Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/1z_JdJfynWdCjxOnVQlEXTVhhkA.roa
File:                     1z_JdJfynWdCjxOnVQlEXTVhhkA.roa (raw, json)
Hash identifier:          jnxSbyKAy6xWyIsd5PfakyYE7yRfXikxeObu2/NcqYE=
Subject key identifier:   D7:3F:C9:74:97:F2:9D:67:42:8F:13:A7:55:09:44:5D:35:61:86:40
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       7F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1z_JdJfynWdCjxOnVQlEXTVhhkA.roa
Signing time:             Tue 01 Feb 2022 01:31:13 +0000
ROA not before:           Tue 01 Feb 2022 01:31:13 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        124.219.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:13 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=D73FC97497F29D67428F13A75509445D35618640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:16:1a:86:2c:8c:a0:82:dd:c8:c2:df:85:
                    3c:a6:1c:2e:60:da:c8:25:b4:73:40:68:db:a4:88:
                    e2:76:26:34:33:2b:14:66:77:0f:11:c5:65:d8:20:
                    01:14:84:57:d2:57:7f:37:a7:8b:bb:80:b7:df:45:
                    74:d9:73:88:32:84:01:04:c5:0d:33:83:7e:95:66:
                    b9:34:40:61:25:fc:12:61:6f:20:9c:db:47:68:93:
                    a7:a4:2d:b8:48:63:21:70:7e:00:91:20:cb:82:32:
                    3c:93:60:63:3a:86:53:70:f2:91:e2:d9:88:7d:c5:
                    e7:31:74:ff:93:28:35:44:21:60:06:20:2c:48:27:
                    fa:dd:b4:2b:d6:31:9e:b8:26:b5:5f:f0:44:91:c2:
                    22:e7:35:fd:ca:63:f2:29:ff:de:ca:5c:64:96:e1:
                    bd:8d:c2:b7:14:6b:58:61:0c:1c:6b:6f:41:72:12:
                    45:06:77:97:ae:c5:7e:d1:06:9c:ae:b8:10:05:f7:
                    81:2d:1b:1f:15:45:30:76:ab:8d:0b:25:dc:65:fe:
                    34:ab:7e:7c:85:bb:cf:ea:e0:ec:0a:04:1b:6c:9c:
                    7f:e4:16:b0:7b:83:27:f3:cf:08:c8:ef:f6:c2:97:
                    83:c6:19:fe:94:27:5a:0e:4f:27:2a:42:24:67:d7:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3F:C9:74:97:F2:9D:67:42:8F:13:A7:55:09:44:5D:35:61:86:40
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1z_JdJfynWdCjxOnVQlEXTVhhkA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.219.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         96:65:71:db:17:54:b3:66:3e:dc:fc:1c:d6:67:ba:cf:19:00:
         44:3e:5f:08:4e:b6:b1:25:92:b4:20:eb:df:10:3d:22:0b:15:
         45:bd:27:38:e5:f7:fc:d2:94:d0:1c:72:90:05:ef:46:ea:12:
         b2:72:a1:bc:04:83:0d:d4:fa:0e:ee:67:86:6f:3b:b7:db:6d:
         f8:31:ef:05:b4:b6:7d:8a:3c:14:5d:39:69:c5:26:62:f0:32:
         b5:bd:46:74:bd:27:b7:d1:bd:49:21:8b:a1:42:22:bd:d0:5d:
         46:14:76:01:b8:7c:34:03:be:83:9d:d4:c8:b9:39:a8:2d:28:
         d8:05:04:8b:df:5b:85:cd:20:84:e6:c6:b8:12:49:d1:41:78:
         8a:ff:ec:46:c6:53:0d:1d:8c:0c:75:ad:a9:0e:1d:46:d0:3a:
         48:13:d3:6b:d5:76:8c:59:30:33:97:3f:8f:04:6c:82:2b:9f:
         c7:d1:17:7f:b2:00:61:4f:a3:9c:b1:b7:1f:0f:89:39:7c:e5:
         3b:2e:1b:6f:98:09:71:99:54:de:07:f2:af:33:41:6f:17:f4:
         aa:91:ec:61:12:74:98:5c:5a:4d:01:fc:e3:59:72:3f:2f:14:
         d3:b7:b0:16:26:9c:99:71:b2:20:94:e0:b9:37:8e:12:05:d7:
         62:c2:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:33 2025 by rpki-client