Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2j8DwScMnWvUayS3yiftj2cA6MA.roa
File:                     2j8DwScMnWvUayS3yiftj2cA6MA.roa (raw, json)
Hash identifier:          IuY42k37Qo6L6DhaKNthFV7FN6txjFDA6gXXtAKCR9A=
Subject key identifier:   DA:3F:03:C1:27:0C:9D:6B:D4:6B:24:B7:CA:27:ED:8F:67:00:E8:C0
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0162
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2j8DwScMnWvUayS3yiftj2cA6MA.roa
Signing time:             Thu 01 Dec 2022 01:28:26 +0000
ROA not before:           Thu 01 Dec 2022 01:28:26 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.180.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:26 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=DA3F03C1270C9D6BD46B24B7CA27ED8F6700E8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:83:26:05:df:09:92:37:2c:22:6d:09:d4:
                    30:70:d2:41:9c:eb:46:76:60:ef:21:09:e9:c0:2f:
                    5f:67:ee:93:44:62:5e:b8:84:ac:88:00:40:28:5d:
                    79:0f:fc:b0:92:1f:6e:7e:54:07:95:16:9a:9e:0a:
                    dc:bc:50:3e:49:70:6a:2a:80:c7:44:ea:82:32:c5:
                    fb:d1:52:c3:76:bf:4f:14:1e:ee:88:39:cc:34:d0:
                    fb:a7:40:a9:b5:0e:9a:2b:2d:5c:d1:e2:08:97:5f:
                    ab:9f:39:20:b9:f9:b6:42:0b:92:b1:30:29:fc:ee:
                    6b:b9:b0:cf:17:3f:fe:b3:28:a9:e8:ee:2c:5d:c2:
                    1a:9c:53:6f:af:37:33:15:f3:f0:18:6e:0e:57:5e:
                    15:57:2d:00:ec:09:0a:2c:0a:70:0a:e6:11:aa:c2:
                    e9:a7:fe:97:bb:85:cf:f0:7a:83:18:2d:61:8f:dd:
                    9b:40:d6:44:57:3b:9a:ff:ae:94:5c:4f:b5:40:2f:
                    15:32:97:dc:8e:80:f1:06:6a:a3:eb:c8:35:17:ca:
                    4b:4b:41:71:26:dc:7e:17:16:14:2c:a9:31:19:f8:
                    83:29:9d:8f:9d:6b:d9:6d:3c:18:8a:b1:23:fd:44:
                    c8:80:0d:56:02:f7:89:86:91:8e:1c:ff:b0:46:01:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3F:03:C1:27:0C:9D:6B:D4:6B:24:B7:CA:27:ED:8F:67:00:E8:C0
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2j8DwScMnWvUayS3yiftj2cA6MA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:83:f5:38:c8:6c:05:05:29:a2:e7:c3:cc:f1:ef:15:7c:
         9e:26:e7:b8:8f:20:24:c1:13:ed:7e:dd:a0:09:19:8d:1c:78:
         9e:ba:ff:9f:04:04:3a:ab:6b:1d:3f:9e:0d:3b:a9:d6:a5:96:
         39:49:33:90:7b:b5:44:94:c3:b7:fc:13:6e:4b:70:94:0f:d4:
         b5:fd:e1:ec:fe:cd:b6:7e:c5:26:0b:48:cf:26:78:95:4e:df:
         c6:9b:e2:d6:e1:47:d8:bc:5a:18:69:a7:de:a2:42:c5:4f:f4:
         aa:de:05:74:be:a3:f6:31:c4:3d:cc:b2:bb:43:a7:24:8a:97:
         43:62:f3:9d:9f:9f:5c:e5:e4:44:8f:ca:7d:b6:21:03:ce:f2:
         ad:f3:05:20:bf:6b:60:01:ba:36:ca:72:46:94:54:0f:62:3a:
         de:eb:17:34:7f:3b:b0:a7:c3:9e:dc:b7:ad:c3:38:13:fc:83:
         06:89:8c:47:92:c8:26:37:7d:41:19:07:ee:93:80:30:34:d6:
         cb:0b:f7:05:52:71:9d:cc:3a:1a:da:b2:c5:4d:9a:ce:4c:b7:
         d0:dd:6c:e1:6f:c3:7a:88:49:2e:5d:3f:6c:14:e1:3b:25:fe:
         0a:34:5a:fb:01:cd:dc:82:84:66:5e:23:c4:16:67:54:69:ea:
         57:1a:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:49:10 2025 by rpki-client