Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/T4MttbRIB-omEbv6K4B0m9lOuRA.roa
File:                     T4MttbRIB-omEbv6K4B0m9lOuRA.roa (raw, json)
Hash identifier:          u5TBL0GF51z2Dg62AiBqI65k55NTsV+hG+hekN/9Yg8=
Subject key identifier:   4F:83:2D:B5:B4:48:07:EA:26:11:BB:FA:2B:80:74:9B:D9:4E:B9:10
Certificate issuer:       /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial:       1C
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/T4MttbRIB-omEbv6K4B0m9lOuRA.roa
Signing time:             Tue 28 Dec 2021 11:26:30 +0000
ROA not before:           Tue 28 Dec 2021 11:26:30 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     2515
IP address blocks:        202.12.30.0/24 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
        Validity
            Not Before: Dec 28 11:26:30 2021 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=4F832DB5B44807EA2611BBFA2B80749BD94EB910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:d2:9c:73:5e:6e:73:c8:15:47:78:2c:81:
                    b4:97:aa:29:ef:b5:fb:89:6d:b7:55:42:cd:f1:5d:
                    cf:64:47:21:f2:27:ac:f9:ea:de:c1:d2:33:39:b1:
                    a0:b8:da:75:cb:54:8c:5b:42:96:97:22:ae:9e:2e:
                    da:34:57:96:55:21:a6:89:61:ca:f5:56:20:63:0d:
                    3d:e3:34:04:88:14:15:e1:66:fd:f6:db:28:af:82:
                    21:c4:f6:0a:9a:2d:0b:f2:b1:1f:c9:b5:fd:ba:88:
                    4b:af:b4:ce:69:d5:07:2e:14:3d:9b:04:73:70:ee:
                    27:7c:3d:e8:84:f1:d9:45:c6:36:13:2a:34:45:df:
                    01:aa:13:2a:6c:11:a2:c2:f0:3d:ad:a2:c0:6c:0b:
                    6e:51:58:f8:97:4b:ec:b6:c9:d6:b9:67:cb:22:cd:
                    c2:38:dd:20:a6:f2:89:ba:6d:9e:a3:0e:d2:5f:d6:
                    7b:23:23:64:80:d8:78:c4:58:08:58:22:0a:0a:e5:
                    4c:81:42:54:9f:64:24:56:e4:d6:2c:9a:f4:54:5f:
                    f6:8a:c8:d6:a0:ee:05:d4:f1:f3:cb:83:0b:9b:70:
                    74:5b:e2:85:04:5e:fa:a7:f4:59:ea:ff:3c:4f:1d:
                    3e:80:49:a9:36:9f:b9:5a:ae:ef:ab:1f:63:37:f9:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:83:2D:B5:B4:48:07:EA:26:11:BB:FA:2B:80:74:9B:D9:4E:B9:10
            X509v3 Authority Key Identifier:
                keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/T4MttbRIB-omEbv6K4B0m9lOuRA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:c1:a4:96:91:09:7d:6f:74:c1:1d:63:22:9b:45:33:50:
         31:38:91:7d:a7:15:8a:20:5b:a3:35:10:8d:8c:d2:a6:ae:7b:
         39:63:c4:6b:11:6e:dd:2e:a8:bd:c2:64:05:46:56:7f:31:e3:
         01:9b:1b:18:d0:df:1d:63:2b:d1:12:25:bf:14:3a:72:d9:33:
         74:3b:ca:d4:32:7c:ef:51:bb:ca:15:b1:f6:b7:63:e0:f7:b8:
         70:c7:37:a3:63:c0:19:7b:eb:0f:92:23:31:a1:b6:f3:a9:eb:
         31:9f:ab:b1:90:36:c5:fd:eb:c1:72:f2:0e:ae:83:b5:ae:32:
         69:db:4a:a8:f1:0c:20:9e:29:af:8a:e0:1b:c0:87:29:42:86:
         f9:c7:b9:61:89:e4:66:d6:3c:c7:90:b9:a2:87:60:5d:c1:9b:
         9a:46:1e:55:23:76:93:f9:53:08:95:aa:1a:7d:7d:28:94:3c:
         64:3d:71:8e:d2:ff:a7:73:68:c6:9c:cb:ea:ba:b8:d2:e7:0a:
         10:06:5a:f5:35:2d:b7:60:25:ee:dd:79:c6:9f:f9:4a:38:7a:
         ad:07:14:29:2d:75:52:9a:94:fc:99:75:01:ca:b6:00:df:33:
         0e:b4:5b:9f:45:b5:65:f4:f9:01:8c:bc:04:f2:29:bf:a4:cd:
         8f:16:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:37 2025 by rpki-client