Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AlnEGhKmAZlMZI4K6Yrfqw5R7kM.roa
File:                     AlnEGhKmAZlMZI4K6Yrfqw5R7kM.roa (raw, json)
Hash identifier:          KoACzGGpvSgEvwYllCxc4+ei2EeXNBdY1S4+ZVVe/mU=
Subject key identifier:   02:59:C4:1A:12:A6:01:99:4C:64:8E:0A:E9:8A:DF:AB:0E:51:EE:43
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0180
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AlnEGhKmAZlMZI4K6Yrfqw5R7kM.roa
Signing time:             Thu 01 Dec 2022 01:28:35 +0000
ROA not before:           Thu 01 Dec 2022 01:28:35 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:35 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=0259C41A12A601994C648E0AE98ADFAB0E51EE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:e7:7d:33:03:1e:e8:d2:5e:36:71:32:8d:
                    9e:e5:76:e4:c0:5c:63:b9:b4:29:7b:ba:bd:96:6f:
                    0e:13:33:d2:bc:54:07:63:19:0d:31:11:bf:d8:07:
                    e8:22:34:91:0c:e5:b8:e7:2f:35:13:6e:d7:d4:e4:
                    0d:cd:b1:1c:a8:14:ac:69:cb:89:c4:e0:43:45:53:
                    30:f3:71:d0:e9:88:7f:e5:10:e8:cd:84:d3:60:e1:
                    e0:5f:44:22:59:70:49:30:17:a9:59:0b:35:d8:df:
                    1a:4a:c1:ac:ef:19:82:59:ce:4e:f8:10:3a:f6:6a:
                    51:8a:b1:f8:ec:85:07:46:90:7a:a4:af:01:28:bd:
                    dd:67:6b:12:00:5a:b0:55:e0:dd:ef:41:56:ee:f6:
                    2f:76:c9:fd:8c:c8:95:9d:35:20:eb:3a:98:cc:a7:
                    ab:fb:02:ab:5b:d3:53:80:bc:b6:c6:5f:b5:45:72:
                    a5:23:9f:89:f9:26:59:91:a3:a5:86:ee:2d:bb:a9:
                    bc:98:fe:29:30:f4:33:72:3d:24:ba:8d:a1:9e:e0:
                    21:46:48:5d:25:8e:95:18:67:d9:57:20:6d:de:98:
                    9e:8c:ca:af:75:73:96:53:e6:0b:a6:78:5f:82:b3:
                    17:3d:32:e2:43:76:3d:2b:06:6f:7c:0d:9f:80:65:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:59:C4:1A:12:A6:01:99:4C:64:8E:0A:E9:8A:DF:AB:0E:51:EE:43
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AlnEGhKmAZlMZI4K6Yrfqw5R7kM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:ca:eb:d1:2a:3c:d1:0d:05:54:d8:73:84:a5:3b:a9:0d:
         de:f7:7f:a5:2f:40:ce:15:9c:aa:6c:53:17:5b:2b:d2:3f:40:
         8c:75:2b:7f:ec:98:5c:2d:94:bb:20:c6:65:42:d8:eb:70:eb:
         d5:b6:e4:e0:de:ae:5f:84:48:40:23:d6:16:84:14:ca:b3:a5:
         a0:f8:9e:3d:16:9f:f2:17:25:8d:5e:c3:2d:bb:e8:c6:0c:35:
         34:88:2b:16:8e:1c:9f:80:c0:c9:5e:44:d7:90:0e:32:ad:cf:
         9f:82:5f:9a:d6:5b:b9:31:1b:0d:32:85:1f:d6:da:df:b7:ca:
         6b:aa:39:28:2e:a5:3f:ee:3a:9a:94:12:87:bd:af:eb:ac:a7:
         21:d9:f6:24:8a:8f:1b:33:ec:11:0e:fb:12:98:c2:cc:2e:39:
         45:3b:dd:db:4f:df:9e:2e:54:b6:57:20:28:3f:c1:1a:d3:c6:
         af:ae:40:11:0d:fe:91:89:47:43:2c:86:fa:70:0d:f9:5d:7d:
         4e:57:a3:2d:2f:7d:95:55:9c:0c:c8:4c:4f:fc:e7:cb:61:7b:
         ae:ae:3e:52:8c:82:38:a0:88:3d:b1:eb:c4:80:80:7c:a0:c0:
         7c:3e:1e:f8:8c:9a:bc:ab:1d:d5:78:e2:e8:3a:86:61:03:97:
         09:05:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:02 2025 by rpki-client