Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/O1Px49a1okBv-38UBOoZ8QGFP-4.roa
File:                     O1Px49a1okBv-38UBOoZ8QGFP-4.roa (raw, json)
Hash identifier:          imL7c7Vc+hMjadSQshlWKQAhn2IoyJUUJrDP2hVM8NY=
Subject key identifier:   3B:53:F1:E3:D6:B5:A2:40:6F:FB:7F:14:04:EA:19:F1:01:85:3F:EE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0142
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/O1Px49a1okBv-38UBOoZ8QGFP-4.roa
Signing time:             Thu 01 Sep 2022 01:28:28 +0000
ROA not before:           Thu 01 Sep 2022 01:28:28 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.10.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:28 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=3B53F1E3D6B5A2406FFB7F1404EA19F101853FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:f3:e4:a3:89:f7:02:b6:27:15:6e:88:80:
                    39:04:8b:63:90:7c:1e:fb:9b:2b:54:a3:7a:16:13:
                    1f:66:34:27:ca:af:05:01:8d:35:96:df:22:85:ba:
                    44:bd:36:f6:48:f5:fc:51:07:e6:0d:99:d0:26:3d:
                    96:b8:66:1a:e7:33:76:ba:b4:ce:ac:1a:fd:f3:f3:
                    c7:c8:22:ca:15:60:5a:bd:80:fb:f7:25:4b:78:4b:
                    98:69:78:e1:34:c4:cc:b2:4f:ba:d9:c9:df:94:fe:
                    43:77:ad:c1:8c:11:82:2e:b0:9e:21:a6:48:c6:bf:
                    9b:0c:9a:bf:cd:c9:e7:5c:5c:0f:51:01:a7:8c:3c:
                    1b:36:90:63:7b:a9:51:41:8c:90:7c:6b:f7:35:c8:
                    28:8c:09:81:cb:c0:71:4f:c7:76:78:e5:c0:99:f5:
                    0d:fc:82:61:f9:47:03:bd:51:1d:db:49:e5:c8:03:
                    9b:22:14:c3:eb:35:38:b6:43:a8:8f:78:c5:ed:f3:
                    d9:d4:d5:c0:c9:88:d8:fb:2c:cc:01:fe:ea:df:f8:
                    81:d9:a3:be:d9:4a:17:ec:9e:78:6f:7f:cc:1a:46:
                    8b:d7:93:e8:85:1d:47:e5:3b:3a:f1:76:4f:f6:9d:
                    c1:d7:c1:f0:52:7c:c4:5c:ac:32:f1:fb:25:15:26:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:53:F1:E3:D6:B5:A2:40:6F:FB:7F:14:04:EA:19:F1:01:85:3F:EE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/O1Px49a1okBv-38UBOoZ8QGFP-4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:09:6a:13:54:e6:9e:a1:cf:f9:f8:b3:3f:b8:dc:be:bb:
         99:2d:81:af:a3:a1:35:86:e4:20:88:38:01:eb:a3:8a:31:33:
         4f:9d:25:6f:45:cb:41:5a:e9:5f:aa:bf:ea:f9:ab:d3:27:0a:
         5f:43:31:94:a1:fc:c1:2e:21:05:d8:ba:d3:a8:49:c1:ec:30:
         44:57:90:f5:5a:58:6e:a2:b7:cd:d9:f4:e6:59:ac:6a:19:18:
         26:51:fe:af:b8:31:6e:5b:94:76:a8:47:91:67:e6:4c:55:a1:
         4f:17:cf:6d:88:31:0e:8e:6e:9d:76:c7:e8:f6:41:a3:ae:32:
         ac:8d:f2:0f:0e:84:cc:4a:4d:d9:28:a4:fc:27:c1:9c:57:f7:
         60:15:e2:74:e1:18:49:7e:27:d7:a3:eb:c5:c5:84:17:41:8c:
         c2:cc:b8:13:43:bf:5c:74:3b:15:2d:02:d4:a4:b2:a2:d5:e6:
         3a:85:50:05:ad:ed:25:3b:18:c7:b1:be:08:cc:20:a0:b6:bd:
         37:ed:8e:67:a7:6a:26:6a:7a:90:06:78:92:39:c9:b5:ec:4a:
         7f:a9:65:32:90:04:92:a6:6f:04:a4:44:ae:cd:98:21:c7:6c:
         db:72:25:ab:bd:fe:6e:1a:1f:45:57:67:4b:bf:1d:ac:a4:19:
         c2:0e:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:08 2025 by rpki-client