Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SBomKO4_46KH5W4ZbKA_jx_9jH0.roa
File:                     SBomKO4_46KH5W4ZbKA_jx_9jH0.roa (raw, json)
Hash identifier:          TTqBC3uMIBPMJF+z9XgnOpcJpicGCQAus8Tt+v33Z+0=
Subject key identifier:   48:1A:26:28:EE:3F:E3:A2:87:E5:6E:19:6C:A0:3F:8F:1F:FD:8C:7D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0178
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SBomKO4_46KH5W4ZbKA_jx_9jH0.roa
Signing time:             Thu 01 Dec 2022 01:28:33 +0000
ROA not before:           Thu 01 Dec 2022 01:28:33 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     10013
IP address blocks:        210.224.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:33 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=481A2628EE3FE3A287E56E196CA03F8F1FFD8C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:93:01:ac:3e:8f:5c:10:fd:ee:9f:f8:20:
                    64:85:3c:27:0f:2c:dc:eb:01:3a:4c:3b:5f:ce:9b:
                    bd:d6:e6:93:c2:01:3b:d3:e4:38:78:79:3a:de:8c:
                    65:45:fc:2f:cf:a4:79:18:cd:09:1c:b4:19:a9:29:
                    a0:e4:5c:8e:85:74:58:c2:34:cb:4d:e6:72:ce:54:
                    57:c8:96:e3:04:af:5f:5d:73:76:65:97:e0:5e:59:
                    57:5d:ab:c1:fa:d6:2f:21:dd:5d:15:50:4c:61:e3:
                    a7:77:b8:99:c3:49:96:ff:62:df:c2:e7:32:8f:a2:
                    f9:13:3c:05:31:0a:a5:d1:ac:10:a3:37:e2:44:69:
                    c1:38:94:33:db:d7:63:0a:d8:4d:33:f6:af:20:c5:
                    13:9f:4e:19:7a:04:e0:01:15:b2:92:58:ef:d3:e8:
                    a8:a6:1a:8f:f0:db:ed:e0:cc:7e:23:79:7e:7e:9d:
                    f7:5a:74:ee:09:c3:e7:3e:ee:7d:0d:b1:18:de:fa:
                    6a:13:24:5d:5b:36:7e:2b:8b:fa:91:f6:eb:5f:f9:
                    fe:06:2e:70:f0:34:93:52:e1:de:e1:c5:01:9a:ca:
                    0b:d9:a8:5a:fa:5c:5e:4c:d6:a7:76:dd:b8:0f:4c:
                    2d:d5:f4:b1:5b:64:99:a9:e8:43:03:cf:0a:3d:19:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:26:28:EE:3F:E3:A2:87:E5:6E:19:6C:A0:3F:8F:1F:FD:8C:7D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SBomKO4_46KH5W4ZbKA_jx_9jH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:83:ae:30:a4:ae:e3:9b:50:f1:9b:0f:cb:f9:2b:1e:70:fa:
         de:a7:0c:f8:4b:26:d6:a0:ed:53:e9:c0:d2:06:46:26:d6:3c:
         e6:22:39:3c:d5:23:6f:84:a1:4b:30:05:21:5c:82:be:bb:36:
         62:22:77:5d:4e:28:e1:1c:65:1f:05:07:fc:10:67:90:05:cf:
         9d:90:bc:4e:5d:0a:1e:b3:78:3f:bf:be:00:37:60:4c:71:9c:
         2d:ba:55:82:a2:94:e8:4a:8f:16:78:1b:8b:98:fd:e3:60:d8:
         35:4f:1b:f0:e7:24:9e:16:0f:75:aa:03:80:c4:b5:92:af:1b:
         ee:e1:9d:86:31:c8:8d:63:54:2c:a0:79:c9:34:82:09:6e:9e:
         35:d8:1d:9a:12:94:d1:d2:cb:12:df:78:f9:da:92:ad:66:d2:
         ea:3f:09:e3:e0:a5:a4:de:58:3b:95:b0:f4:97:35:ac:05:8e:
         76:e4:9d:55:c2:a2:79:e4:99:73:03:b1:44:7d:52:e3:23:e9:
         a5:6d:98:25:63:ab:a0:7d:66:d0:af:00:14:1d:d6:40:20:c4:
         0e:6a:66:f1:3c:bb:55:b8:3e:64:0c:e3:e5:d7:f8:0c:56:c5:
         39:0c:a6:26:ca:3e:70:10:dc:2b:a2:26:0f:b1:1c:c4:cb:09:
         dd:a7:0e:40
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjEyMDEw
MTI4MzNaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4MUEyNjI4RUUzRkUz
QTI4N0U1NkUxOTZDQTAzRjhGMUZGRDhDN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIO5MBrD6PXBD97p/4IGSFPCcPLNzrATpMO1/Om73W5pPCATvT
5Dh4eTrejGVF/C/PpHkYzQkctBmpKaDkXI6FdFjCNMtN5nLOVFfIluMEr19dc3Zl
l+BeWVddq8H61i8h3V0VUExh46d3uJnDSZb/Yt/C5zKPovkTPAUxCqXRrBCjN+JE
acE4lDPb12MK2E0z9q8gxROfThl6BOABFbKSWO/T6KimGo/w2+3gzH4jeX5+nfda
dO4Jw+c+7n0NsRje+moTJF1bNn4ri/qR9utf+f4GLnDwNJNS4d7hxQGaygvZqFr6
XF5M1qd23bgPTC3V9LFbZJmp6EMDzwo9GcKXAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUSBomKO4/46KH5W4ZbKA/jx/9jH0wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9TQm9tS080XzQ2S0g1VzRaYktBX2p4XzlqSDAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0uC3MA0GCSqGSIb3DQEBCwUAA4IBAQAXg64wpK7jm1Dxmw/L+Sse
cPrepwz4SybWoO1T6cDSBkYm1jzmIjk81SNvhKFLMAUhXIK+uzZiInddTijhHGUf
BQf8EGeQBc+dkLxOXQoes3g/v74AN2BMcZwtulWCopToSo8WeBuLmP3jYNg1Txvw
5ySeFg91qgOAxLWSrxvu4Z2GMciNY1QsoHnJNIIJbp412B2aEpTR0ssS33j52pKt
ZtLqPwnj4KWk3lg7lbD0lzWsBY525J1VwqJ55JlzA7FEfVLjI+mlbZglY6ugfWbQ
rwAUHdZAIMQOambxPLtVuD5kDOPl1/gMVsU5DKYmyj5wENwroiYPsRzEywndpw5A
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org