Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/e67yAdshuBe2xmqUkEq8pvYgMdE.roa
File:                     e67yAdshuBe2xmqUkEq8pvYgMdE.roa (raw, json)
Hash identifier:          vHl0ieSKwOOXLRKSlSENm9n8H5j4AZXwMvoaDAWVg8w=
Subject key identifier:   7B:AE:F2:01:DB:21:B8:17:B6:C6:6A:94:90:4A:BC:A6:F6:20:31:D1
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0139
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/e67yAdshuBe2xmqUkEq8pvYgMdE.roa
Signing time:             Mon 01 Aug 2022 01:28:39 +0000
ROA not before:           Mon 01 Aug 2022 01:28:39 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.1.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:39 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=7BAEF201DB21B817B6C66A94904ABCA6F62031D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:6d:9e:be:d1:0a:2b:dd:78:9c:36:4f:e3:
                    88:8b:b2:2b:c9:73:31:f0:3f:e5:f2:69:b7:b9:e8:
                    cf:a4:dc:9e:2b:da:e7:46:a7:71:41:5e:6b:3d:66:
                    df:c5:52:c1:8b:f7:d2:74:21:ae:96:54:53:94:81:
                    28:cd:97:e4:47:4f:c0:be:c7:fa:77:87:7e:00:82:
                    12:ed:df:95:8c:b8:46:8d:60:1b:96:5c:7f:c9:78:
                    46:a9:2b:ca:25:8f:0e:ac:da:67:91:de:86:71:59:
                    f5:aa:18:56:bd:bf:fb:8c:e6:4a:8b:01:92:d6:49:
                    4c:ad:cd:cd:be:ca:ee:f9:b8:ef:f3:3d:05:b7:d2:
                    69:1f:3f:bb:8e:29:03:72:66:5b:b5:98:05:76:a2:
                    90:26:18:44:d9:3d:63:da:69:ac:54:7f:c9:e9:9e:
                    a3:96:8e:e4:42:87:0c:33:a6:7c:d3:9c:d6:83:c1:
                    de:54:62:fa:83:b9:ce:ed:77:75:fd:32:73:6e:29:
                    91:94:93:d1:c4:9f:c0:48:d8:98:33:3a:ba:e5:35:
                    45:51:c0:1d:27:d5:4e:13:fa:84:1c:d7:59:f8:d5:
                    02:ab:96:ae:e6:f5:e7:94:3d:ac:1b:d2:dc:a5:5c:
                    12:3f:dd:4b:43:a6:e6:44:3c:f3:d3:58:0d:cd:e9:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AE:F2:01:DB:21:B8:17:B6:C6:6A:94:90:4A:BC:A6:F6:20:31:D1
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/e67yAdshuBe2xmqUkEq8pvYgMdE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d1:d6:f3:9a:12:4a:11:e5:f0:10:01:a9:40:d3:ea:79:86:
         c8:37:30:c3:79:c6:d0:4c:61:45:ff:d7:89:c1:8a:99:5f:1b:
         f5:63:b8:96:93:48:1f:c7:f8:cd:75:3e:36:4c:84:0d:27:8a:
         d0:b4:61:b6:5d:27:36:5c:e7:8a:31:54:b8:00:f7:fd:a8:a9:
         2e:0e:05:22:18:ec:f1:35:e0:f2:ba:ed:6c:f9:71:5a:51:ac:
         de:69:db:02:91:e2:10:14:51:6e:b6:8c:f7:5a:1b:7d:3b:ff:
         76:eb:f4:bc:0b:6d:f0:72:82:cb:c4:0a:7d:77:86:97:3a:31:
         8f:33:8d:a3:8d:32:9c:0a:2f:1e:58:44:00:a6:14:1d:79:62:
         0d:e1:04:4b:6c:df:82:cd:31:79:48:77:1f:46:32:c2:aa:b5:
         62:08:5f:49:b7:31:8b:1a:7c:ba:3e:4b:d4:68:b3:01:05:91:
         ba:a5:5f:59:1f:24:27:d4:ca:26:2f:c3:50:88:5a:75:af:80:
         b0:7e:b4:62:b3:72:7f:54:bc:50:ca:dd:48:90:44:74:52:c0:
         72:a9:82:81:24:b1:fe:66:aa:aa:8a:f7:92:e5:1b:ab:a8:04:
         77:e8:a9:43:43:ad:97:13:9d:92:41:79:02:94:cf:11:2e:85:
         65:b0:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:53 2025 by rpki-client