68:d4:4a:80:6f:4d:d5:02:cf:48:82:41:7a:88:
         55:97:c4:5e:e0:ba:ae:c3:bf:1e:bf:f8:3a:4d:0f:db:5e:d6:
         23:fc:a6:0a:d2:b0:0a:e1:22:4a:58:76:7a:f2:c7:77:2d:5d:
         de:54:4d:0c:f0:f7:ea:e4:36:3d:49:18:32:38:de:3f:a8:52:
         0d:f0:44:33:c4:05:6c:a7:4f:59:7b:b8:25:47:db:1d:c7:76:
         d9:ec:4d:f1:55:33:44:a7:35:a5:38:64:93:d0:33:37:6c:a0:
         f0:9d:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:51 2025 by rpki-client