Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NTuHCNAzB7CIuzALv_pG10stwrI.roa
File:                     NTuHCNAzB7CIuzALv_pG10stwrI.roa (raw, json)
Hash identifier:          ISEMAqxBMEb0c8YcWbXAGBF0W6fnjdLtkSJfz3IbihY=
Subject key identifier:   35:3B:87:08:D0:33:07:B0:88:BB:30:0B:BF:FA:46:D7:4B:2D:C2:B2
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0147
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NTuHCNAzB7CIuzALv_pG10stwrI.roa
Signing time:             Thu 01 Sep 2022 01:28:29 +0000
ROA not before:           Thu 01 Sep 2022 01:28:29 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.2.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:29 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=353B8708D03307B088BB300BBFFA46D74B2DC2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:e3:8c:22:ea:e8:25:a8:12:32:e1:75:5a:
                    67:be:5c:13:8b:7c:05:5b:92:45:df:f8:80:22:2e:
                    45:ec:63:e1:57:ae:be:29:d7:65:0f:c3:2d:e3:7b:
                    f6:fa:b2:34:08:f8:06:fd:4e:62:77:cb:3c:59:df:
                    fe:2e:d7:14:ba:18:a7:c7:4d:46:04:60:33:72:f2:
                    3f:b1:a0:69:c5:e2:c8:1f:ad:ff:57:ef:7c:b9:f6:
                    ac:72:ee:bc:27:ff:01:64:d8:03:d3:4f:77:9d:55:
                    e9:30:0c:bd:05:a7:d0:68:0d:2c:cd:ee:2d:fe:09:
                    f8:d7:b5:37:98:01:5e:d7:fb:9b:9b:32:a7:d1:d5:
                    d4:e4:82:83:6b:85:d8:81:69:2a:6c:d8:b7:60:d0:
                    82:e8:fb:1b:ea:ec:45:92:97:1a:65:7a:23:14:f8:
                    04:17:55:96:00:59:d7:b7:9a:2e:21:4b:de:b3:59:
                    e7:e2:29:19:cd:bf:0e:98:e8:f7:bf:16:c3:9c:a6:
                    34:72:5f:9f:00:3d:dd:4a:2d:4b:60:9a:66:93:86:
                    9f:e2:e3:84:32:de:ee:d8:e4:5d:99:f2:81:38:23:
                    d3:5c:fb:17:37:e7:86:05:f6:ee:3c:45:35:cd:b8:
                    25:88:f6:91:07:2c:ac:e6:c8:a1:c4:c2:5e:1d:44:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:87:08:D0:33:07:B0:88:BB:30:0B:BF:FA:46:D7:4B:2D:C2:B2
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NTuHCNAzB7CIuzALv_pG10stwrI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:14:e2:43:16:2e:fc:88:91:41:d7:6d:d3:75:b1:4e:7c:
         aa:98:95:f9:2c:77:21:5f:5f:fc:24:f9:78:0a:07:e2:e7:28:
         0e:fc:53:c3:83:8f:4a:e4:c7:28:8a:b2:50:f2:43:7e:a3:22:
         e0:e6:a4:22:c4:ba:28:d3:ca:45:d5:13:29:dc:44:89:d1:9a:
         08:1e:ed:ea:af:df:94:b6:aa:7e:15:c5:bd:f4:c3:30:a8:ca:
         ec:31:b7:cc:56:7e:9e:02:21:72:7d:dd:df:b5:4c:69:3c:f4:
         db:79:fd:4f:fd:bd:b1:ad:2d:d9:cc:63:a4:91:15:dc:d7:20:
         3e:dc:53:1b:73:5a:97:fa:8d:04:23:a2:2f:a2:9a:b2:dc:58:
         7f:42:78:af:a6:89:87:ef:d6:06:6d:8a:32:1f:4f:7f:88:11:
         cf:03:56:2a:8d:a3:0d:34:ab:a3:e3:0b:ca:b8:90:d9:3e:f3:
         5d:55:76:56:6d:24:b8:78:5a:ff:ed:fe:35:63:f7:98:df:89:
         7f:3a:34:be:80:06:00:91:bb:46:7d:6a:c5:9b:db:0b:b1:8e:
         ef:20:32:3e:e5:1d:e6:57:57:01:2c:05:79:f1:46:47:ef:21:
         09:79:f0:e9:10:86:20:7d:e7:2f:c6:8c:25:8b:a9:2c:45:55:
         79:c5:1e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:16 2025 by rpki-client