Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/9xPjZCMaP_otLJnRv-yrVMitirM.roa
File:                     9xPjZCMaP_otLJnRv-yrVMitirM.roa (raw, json)
Hash identifier:          dm9z+n5D1YXWJTRGutuXANg29hy3223Eb+8OepsYLCw=
Subject key identifier:   F7:13:E3:64:23:1A:3F:FA:2D:2C:99:D1:BF:EC:AB:54:C8:AD:8A:B3
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       0B
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/9xPjZCMaP_otLJnRv-yrVMitirM.roa
Signing time:             Thu 20 Oct 2022 06:22:22 +0000
ROA not before:           Thu 20 Oct 2022 06:22:22 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        124.108.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:22:22 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=F713E364231A3FFA2D2C99D1BFECAB54C8AD8AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:2b:73:49:13:9e:3c:40:ea:69:16:cf:c3:
                    af:d7:86:16:88:97:2a:9b:e5:44:77:52:96:44:97:
                    37:73:e9:16:33:6b:e9:ae:ba:ca:48:9d:90:19:0e:
                    da:4d:56:3e:cf:a1:cc:c2:60:32:ec:8d:a8:bc:44:
                    d8:ce:9b:29:a9:ac:ee:55:94:3f:61:b2:53:12:55:
                    90:aa:c9:85:89:ca:92:3c:74:96:9f:7d:43:19:68:
                    3d:45:8a:25:1f:09:2f:e0:f1:29:d4:1b:33:f3:ac:
                    1e:6a:15:52:ff:72:12:18:22:7f:a3:41:d0:5b:d9:
                    d2:01:8c:9a:f2:77:35:62:fd:a6:12:a8:2b:4d:72:
                    94:e1:02:21:e7:cb:a5:22:55:18:2f:6d:44:78:ba:
                    96:cf:38:30:23:f7:d8:63:91:f6:de:57:4d:32:13:
                    ef:e9:11:55:0a:55:46:f6:cc:12:1c:7e:85:2c:d3:
                    d4:8c:91:22:fe:f0:ae:4d:76:54:95:8b:0e:03:ed:
                    96:28:d4:da:58:7a:65:b7:58:b8:b5:a7:b9:dc:d2:
                    24:5a:50:e5:0f:a4:e8:5e:3c:6a:00:32:0b:46:92:
                    14:5e:2d:0a:78:80:f9:64:37:29:47:39:b9:b0:bc:
                    65:cc:d1:e5:9a:8e:fd:04:10:19:64:8b:2e:05:4b:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:E3:64:23:1A:3F:FA:2D:2C:99:D1:BF:EC:AB:54:C8:AD:8A:B3
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/9xPjZCMaP_otLJnRv-yrVMitirM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:d0:72:7c:55:a4:77:d5:b3:e1:c2:a4:20:70:fc:a5:90:
         30:ed:a3:46:39:a8:a0:e6:80:84:b3:00:b3:6e:0e:a3:51:e1:
         d1:f3:2e:b5:7d:06:4d:fc:03:a5:a0:7a:01:8f:52:53:2f:ec:
         36:d2:cc:97:21:66:ba:ed:79:14:9a:a1:88:62:ee:0b:23:da:
         d8:ff:b1:af:78:a9:af:12:a1:d3:c0:6e:70:79:e8:af:fc:67:
         a1:8d:59:bc:91:49:7c:b2:76:9e:7d:35:f8:20:4c:6e:27:69:
         ad:58:b4:2d:25:be:1a:6f:47:01:03:d8:41:6a:34:8f:c8:87:
         18:d3:c4:66:e8:12:6e:4e:15:59:e8:92:63:5f:75:69:14:14:
         05:09:4f:08:9d:e7:ca:03:5c:18:b8:87:a1:5b:5b:a8:9f:35:
         62:c2:bf:78:76:c9:25:c5:31:c3:56:e7:9f:e3:20:ad:78:cc:
         1d:20:f7:8b:9e:d9:fa:b3:21:c2:7b:8a:42:b3:30:a9:2a:9b:
         e9:91:da:b9:9e:b2:9a:1f:d7:b7:a0:79:a9:22:26:98:91:e6:
         f7:18:7f:40:1d:70:dd:ef:db:dc:ea:d5:0d:b7:aa:13:76:d4:
         c5:6f:81:19:ac:6a:e6:f7:b9:8c:8b:3e:f1:f3:cc:ff:0c:53:
         a8:aa:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:19 2025 by rpki-client