Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/2TK_hjeSoWHOXMulKBZPjeOBkmk.roa
File:                     2TK_hjeSoWHOXMulKBZPjeOBkmk.roa (raw, json)
Hash identifier:          01JNUWbAcXdCCYyQ/EiA4T/WrpDGeZhEkagPxwjp1cI=
Subject key identifier:   D9:32:BF:86:37:92:A1:61:CE:5C:CB:A5:28:16:4F:8D:E3:81:92:69
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       37
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/2TK_hjeSoWHOXMulKBZPjeOBkmk.roa
Signing time:             Wed 01 Feb 2023 01:29:35 +0000
ROA not before:           Wed 01 Feb 2023 01:29:35 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        219.100.68.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Feb  1 01:29:35 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=D932BF863792A161CE5CCBA528164F8DE3819269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:9d:1b:9f:83:48:6e:91:74:4c:05:a5:72:
                    c2:e8:d5:cc:7c:ae:72:07:1a:8b:22:36:7e:be:64:
                    39:4b:e8:38:9f:12:e8:e6:ba:d9:da:f9:76:a5:31:
                    d9:7f:16:90:42:47:0f:9f:57:d0:57:24:48:bd:bc:
                    bf:03:0e:49:18:30:a0:b3:12:73:1d:71:80:47:0a:
                    9d:c0:1e:a4:92:0d:ae:65:9d:a3:e8:34:d4:66:36:
                    00:f1:ad:c9:22:de:12:90:29:ad:45:df:b1:b3:81:
                    47:c4:52:24:6d:b9:63:91:52:d3:d9:da:d3:3d:60:
                    48:fc:1e:9f:f7:04:3f:7b:0f:8e:84:cd:24:75:9a:
                    3c:1b:6d:26:b8:df:31:2e:24:e5:5e:e1:e6:d8:c0:
                    e6:e9:f1:69:6a:a4:b5:d7:52:fa:a9:da:c9:48:9b:
                    90:5c:a5:d2:00:de:cb:85:4e:d5:e8:a5:84:66:c5:
                    cf:4e:53:41:0a:67:57:73:4b:76:50:74:fe:9e:b8:
                    86:59:5f:1f:60:d5:99:70:fd:8f:67:5a:70:25:59:
                    c2:7e:2d:08:6a:af:03:00:38:96:b7:59:80:0f:24:
                    9a:a5:f4:ab:bc:a1:85:a4:c7:43:9e:3e:ec:91:cb:
                    5f:d8:3f:01:fb:bb:5f:35:00:3b:4b:d0:4f:82:dc:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:32:BF:86:37:92:A1:61:CE:5C:CB:A5:28:16:4F:8D:E3:81:92:69
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/2TK_hjeSoWHOXMulKBZPjeOBkmk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:1e:3d:2b:27:a5:ae:b3:14:81:7e:7f:8f:c2:00:f8:35:39:
         9e:e0:11:e2:92:48:97:81:63:33:da:af:30:86:35:49:0c:6d:
         3b:39:2e:08:78:f3:c1:cb:c3:ce:92:7a:d6:c3:7d:c6:96:6c:
         57:9a:47:79:f0:bf:08:f4:3d:e6:3e:8b:a9:2b:5f:28:0b:09:
         0c:f8:7c:8d:87:af:2e:34:e6:6c:ee:a6:ce:27:28:81:1e:c4:
         37:3e:ae:8f:1a:c3:81:a5:bb:bf:9f:40:7c:bc:f0:74:a3:03:
         e1:90:8e:e2:59:5b:0f:41:31:4c:82:9a:aa:71:55:8f:a2:9d:
         74:1f:f1:5b:f4:b5:85:8f:95:8d:89:9f:8b:19:df:65:85:82:
         ad:2d:b4:bf:08:b7:39:35:b9:43:44:ee:c3:a2:26:a9:e5:e2:
         a8:ec:58:78:ef:80:5d:a3:d8:65:30:ec:b3:4b:12:68:ea:5e:
         17:8e:50:e9:c2:1b:4e:7c:6b:ad:af:f5:2d:66:43:e0:9d:f3:
         c2:e1:b2:c5:78:28:d6:9e:43:34:9f:8f:66:90:be:9a:18:f4:
         a2:ec:da:a9:05:89:ac:e5:0e:28:65:dc:f8:6c:a0:f6:b7:dc:
         ae:b1:b2:1b:65:fa:98:d3:20:a9:6b:ca:b1:28:16:57:b3:bd:
         c5:2f:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:10 2025 by rpki-client