Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k2e19YsZOoLuOuj_0b8lK6rRWUg.roa
File:                     k2e19YsZOoLuOuj_0b8lK6rRWUg.roa (raw, json)
Hash identifier:          TuG3sT4eFHL6gyEpqQ0NLglWy58k/ZJ6r4Rxfwb9rXQ=
Subject key identifier:   93:67:B5:F5:8B:19:3A:82:EE:3A:E8:FF:D1:BF:25:2B:AA:D1:59:48
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       E5
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k2e19YsZOoLuOuj_0b8lK6rRWUg.roa
Signing time:             Wed 22 Sep 2021 06:34:02 +0000
ROA not before:           Wed 22 Sep 2021 06:34:01 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     131965
IP address blocks:        219.94.200.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 22 06:34:01 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=9367B5F58B193A82EE3AE8FFD1BF252BAAD15948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:7f:51:93:d1:3e:4a:bb:29:da:89:8c:65:
                    60:dd:cb:31:ec:86:aa:50:e6:38:9c:b0:ef:af:f6:
                    17:7c:03:49:6f:3e:bd:89:05:eb:66:92:a0:03:f5:
                    07:f7:95:d6:53:e0:fe:bd:10:e5:ad:dc:78:bf:56:
                    f2:77:40:0d:db:17:d1:68:c2:4a:97:44:30:c9:17:
                    d8:9d:66:7d:db:92:bc:49:0d:70:aa:b2:42:c0:12:
                    3d:39:86:01:29:99:5b:62:96:e6:78:4f:de:81:50:
                    06:c3:1d:a1:da:a2:6f:46:8b:79:91:4e:0d:99:f6:
                    bc:d5:04:9f:3c:6c:df:83:63:11:4a:cb:bb:e9:b5:
                    c8:ee:93:91:62:76:10:65:62:e4:bf:8f:51:75:29:
                    31:2c:c0:1f:13:7b:89:92:42:cc:c9:89:57:59:f1:
                    90:4d:3c:d7:d6:f2:22:f1:9c:1d:42:28:d4:9e:b9:
                    50:4f:12:c4:5b:bd:02:d6:83:b9:35:d8:de:18:5d:
                    e6:34:a3:25:08:08:75:83:07:16:18:1e:cd:bb:23:
                    3c:2c:da:e7:be:74:ce:d5:2b:d6:c8:23:e0:29:02:
                    27:f5:81:4e:37:51:f3:d9:5b:5f:bb:e6:b5:17:74:
                    e9:22:0c:d1:f3:31:48:6c:07:66:28:a5:0e:19:39:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:67:B5:F5:8B:19:3A:82:EE:3A:E8:FF:D1:BF:25:2B:AA:D1:59:48
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k2e19YsZOoLuOuj_0b8lK6rRWUg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:de:5a:31:93:7b:47:cb:6c:e0:3e:80:cc:ca:cb:af:89:1c:
         1c:ce:b6:07:fe:1b:f8:70:b2:22:bf:aa:66:42:78:12:00:1e:
         62:d4:6f:e2:71:67:35:bf:f2:dc:93:db:e4:ad:2c:b4:60:ea:
         6a:a4:e7:c4:fc:63:d8:cb:19:ce:80:cd:49:ac:b1:80:3a:e1:
         b4:6b:6f:74:07:1a:dd:97:fd:5c:80:28:ac:7e:f0:7b:62:30:
         d6:82:cb:25:c3:a7:0f:79:23:40:a2:37:9f:bc:cb:80:85:ca:
         c1:b0:08:90:2f:d3:f0:27:ea:dd:47:1c:37:c4:fa:10:be:fb:
         87:ff:15:bb:8e:79:97:57:f3:64:db:47:27:89:da:36:e7:e5:
         43:db:c3:54:d3:eb:97:05:c1:0c:a6:3d:85:41:42:8d:66:1e:
         00:d5:eb:63:c3:91:5d:f8:4a:05:da:0b:47:39:44:9a:a0:a3:
         7f:5a:93:de:72:7e:ad:4d:c9:fa:84:b5:e3:a8:a5:72:57:04:
         ea:74:7f:49:8d:60:b5:a7:55:c3:a9:9a:da:3f:66:f8:b0:b1:
         11:98:f1:8f:07:84:f4:82:09:83:ce:df:61:17:62:99:6a:b9:
         c1:48:eb:a8:d5:9a:fe:13:0a:ac:02:9b:bd:95:02:74:c7:ff:
         10:88:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:36 2025 by rpki-client