Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7EuuaalFNDClMyBZOjLYZOqUm1g.roa
File:                     7EuuaalFNDClMyBZOjLYZOqUm1g.roa (raw, json)
Hash identifier:          g2PJgYuOdm5ic5grHibMNCYvKYSHMPZdi7W3lemAn9g=
Subject key identifier:   EC:4B:AE:69:A9:45:34:30:A5:33:20:59:3A:32:D8:64:EA:94:9B:58
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       FE
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7EuuaalFNDClMyBZOjLYZOqUm1g.roa
Signing time:             Sat 01 Jan 2022 01:31:14 +0000
ROA not before:           Sat 01 Jan 2022 01:31:14 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.212.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:14 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=EC4BAE69A9453430A53320593A32D864EA949B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:ca:3b:86:3e:03:88:b1:18:8f:86:b7:9e:
                    c5:dd:ef:60:12:71:23:e6:fb:e7:82:64:a6:d8:5b:
                    27:d7:20:db:68:6f:5c:d8:29:0c:0b:1f:3b:93:26:
                    b2:4f:d9:24:7c:b7:29:7a:d8:63:44:f4:23:a4:4b:
                    92:da:fe:44:98:a4:0f:9c:ed:39:f1:1b:8e:1c:09:
                    80:8e:7f:f7:18:55:74:31:f7:60:e5:90:4b:12:44:
                    50:5c:09:b4:c5:75:bf:ab:66:42:40:55:e7:3d:f8:
                    bb:e9:2a:7b:c5:d9:69:12:a3:df:a3:aa:91:57:90:
                    f5:58:37:31:3a:61:42:4c:ad:e6:66:bb:ea:76:69:
                    af:9b:a3:77:b8:f2:5f:ae:9b:8f:3e:3c:a9:93:fb:
                    b5:e0:be:17:06:60:40:8b:06:d3:dc:0c:b6:6c:56:
                    13:36:57:c6:6d:9c:80:ab:c1:ab:d8:e4:d9:e0:03:
                    24:6e:d4:31:50:0d:5b:cc:a6:f2:4e:03:d3:3b:4c:
                    94:c4:5a:b8:68:db:85:a5:e6:1b:5f:ec:53:69:34:
                    44:85:8b:0e:35:b4:76:35:bd:ea:62:4e:8f:44:06:
                    af:e2:80:9e:e5:a4:c6:76:13:31:e8:8a:ad:8d:04:
                    4e:aa:45:da:33:cf:4a:3f:65:3b:47:0d:bb:23:4a:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4B:AE:69:A9:45:34:30:A5:33:20:59:3A:32:D8:64:EA:94:9B:58
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7EuuaalFNDClMyBZOjLYZOqUm1g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:84:4a:e2:bc:ec:04:22:93:09:12:1a:30:ee:be:e0:f8:6b:
         db:e8:0c:21:c5:e8:43:a6:c4:42:76:b6:54:8e:c0:1e:29:66:
         25:03:9e:08:7e:13:83:82:13:38:93:69:23:63:1d:d8:c9:04:
         79:99:60:21:29:e5:95:5a:33:c2:9c:31:21:a9:bf:ef:4a:57:
         dd:ae:d9:27:5e:f7:2f:fe:4b:8e:45:53:cd:02:4a:50:61:f4:
         de:93:8b:71:b7:de:8b:db:80:8b:a3:8a:79:91:5c:38:d4:59:
         3c:b2:3c:ac:23:e1:73:82:49:6c:18:4b:9a:dd:be:5d:fb:84:
         78:75:c0:1c:96:a0:85:da:9e:8f:0c:71:88:24:4e:92:f0:65:
         55:17:6a:55:c8:04:55:5f:ca:bc:15:a0:e0:fc:fd:46:11:80:
         70:9a:0e:4e:37:a9:ea:58:6f:d6:29:8e:8d:38:c7:db:73:c4:
         d5:a0:ba:e3:21:ef:46:a9:23:88:c0:ca:bb:58:e0:4d:a3:2e:
         9e:fe:55:52:e7:48:b9:f9:a8:70:df:f4:6e:87:da:02:b5:68:
         0e:c3:75:69:4a:85:7d:3d:14:c7:34:0e:6d:53:5e:a2:31:54:
         3e:a1:52:e1:7e:32:97:5c:e0:13:52:d3:e9:d2:9f:b5:e6:4f:
         45:c2:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:52 2025 by rpki-client