Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TkGzmrh7kcFy5UGXsEAdVRX57NQ.roa
File:                     TkGzmrh7kcFy5UGXsEAdVRX57NQ.roa (raw, json)
Hash identifier:          7KjBoJq4kF2eWWzCVgQKRuxEiMtuCK/HpgVHhwShQG8=
Subject key identifier:   4E:41:B3:9A:B8:7B:91:C1:72:E5:41:97:B0:40:1D:55:15:F9:EC:D4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0144
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TkGzmrh7kcFy5UGXsEAdVRX57NQ.roa
Signing time:             Thu 01 Sep 2022 01:28:29 +0000
ROA not before:           Thu 01 Sep 2022 01:28:29 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.12.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:29 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=4E41B39AB87B91C172E54197B0401D5515F9ECD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:68:41:01:21:2f:3c:0d:2b:ab:26:69:d5:
                    0e:73:76:37:2e:fe:c9:8c:f3:e1:62:13:42:7b:8f:
                    0a:13:c4:b1:f7:ff:25:f1:6d:f7:5f:7e:07:21:56:
                    34:50:31:88:28:f7:2c:15:13:64:ec:b0:88:b8:4b:
                    a0:75:34:8f:c5:8a:d0:05:45:a1:3f:fc:4c:d7:78:
                    08:a8:4e:26:02:fb:55:03:75:de:e9:00:d0:50:3e:
                    6a:f3:82:c1:26:2f:68:92:ff:c9:f9:9d:57:2e:17:
                    e4:6d:dc:ba:7a:a2:3e:f2:4b:d3:af:af:fe:e2:5e:
                    ec:7e:e3:9c:8a:ee:51:3e:43:24:ca:73:d0:21:8a:
                    29:74:41:8e:0b:92:34:34:89:36:42:02:1d:b9:3e:
                    70:c3:ae:55:0c:68:ad:f7:04:42:52:e5:c8:f9:df:
                    c9:2b:ae:b2:b6:a6:27:49:61:7c:26:40:bc:71:21:
                    65:b2:9b:d4:6f:3b:34:95:4a:cb:36:59:56:ca:53:
                    18:06:78:66:c5:18:23:18:89:86:13:06:c7:74:d5:
                    c8:15:d5:3f:34:2a:8a:f9:5b:50:9f:81:47:ca:9d:
                    49:f5:48:bf:c0:f6:e1:17:2f:a2:44:53:da:68:78:
                    b2:0d:6b:64:8d:9a:36:de:eb:1b:30:8d:34:ae:d0:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:41:B3:9A:B8:7B:91:C1:72:E5:41:97:B0:40:1D:55:15:F9:EC:D4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TkGzmrh7kcFy5UGXsEAdVRX57NQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:8d:e0:23:3c:18:ac:96:0b:96:f6:f7:b5:4a:59:64:28:
         5f:8a:b4:41:e5:81:95:15:fd:c3:76:0f:07:31:57:c8:69:85:
         27:75:4b:e0:d0:46:27:0d:fd:47:1d:27:32:7b:49:f2:7b:a2:
         ba:13:ed:54:5d:b3:f9:d1:74:d4:16:d7:7e:09:fb:aa:1e:54:
         44:3f:a3:00:84:c8:82:43:cf:b6:d6:51:36:fc:9d:df:43:7d:
         bc:a0:cc:58:46:50:be:e5:56:84:93:dd:c0:ed:6a:5b:f8:42:
         da:af:56:11:3c:6d:75:0b:f5:d1:5f:c8:f5:c8:52:c7:ed:d4:
         11:dc:79:d7:2d:8f:12:25:3b:e3:9f:62:8b:0d:5c:65:3a:6b:
         e3:d0:78:4d:f3:26:36:b6:2e:c4:a3:23:eb:12:50:a0:ab:c9:
         8c:65:29:2e:0b:bc:b2:99:fb:8c:19:18:5b:30:7a:c6:f7:5b:
         ad:d8:74:64:8d:d9:33:52:75:fa:d1:85:2a:c7:ac:18:55:29:
         b9:9d:cb:07:5e:ca:07:aa:a6:60:15:3e:b9:f5:ff:0b:44:8e:
         fa:c2:da:0e:0e:ed:32:1e:45:5b:65:e4:6e:d2:2c:94:a3:83:
         d1:69:e7:66:9d:3b:64:d5:cb:fe:0e:d8:f2:b6:79:d4:47:b1:
         b0:a3:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:40 2025 by rpki-client