Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z5LIDr8JHJ6tMDuUlm-Abj8M_vY.roa
File:                     Z5LIDr8JHJ6tMDuUlm-Abj8M_vY.roa (raw, json)
Hash identifier:          2/TipCB02gkWxtfFKad3U8/rrF4q9XEMNWJTFLh8Dr8=
Subject key identifier:   67:92:C8:0E:BF:09:1C:9E:AD:30:3B:94:96:6F:80:6E:3F:0C:FE:F6
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0146
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z5LIDr8JHJ6tMDuUlm-Abj8M_vY.roa
Signing time:             Thu 01 Sep 2022 01:28:29 +0000
ROA not before:           Thu 01 Sep 2022 01:28:29 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     131965
IP address blocks:        219.94.203.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:29 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=6792C80EBF091C9EAD303B94966F806E3F0CFEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:ba:3e:21:d7:7f:44:45:b6:20:6f:dc:f4:
                    72:f5:e4:8c:0c:cf:9e:9e:da:fd:64:7d:49:d1:ef:
                    85:37:e9:ff:54:a0:99:1f:8a:c9:2f:bf:f6:e3:c7:
                    eb:c6:05:69:81:56:84:e9:a1:a7:cf:99:2c:75:2d:
                    b7:93:19:7b:ab:3f:d6:2b:63:6e:64:98:03:24:ea:
                    aa:5f:c4:a7:54:3a:55:41:b3:2a:9d:d3:f7:0c:95:
                    19:17:07:c6:02:44:ef:0e:a7:29:2c:50:2b:e4:3a:
                    a3:b5:0b:a8:81:0a:d3:20:26:5d:03:47:5d:d7:64:
                    b2:ae:f4:14:42:e5:28:f0:0d:7a:7e:85:6f:bb:3e:
                    bb:29:0d:1f:5e:bb:a5:8c:10:e3:3e:96:21:54:d0:
                    6c:c2:ba:dd:f9:8d:5e:c7:d5:73:ac:48:55:bc:b7:
                    f0:e7:bd:47:46:be:1b:96:e4:45:47:9c:d8:0a:51:
                    a3:a0:0b:dc:89:e1:2c:fc:03:89:30:1c:c3:62:36:
                    c7:d6:d5:fe:e2:14:37:5e:42:c3:75:33:7e:07:dc:
                    80:42:7e:c7:8d:a2:14:47:2c:e8:8f:02:eb:e7:91:
                    86:4b:72:2f:e0:f0:ac:ee:f4:62:67:91:14:1a:75:
                    5e:e2:9a:2c:6f:ba:35:c1:ef:ee:1a:f0:86:36:16:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:92:C8:0E:BF:09:1C:9E:AD:30:3B:94:96:6F:80:6E:3F:0C:FE:F6
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z5LIDr8JHJ6tMDuUlm-Abj8M_vY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:ae:60:c5:7d:cd:31:e1:5c:3b:3b:4f:fb:57:da:d8:70:
         66:76:3e:3f:3e:2e:36:05:07:eb:a5:b1:01:b5:5e:bb:75:17:
         c9:e0:07:7f:6c:b3:72:0e:a4:c3:51:ed:4e:ce:a5:50:33:b1:
         d6:67:8e:a1:d9:77:74:55:ac:dd:e7:6c:5f:60:19:de:09:a5:
         a1:05:36:e4:96:00:48:36:9f:ae:71:12:07:ce:f0:e5:4b:c3:
         91:62:41:6d:05:ed:fc:9b:76:d6:62:e7:43:37:ba:75:00:c9:
         5d:9a:ac:7c:f1:ee:29:e9:36:53:73:32:f5:e4:4d:83:a8:ba:
         b3:c8:81:d7:55:fb:02:66:cc:a0:1e:40:40:af:9a:4f:37:5b:
         cd:62:95:af:16:b6:3b:21:a5:1e:ce:e3:02:b5:e3:a5:d6:ce:
         78:c4:e7:2d:fd:76:b1:3f:0a:66:86:4b:83:1e:b8:52:a5:84:
         54:48:5d:9f:dd:7e:a3:c9:53:4f:96:9d:6e:41:47:f4:a4:4c:
         89:ef:2e:b0:d9:eb:4d:23:77:48:21:ef:17:67:e3:1a:71:23:
         01:97:f7:c7:25:8e:38:c0:50:ca:05:61:bb:6b:cd:d2:04:a8:
         d0:43:c6:f1:9b:ee:cb:f6:0f:34:d6:20:06:24:68:79:4b:d0:
         fd:5d:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:07 2025 by rpki-client