Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GBRVWEaec1IqxoOxxPHnfld3S5M.roa
File:                     GBRVWEaec1IqxoOxxPHnfld3S5M.roa (raw, json)
Hash identifier:          GJBTIlPDmb8ly1+YwyVV6DHlr2RxXV3n1JLLKMfnCHk=
Subject key identifier:   18:14:55:58:46:9E:73:52:2A:C6:83:B1:C4:F1:E7:7E:57:77:4B:93
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       010D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GBRVWEaec1IqxoOxxPHnfld3S5M.roa
Signing time:             Sat 01 Jan 2022 01:31:19 +0000
ROA not before:           Sat 01 Jan 2022 01:31:19 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.216.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:19 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=18145558469E73522AC683B1C4F1E77E57774B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a1:b7:fc:fb:05:ef:6d:ef:8c:9a:b0:34:e4:
                    d0:81:8f:07:28:a8:bd:56:1a:13:f0:fb:1e:3c:a8:
                    7e:c5:de:07:c0:9d:1b:c4:b1:50:6a:0a:e2:6b:67:
                    f4:48:64:64:07:c3:7b:a5:bf:26:f6:ba:4b:64:e1:
                    3d:66:db:a9:76:2f:7b:3e:dc:a2:d0:a4:7e:a3:55:
                    11:95:2a:1e:d5:a9:35:5e:a3:ad:31:18:3a:b0:32:
                    9c:49:94:09:5f:08:ff:24:6e:70:aa:b5:da:d3:4b:
                    15:1a:35:74:7b:12:8c:64:a9:67:00:be:2d:30:ab:
                    26:52:44:76:79:81:23:bb:ac:9f:89:33:1d:95:ad:
                    f6:c9:70:47:e7:f3:58:8c:9b:5e:f3:a7:43:ae:54:
                    c1:84:7e:7f:14:e1:40:18:a2:ce:e4:9b:a1:83:04:
                    71:7b:4b:51:37:5f:c3:95:31:50:35:d0:33:40:20:
                    82:d8:fe:e0:3d:27:41:46:bf:bc:a7:f1:53:e3:52:
                    7a:3e:94:0c:ad:af:a3:ab:db:a1:55:ea:66:b3:53:
                    82:cb:41:6d:b9:f7:44:75:01:7f:d2:cf:12:5e:34:
                    3c:bf:36:e5:6d:b1:68:08:10:46:77:33:86:70:38:
                    92:69:38:1a:72:1c:b9:5e:61:06:c0:3c:80:ab:f1:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:14:55:58:46:9E:73:52:2A:C6:83:B1:C4:F1:E7:7E:57:77:4B:93
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GBRVWEaec1IqxoOxxPHnfld3S5M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:be:6c:40:36:73:1e:e8:7f:8b:3d:0f:3d:d5:8b:88:01:94:
         7f:d0:f4:0c:f6:ff:f6:bb:d5:f3:91:6a:94:dd:6f:0f:63:27:
         05:87:21:d8:23:38:6e:8a:d7:6f:93:70:34:56:ec:be:dc:ed:
         fa:12:df:6d:98:0b:f5:1d:e3:e6:d1:5c:8c:9a:ab:03:44:db:
         2e:9f:6d:61:eb:73:3d:0d:09:46:e3:61:33:d2:c8:3e:c0:a0:
         b5:6d:41:7f:de:f7:e4:be:ad:7a:76:ac:01:8d:14:2e:1e:0a:
         2f:e5:28:97:97:80:ac:4c:22:e3:16:e4:ab:29:6f:f8:b7:bb:
         9f:d0:6a:84:3a:d9:d1:3a:77:17:3c:e3:6a:c1:ba:91:12:a6:
         c7:42:7f:2c:c1:ea:7d:56:ea:b6:3e:3e:02:e0:47:62:50:e1:
         82:43:40:6d:ff:4e:17:1e:57:4d:a4:1a:59:b2:0f:c7:51:66:
         2e:a9:5f:c5:d2:89:0b:f9:e9:c8:e2:07:d9:cb:21:37:0e:f0:
         b5:5d:aa:67:92:f0:c7:8c:96:ad:dd:26:e3:3a:6f:f3:1f:00:
         c8:ca:24:c1:aa:1a:c9:65:07:e8:bd:d5:a3:ba:b6:bf:86:3d:
         00:ad:60:fb:ff:35:f3:f4:89:57:ec:71:f0:83:32:bb:be:41:
         84:31:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:15 2025 by rpki-client