Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/JIVmc1Qfl7P8bDQsX9G31WONuL4.roa
File:                     JIVmc1Qfl7P8bDQsX9G31WONuL4.roa (raw, json)
Hash identifier:          ZfDPItLw6AL5ZSt+r0Wk4FO+ZrrzHl5BCRmMGM0fOxE=
Subject key identifier:   24:85:66:73:54:1F:97:B3:FC:6C:34:2C:5F:D1:B7:D5:63:8D:B8:BE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       DA
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/JIVmc1Qfl7P8bDQsX9G31WONuL4.roa
Signing time:             Fri 30 Jul 2021 10:07:06 +0000
ROA not before:           Fri 30 Jul 2021 10:07:06 +0000
ROA not after:            Fri 15 Jul 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        210.135.112.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jul 30 10:07:06 2021 GMT
            Not After : Jul 15 01:30:02 2022 GMT
        Subject: CN=24856673541F97B3FC6C342C5FD1B7D5638DB8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:1d:c5:1d:69:ea:40:ad:0b:af:19:a1:cc:
                    03:8a:18:5a:e5:88:d0:a9:33:0d:80:dd:ae:a7:6d:
                    f6:a9:39:b5:1c:d0:dc:5e:7a:b3:75:65:ed:00:f7:
                    22:a4:2c:1c:ee:ce:b5:7a:2d:c1:fc:2d:6c:cc:89:
                    62:ba:31:80:bc:4c:45:34:54:f8:85:02:d7:d1:26:
                    da:44:38:8e:1f:97:be:c9:09:77:2c:03:21:8c:f3:
                    7c:9b:f9:ec:08:6d:d1:8e:ae:83:22:fc:a9:d3:b8:
                    b6:45:0e:47:b8:04:b6:70:91:eb:33:54:6a:e4:1a:
                    f5:3f:86:6f:02:0e:30:d3:4b:a9:36:86:0e:2d:e6:
                    01:a6:f3:f1:ec:3b:98:ce:da:16:e6:1a:c8:7f:da:
                    fb:df:47:c0:be:ce:6a:87:49:ce:70:5d:c4:c8:e4:
                    b4:05:46:96:20:47:49:cb:88:a3:27:29:3e:ae:f3:
                    12:2c:da:ec:08:88:c7:93:41:30:5c:57:93:a3:22:
                    3a:b7:45:87:57:43:3a:f6:a0:f7:9f:89:4f:fb:d5:
                    37:46:c4:c2:42:bf:df:2d:f3:29:e6:59:61:a5:14:
                    74:dd:9d:5a:09:30:4e:0e:9b:34:c3:de:eb:15:60:
                    de:8f:e1:02:c4:d9:08:1e:6e:aa:85:87:48:b6:06:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:85:66:73:54:1F:97:B3:FC:6C:34:2C:5F:D1:B7:D5:63:8D:B8:BE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/JIVmc1Qfl7P8bDQsX9G31WONuL4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.135.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:9a:62:8f:14:b1:97:4e:38:b9:5b:f1:07:3e:da:26:b0:33:
         72:f5:0c:ed:e5:bd:e2:3d:f7:b4:1b:7f:59:fe:dd:e2:d5:1c:
         af:95:82:ba:02:77:95:d2:e9:0f:02:6e:34:2c:79:d6:8a:4f:
         d3:71:bb:fa:f8:45:4e:32:50:a1:f0:09:2e:d9:07:b4:d6:6d:
         2c:61:6c:d7:2d:e5:2d:fa:fb:a1:be:39:f8:b4:da:b3:f1:d7:
         23:85:5f:e5:b8:f5:42:0f:fd:f2:19:61:4b:59:ae:32:e1:a3:
         01:83:19:16:49:eb:f4:c9:c2:4b:db:ea:8f:9e:a1:47:14:3b:
         74:ca:13:60:cc:7c:a3:78:92:bd:29:0b:36:6e:62:f4:36:63:
         b0:cf:d2:72:b3:da:f8:34:3e:f1:2a:97:30:85:4f:f3:ba:01:
         67:1e:71:a8:fc:df:f8:85:47:f1:34:d2:db:02:0e:c4:90:8c:
         9a:b5:c4:46:5f:e8:cc:6d:ad:fd:35:e3:89:27:29:35:d8:e4:
         c6:a7:90:09:08:b2:ae:60:85:ea:d6:54:b7:9e:80:22:0c:fc:
         58:f6:c8:dc:00:b3:a0:93:8f:d2:f3:8b:83:87:0d:4e:06:fd:
         0f:68:ba:0e:f5:17:5c:40:30:de:88:87:70:95:7a:76:4e:96:
         75:16:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:16 2025 by rpki-client