Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FRzK0XziuDZhCatYVYcUhsla4zc.roa
File:                     FRzK0XziuDZhCatYVYcUhsla4zc.roa (raw, json)
Hash identifier:          jkDzfVfwQz0aDb7czV/0yqRVNBQjJ2AOFH2dvIwj6v8=
Subject key identifier:   15:1C:CA:D1:7C:E2:B8:36:61:09:AB:58:55:87:14:86:C9:5A:E3:37
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       013F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FRzK0XziuDZhCatYVYcUhsla4zc.roa
Signing time:             Thu 01 Sep 2022 01:28:28 +0000
ROA not before:           Thu 01 Sep 2022 01:28:28 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.11.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:28 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=151CCAD17CE2B8366109AB5855871486C95AE337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:8d:d9:21:fb:57:32:e1:38:da:15:46:0d:
                    95:bd:eb:24:f3:3c:6a:b0:0a:2b:03:d0:56:db:4e:
                    23:61:a3:a4:5e:9a:c2:d6:39:41:ae:ef:c0:e2:58:
                    a7:93:4a:4f:2a:3d:f3:c0:38:8e:35:8e:f5:c3:e8:
                    d2:61:c7:a4:6b:3a:05:83:d1:2a:be:50:02:6d:43:
                    96:11:16:e6:02:19:81:33:b0:5b:6d:35:35:7b:12:
                    9c:fe:39:c3:63:c9:e1:90:fd:35:2d:1e:36:a4:81:
                    3d:15:56:07:34:c1:09:b3:53:aa:d7:8d:b6:bb:bc:
                    a8:0a:c9:7b:96:63:b3:a0:e5:1c:25:77:bf:b0:af:
                    e5:97:c6:ee:2f:4e:c3:bd:2a:84:5a:5c:35:1a:5b:
                    c5:b7:b5:fd:3e:ff:d7:f5:5c:d9:00:92:06:01:fd:
                    3b:2a:eb:52:54:5f:74:74:c1:f3:39:4f:21:3b:f1:
                    9e:64:08:2f:30:b9:fa:b1:b6:b7:e2:3d:24:8c:cf:
                    c3:6f:81:8e:b2:67:04:fc:83:24:b0:2e:e2:93:e6:
                    e1:96:be:bc:19:6c:49:35:5c:e7:3d:db:7e:f7:3d:
                    5a:ce:1e:fd:d8:af:7d:58:50:87:bb:0b:16:9f:89:
                    6f:cd:51:7d:e5:66:11:e3:b1:b8:38:35:59:e6:27:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:CA:D1:7C:E2:B8:36:61:09:AB:58:55:87:14:86:C9:5A:E3:37
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FRzK0XziuDZhCatYVYcUhsla4zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:03:0c:8d:06:6f:9d:68:a4:98:cb:43:dc:6b:48:0a:8a:
         3c:dd:7b:b7:7e:de:b5:55:08:0b:08:03:09:76:ae:69:39:0a:
         b1:32:a6:30:c8:4c:09:bb:23:2c:d8:7b:48:6c:88:cd:8d:09:
         92:b4:82:3c:f1:55:bc:6b:d7:47:8b:0f:13:c7:07:a0:24:0d:
         b5:02:ce:25:d5:f5:5b:20:7c:ba:79:01:14:3e:2a:ea:ee:01:
         cd:39:7b:df:6f:1b:80:32:1d:0c:36:0f:a0:50:a2:da:02:6e:
         9b:7f:f1:fb:70:2b:56:b4:9e:fd:28:77:42:5d:1c:6b:00:4a:
         d3:95:3a:13:78:1f:b6:29:39:11:4e:c2:4e:9d:3d:10:5f:d3:
         b8:54:ef:e8:e7:0b:f5:74:69:86:de:c1:70:d7:bc:3d:1d:4b:
         34:4c:66:7f:72:6a:a3:c3:09:58:f5:39:48:d1:38:84:a9:92:
         9c:85:a6:34:7c:b1:9e:3f:46:64:7f:ef:e4:27:75:a0:9c:94:
         a7:54:8c:80:e2:b8:87:16:61:05:b8:c5:f2:c6:9b:4f:a2:32:
         18:be:47:45:7e:e7:ea:aa:34:8a:a8:c4:d2:76:65:48:24:8b:
         8c:b2:14:bd:ef:84:b1:36:6f:38:69:e4:d1:c4:b7:4a:74:61:
         45:13:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:35 2025 by rpki-client