Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BBpqUN6hcShztmpWYNogrdoWTN0.roa
File:                     BBpqUN6hcShztmpWYNogrdoWTN0.roa (raw, json)
Hash identifier:          l4wbU0LNSrunr72af5GFTVkv+SQpOZ6aybEK0Eth3n8=
Subject key identifier:   04:1A:6A:50:DE:A1:71:28:73:B6:6A:56:60:DA:20:AD:DA:16:4C:DD
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0167
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BBpqUN6hcShztmpWYNogrdoWTN0.roa
Signing time:             Thu 01 Dec 2022 01:28:27 +0000
ROA not before:           Thu 01 Dec 2022 01:28:27 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        219.94.227.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:27 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=041A6A50DEA1712873B66A5660DA20ADDA164CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:fa:19:d7:3b:20:4a:e7:ed:74:a1:dd:55:
                    8d:86:1c:de:e8:43:49:db:87:af:8b:0e:2e:dd:85:
                    cb:28:02:b2:ae:fb:2b:ca:51:ef:61:1d:f3:05:bf:
                    f1:3a:be:34:66:f2:7c:d4:bc:d0:39:4e:02:5a:8c:
                    f7:b1:30:90:74:f8:6f:ab:cd:31:72:9d:71:c2:a8:
                    7b:b7:98:c6:18:ad:94:77:c4:25:de:e2:03:6e:1f:
                    43:a3:86:bf:46:a6:d3:b2:60:7a:3a:a1:2b:3f:51:
                    b8:9a:3f:83:6b:05:0a:8f:d6:dc:aa:ea:c4:0e:04:
                    c6:4e:17:12:24:80:3e:77:64:76:5a:09:73:06:eb:
                    68:a4:03:22:ec:c8:31:11:86:48:2d:54:3b:45:08:
                    03:ac:ac:53:69:65:98:56:43:4d:9b:33:f4:a9:f9:
                    27:7b:df:01:23:ea:90:ff:2b:0e:06:54:ea:76:92:
                    bc:30:5a:3c:e0:f5:01:ac:b6:2d:0a:28:f0:d8:b7:
                    f0:8b:e4:50:6a:53:45:ea:13:67:c0:d8:88:fa:aa:
                    25:34:fe:bc:5f:50:27:c9:05:5c:76:9d:f5:37:42:
                    9d:74:87:e1:22:d5:ae:7c:e2:09:2e:14:99:7e:58:
                    c5:0d:da:b2:78:85:5d:96:f8:0f:4b:f6:11:38:dd:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:6A:50:DE:A1:71:28:73:B6:6A:56:60:DA:20:AD:DA:16:4C:DD
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BBpqUN6hcShztmpWYNogrdoWTN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:21:57:8a:b1:e5:4d:74:b5:ac:b8:59:fa:35:33:17:2e:85:
         a6:26:b9:a3:f1:22:39:cc:eb:68:8a:1a:5a:0c:db:5c:90:cf:
         51:26:ec:ec:a6:12:db:1d:28:0f:b0:a2:69:f5:f9:ad:b2:ac:
         28:34:88:4f:20:31:76:04:86:d3:db:0f:d7:e1:fb:8f:e9:4b:
         b6:6c:9f:c7:f8:e7:32:ac:bc:35:6f:4d:cd:37:6f:21:0d:7c:
         04:99:60:2c:e7:f9:02:18:bb:f0:13:b8:15:29:f2:81:43:e5:
         94:f1:47:25:30:91:35:87:27:0f:1e:3a:64:0f:27:69:1e:76:
         e7:90:3e:55:d8:19:d0:c3:52:1f:12:e1:e8:7d:91:fd:69:9d:
         b4:98:b8:4c:d6:f0:d9:a8:dd:dc:18:0b:89:a2:db:bb:17:48:
         c3:f5:58:8a:e8:6c:14:be:a3:fd:47:f1:5f:f9:47:46:85:72:
         06:74:40:48:e7:16:fc:3d:82:b9:f5:0f:fa:04:9d:e5:ed:12:
         8c:23:24:51:4a:08:92:a4:9b:37:83:c1:fa:3c:b0:6d:65:91:
         c3:17:02:c2:d1:e9:28:45:ff:c3:04:c0:dc:77:5f:8b:96:ca:
         2f:cb:3d:fd:f5:ca:e7:2f:32:2a:5e:04:88:92:0f:5e:4f:81:
         27:c7:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:39 2025 by rpki-client