Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WbFWIJY8-NlJMa42PLWQVSwaQD0.roa
File:                     WbFWIJY8-NlJMa42PLWQVSwaQD0.roa (raw, json)
Hash identifier:          O4PTqdUw2SGqjEvrcGMUsQ4IYRg389r/UiDYwi6J6nU=
Subject key identifier:   59:B1:56:20:96:3C:F8:D9:49:31:AE:36:3C:B5:90:55:2C:1A:40:3D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0172
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WbFWIJY8-NlJMa42PLWQVSwaQD0.roa
Signing time:             Thu 01 Dec 2022 01:28:30 +0000
ROA not before:           Thu 01 Dec 2022 01:28:30 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.73.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:30 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=59B15620963CF8D94931AE363CB590552C1A403D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:15:28:19:de:99:bb:a9:c0:81:eb:24:97:
                    b9:9e:18:38:96:16:63:0b:61:bb:ca:c5:00:1f:d1:
                    68:57:ef:49:14:85:1a:7e:d3:b9:ad:b2:e8:05:70:
                    f0:7c:c1:d5:70:b6:75:f9:11:22:b9:06:74:a2:49:
                    a3:a9:f5:5e:8a:f6:c5:fe:1d:08:ae:98:d4:cb:42:
                    32:9c:2d:e5:34:63:91:56:56:a6:a2:4b:29:57:5c:
                    dc:6a:55:e3:1e:b6:00:e7:0e:7a:3d:20:5d:fd:b1:
                    5a:c6:d9:a4:2e:f0:a9:0b:56:d9:09:71:77:71:89:
                    50:95:dc:3d:88:bf:41:0a:76:02:c1:84:90:1d:02:
                    f1:36:e3:bb:92:3b:c8:1e:09:0b:6f:27:aa:10:22:
                    9c:6f:9d:c1:f3:3d:f4:dd:c2:2b:ab:87:0c:2b:8c:
                    45:4c:c7:ea:ae:03:42:92:f1:5b:8f:81:0d:a6:18:
                    cc:24:cf:b2:84:03:36:93:37:ee:b4:d5:0b:7c:20:
                    c2:ba:85:38:46:d8:e8:60:ab:a4:0f:b1:bf:a9:aa:
                    24:96:09:0c:29:38:f3:51:de:af:c5:70:b9:a3:0b:
                    f1:c8:be:31:7f:a9:57:58:3c:0d:b3:47:41:7b:fb:
                    c2:63:ff:ca:42:57:ea:50:12:a4:93:ab:6d:66:c5:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:56:20:96:3C:F8:D9:49:31:AE:36:3C:B5:90:55:2C:1A:40:3D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WbFWIJY8-NlJMa42PLWQVSwaQD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:26:26:e1:7d:dd:2b:fa:dd:4b:1e:57:8e:0a:b8:ea:c3:d8:
         6c:81:0b:3f:eb:c3:5e:96:60:be:9a:7b:cb:44:68:e5:c3:e3:
         43:57:72:5e:49:e6:de:1e:42:03:44:ba:0e:e6:92:96:8b:6b:
         5e:67:e3:b6:1b:80:ce:87:51:8f:d5:cb:88:fb:a7:49:e7:bc:
         df:14:9e:c4:18:56:fb:c4:70:5f:fc:e8:23:5c:18:4f:79:6b:
         c8:6a:76:a6:4a:f8:58:4f:13:44:3a:56:55:6e:df:7d:56:7b:
         ce:bf:6f:36:2f:ae:6a:11:99:86:13:85:b7:ed:32:02:a1:3f:
         a2:05:5b:30:76:bc:c7:be:31:d2:82:bf:46:13:d5:65:b2:9a:
         c9:61:b8:a6:40:9f:e4:02:6b:8d:b7:12:6a:99:ed:38:aa:b3:
         b3:f5:a5:82:91:5f:51:fa:58:e4:68:2d:83:69:78:4d:eb:5b:
         26:b5:70:d5:4b:e6:d9:8c:a1:16:be:b1:b3:d1:2a:1a:ee:9d:
         4b:6b:7e:c1:5c:64:e4:8b:1a:a2:04:2a:a1:5e:d1:dd:48:f5:
         be:cd:35:f5:ee:5d:e5:6d:3d:d8:2c:ab:e9:f6:b3:5a:13:5b:
         f7:3d:7e:04:08:04:84:24:44:2b:d9:d9:95:5d:62:dc:c3:f7:
         cb:44:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:21 2025 by rpki-client