Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/hI2PtGgCm6ZikGp3cou_0JDQqEE.roa
File:                     hI2PtGgCm6ZikGp3cou_0JDQqEE.roa (raw, json)
Hash identifier:          vG/cEJ/KFaHIB8Cz53FsK5L6nfZ4+VZMLJWp3jj2qC0=
Subject key identifier:   84:8D:8F:B4:68:02:9B:A6:62:90:6A:77:72:8B:BF:D0:90:D0:A8:41
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       0D
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/hI2PtGgCm6ZikGp3cou_0JDQqEE.roa
Signing time:             Thu 20 Oct 2022 06:22:22 +0000
ROA not before:           Thu 20 Oct 2022 06:22:22 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        180.189.128.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:22:22 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=848D8FB468029BA662906A77728BBFD090D0A841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:08:2b:6a:79:1a:8e:3c:d6:67:b5:fd:43:
                    c0:1a:a3:0e:5b:d1:86:e3:c3:4c:ea:e8:5f:d7:27:
                    47:43:73:1e:a0:e1:67:77:fa:5b:ef:2d:2d:fb:59:
                    aa:ad:85:1a:a7:b6:1a:25:ca:31:45:b4:48:2a:0f:
                    f2:30:b9:b7:f3:45:0c:a1:7e:b5:7d:4e:53:b5:0c:
                    04:ea:1e:34:41:1d:e2:65:e9:05:65:d0:27:65:41:
                    e7:d7:81:3f:15:f1:9f:eb:35:78:61:12:ec:5f:3f:
                    d2:69:8e:a2:e9:f0:c8:75:ee:bf:cc:6a:2e:9b:22:
                    0f:dc:fe:53:4b:53:e5:76:b2:a9:fb:da:4c:cc:8a:
                    ff:fc:07:07:4f:43:8a:ac:78:8d:a2:4e:dd:59:9b:
                    1e:01:ac:a8:b2:0a:e2:e3:eb:37:8c:6c:e5:c1:fe:
                    8f:36:47:29:44:70:f2:0f:a4:a7:e6:cf:2e:1b:5f:
                    b0:4b:6e:f3:52:27:95:b1:f7:66:ef:c6:cb:d9:6f:
                    cb:de:18:d1:60:00:0c:fa:6a:be:89:3d:20:c9:05:
                    af:7a:8c:61:59:f3:cf:94:15:b8:33:48:54:9a:7e:
                    cd:f8:4c:3d:88:4a:a7:bf:62:8d:64:50:eb:b9:f8:
                    b2:20:16:72:8c:04:4d:61:78:2f:7d:f8:ab:58:dc:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8D:8F:B4:68:02:9B:A6:62:90:6A:77:72:8B:BF:D0:90:D0:A8:41
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/hI2PtGgCm6ZikGp3cou_0JDQqEE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.189.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:54:5c:04:12:92:e6:64:2c:42:5e:d7:d6:68:b6:03:94:
         06:51:cb:0f:ef:09:09:8f:86:13:36:3f:11:7d:e9:8c:cc:f0:
         3c:5f:50:8b:a4:1c:a8:5d:2d:9f:46:33:cd:c6:a1:4a:11:64:
         25:32:cd:f2:bc:d0:2a:bc:c6:d2:03:7a:96:a4:9a:3d:b9:bd:
         4e:72:e0:35:17:e3:10:63:72:e5:bc:b8:43:3a:95:bf:72:1f:
         8a:de:dd:cc:27:14:13:78:01:25:f1:8c:9b:dc:2e:2e:34:75:
         f7:a0:b5:3e:9d:32:15:00:3d:98:63:de:8f:e6:85:83:d9:b5:
         df:d0:31:75:50:34:61:c5:d1:b0:31:af:ec:ac:0c:5f:5c:de:
         f8:72:f9:47:cc:09:77:c6:60:d2:ca:c8:9b:bb:c0:09:d4:d5:
         3c:52:1f:94:bc:ad:af:a1:80:87:49:c8:26:b5:7d:af:b3:50:
         91:0b:42:3a:4a:a7:b6:e9:36:aa:6d:4a:55:60:31:3d:51:74:
         09:61:23:9a:db:b4:72:ad:32:6d:31:ce:4d:a3:0b:ec:1a:7c:
         5f:7a:13:60:9a:d7:d1:98:a6:57:14:d3:e4:d6:cf:95:00:c4:
         89:0e:b7:6a:32:1d:d4:de:97:39:3f:85:6e:70:e1:2a:06:fe:
         e1:8c:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:21 2025 by rpki-client