Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7CTwjori_inPo8Y89hCE_a_IZC8.roa
File:                     7CTwjori_inPo8Y89hCE_a_IZC8.roa (raw, json)
Hash identifier:          5zcLff06WnXcX9zNQFW0m3fnpcb5pg3Qp0i7T/UHTt0=
Subject key identifier:   EC:24:F0:8E:8A:E2:FE:29:CF:A3:C6:3C:F6:10:84:FD:AF:C8:64:2F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       019E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7CTwjori_inPo8Y89hCE_a_IZC8.roa
Signing time:             Tue 01 Aug 2023 01:28:15 +0000
ROA not before:           Tue 01 Aug 2023 01:28:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.9.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=EC24F08E8AE2FE29CFA3C63CF61084FDAFC8642F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:c1:b9:c7:40:79:7e:95:1b:fd:cd:0f:9a:
                    37:1e:c7:82:4a:c9:36:c7:43:a0:54:ad:64:45:43:
                    a2:98:88:da:46:77:26:b1:38:69:bd:6d:89:84:70:
                    95:e0:f7:5b:1c:85:51:45:7c:d9:4c:ea:fe:2f:e1:
                    30:aa:63:29:2e:0a:2f:be:bf:2f:08:df:f1:8a:84:
                    7c:5a:7c:d1:ea:ce:a4:6a:56:ed:b9:33:34:31:2e:
                    5d:5a:c8:43:08:d5:1f:07:14:78:9a:7f:a5:9d:08:
                    db:c6:38:53:76:0c:5f:2a:1e:29:5e:d1:ea:fb:36:
                    c2:45:c7:39:31:33:f6:b1:a4:8d:f8:ba:0b:42:4a:
                    d0:c1:6f:dd:a2:47:59:fb:a1:b2:b9:9a:fd:ca:6f:
                    45:de:bc:d6:35:f4:e1:c7:17:8f:b0:0f:0a:33:ec:
                    81:64:88:42:47:7c:3d:f6:e3:18:8f:df:33:45:a2:
                    4b:73:b1:cc:35:c9:d0:03:8f:c4:60:fe:fa:c8:1b:
                    98:17:45:12:1a:9b:40:41:a5:fb:40:65:60:3f:04:
                    5b:31:de:25:f5:68:ac:33:47:04:de:b9:25:10:c9:
                    f1:39:e2:6a:06:76:a0:3c:3b:1a:64:16:13:ed:11:
                    fb:60:13:95:8a:ee:e5:c4:99:ca:7b:78:57:fd:17:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:24:F0:8E:8A:E2:FE:29:CF:A3:C6:3C:F6:10:84:FD:AF:C8:64:2F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7CTwjori_inPo8Y89hCE_a_IZC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1e:fa:92:4c:bf:dd:81:0f:c5:59:10:27:eb:98:8b:2c:13:
         61:d5:9d:81:9f:eb:f4:a5:0c:1e:23:61:6b:ee:c3:39:f0:f6:
         b0:8c:25:94:b9:b4:c8:9f:f5:31:75:b6:c4:31:1d:3a:b2:97:
         2a:6f:3a:c3:d9:5b:83:bf:0e:0d:cc:58:41:28:7e:64:ab:b0:
         b7:16:1f:21:46:d7:46:41:fc:0d:0d:bf:2a:28:e6:dc:06:80:
         47:c1:ad:0e:a4:7c:75:a2:50:d2:1a:c1:4e:c8:47:5b:dd:e4:
         e6:4b:45:52:c4:13:7a:f3:0b:28:c0:fe:02:de:74:64:7c:19:
         63:16:b3:0e:94:97:80:67:51:4a:26:bf:5e:b7:aa:74:ad:12:
         8d:e6:83:2a:3e:14:8d:3c:4b:ae:e5:eb:93:77:7b:c6:26:69:
         0c:cc:49:30:d0:6a:ff:b7:93:00:18:f4:51:56:3b:3a:d8:b8:
         66:08:1c:32:55:80:e2:72:51:05:d2:2d:0b:ac:85:e3:a1:5c:
         35:34:e9:99:98:c9:06:d2:f8:ef:f0:ed:6a:b4:35:06:63:f3:
         f8:29:46:d1:2d:52:7f:f3:3f:11:f9:0f:e1:62:e3:8b:08:59:
         17:a5:15:4d:3e:3b:8a:41:8b:9f:48:94:d7:e0:88:46:f7:88:
         90:e5:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:15 2025 by rpki-client