Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MF4lGj0GvNwB6mDqL2O6l65LsAE.roa
File:                     MF4lGj0GvNwB6mDqL2O6l65LsAE.roa (raw, json)
Hash identifier:          ZVFj/jBqprphp+u4rp/RXynuMsG2/mrwWg8oySmTQh8=
Subject key identifier:   30:5E:25:1A:3D:06:BC:DC:01:EA:60:EA:2F:63:BA:97:AE:4B:B0:01
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       EE
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MF4lGj0GvNwB6mDqL2O6l65LsAE.roa
Signing time:             Fri 01 Oct 2021 01:28:22 +0000
ROA not before:           Fri 01 Oct 2021 01:28:22 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Oct  1 01:28:22 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=305E251A3D06BCDC01EA60EA2F63BA97AE4BB001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:df:bf:af:7f:7c:e3:4d:b8:51:2a:6a:dd:
                    ba:9f:87:2d:b9:23:bd:8a:48:70:3d:c5:85:ad:28:
                    4c:fb:7b:ed:64:8d:a6:c6:06:95:39:28:e3:7b:72:
                    b8:cb:b1:d0:25:d0:9c:ba:47:8c:66:91:7e:30:e7:
                    27:62:80:e1:5b:15:77:23:d5:d3:a4:5d:25:7a:52:
                    80:89:18:14:e2:6f:f9:34:f0:1e:0f:be:d9:5d:3e:
                    a8:35:e9:ec:66:5e:21:86:4f:7d:b9:0c:fc:bb:5b:
                    af:aa:c3:c0:fd:f9:5b:c5:11:ca:b5:2c:7b:38:1f:
                    de:69:bb:6d:51:0a:4d:c9:c5:99:cd:a1:5c:a2:a0:
                    c2:a8:11:09:25:02:3a:7c:24:00:fa:6f:41:b4:d3:
                    aa:38:c4:3f:e0:21:be:d0:52:86:c8:dd:a8:a9:2e:
                    99:9e:e3:32:79:98:27:38:5b:81:a4:75:03:0e:8a:
                    e1:5b:a2:c9:53:f3:6b:b0:16:f0:59:fd:21:8b:c3:
                    a1:44:98:3d:1f:61:bc:5a:01:d5:23:10:80:58:49:
                    9d:81:5d:16:66:ee:dd:1b:d8:d0:4f:7a:1e:da:67:
                    0d:2a:fd:d5:ce:a1:cc:8d:8b:3a:dd:41:e2:6b:17:
                    76:fa:3f:68:49:77:95:8a:76:a9:c7:7f:30:50:3a:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5E:25:1A:3D:06:BC:DC:01:EA:60:EA:2F:63:BA:97:AE:4B:B0:01
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MF4lGj0GvNwB6mDqL2O6l65LsAE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:42:c4:bf:9c:91:9b:d5:69:a5:6a:2d:2a:f0:7c:5f:93:b0:
         55:e8:c1:26:ba:b0:80:80:c0:75:c8:ae:bd:03:0f:e5:73:f2:
         e9:30:93:92:ba:d1:57:90:1f:e5:91:0f:d9:cc:8a:5b:f4:fd:
         64:f3:c6:90:79:96:13:da:79:92:8d:3c:0b:a3:47:94:dc:24:
         30:40:8f:8f:8e:bc:eb:56:62:71:70:84:10:e5:d2:2a:fb:fb:
         da:3c:58:27:04:f3:29:ff:9d:84:9a:fa:0f:4d:85:28:85:04:
         a2:c2:9d:0f:c8:27:fb:9e:ea:a8:0e:90:0a:4e:a0:da:be:57:
         e1:aa:6e:3c:61:dd:88:3a:83:ef:e9:2e:5e:0c:d4:f4:87:67:
         35:3a:4a:e8:ac:57:95:0f:1a:cf:29:80:42:d1:5c:3c:05:43:
         2c:ca:97:97:bf:c4:3f:b2:a9:7e:7b:b6:62:a4:c3:ff:6c:76:
         dc:6c:f9:d9:97:ea:38:c0:5e:b4:d7:2a:79:e3:66:2b:50:b2:
         86:01:80:a8:b5:77:19:a1:98:dd:e0:4b:72:09:58:24:ea:62:
         fc:2f:55:ca:85:71:5a:c7:f6:51:63:0f:cd:99:2a:79:d0:3b:
         be:19:c2:1e:b9:2c:ce:52:4e:7c:73:9c:7e:89:af:b9:40:4a:
         19:1e:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org