Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lry6FrO4NI0dfn-JgtlYFGfoTDU.roa
File:                     lry6FrO4NI0dfn-JgtlYFGfoTDU.roa (raw, json)
Hash identifier:          /NporA2XOyCnUu/6J5RLO5lRRJ4UarNc7Xf4yNgDTCY=
Subject key identifier:   96:BC:BA:16:B3:B8:34:8D:1D:7E:7F:89:82:D9:58:14:67:E8:4C:35
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       013A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lry6FrO4NI0dfn-JgtlYFGfoTDU.roa
Signing time:             Mon 01 Aug 2022 01:28:39 +0000
ROA not before:           Mon 01 Aug 2022 01:28:39 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.39.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:39 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=96BCBA16B3B8348D1D7E7F8982D9581467E84C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:7c:d0:03:cb:dc:12:47:03:f7:08:69:74:
                    e8:f2:e5:f0:dc:61:d7:d0:49:c1:f1:63:eb:1a:34:
                    69:20:cd:ea:24:d0:8c:dc:b8:32:fc:1a:29:91:c8:
                    b4:0c:6f:e8:45:1e:95:12:0a:14:f2:b2:d7:a2:94:
                    2f:ae:95:df:47:f4:bb:58:4b:0b:aa:f2:a6:8a:fe:
                    a1:6f:94:7f:7e:f9:8f:d9:86:37:a8:be:5e:65:d3:
                    8d:3c:3e:c8:9c:c3:86:71:71:e4:6d:60:bd:86:10:
                    a9:16:02:e5:1c:ae:6b:98:50:09:d2:d7:d6:91:02:
                    61:ff:49:f3:1e:7f:8a:2f:73:1e:4b:a2:85:3c:d4:
                    69:92:62:4a:bc:ee:d9:bc:28:30:f0:8d:e5:1b:9f:
                    b8:66:e9:d8:10:17:e8:10:7a:72:61:95:13:1c:ef:
                    76:65:61:95:bb:05:41:bf:2a:85:a2:8f:7b:ba:8b:
                    05:37:5a:c4:ab:95:07:a8:24:c1:c5:5a:b8:3c:1a:
                    2e:e6:aa:9a:e9:fe:23:53:55:36:f9:b2:3e:ac:b1:
                    c0:38:be:36:c9:0d:33:2c:3d:41:48:b2:47:25:a6:
                    22:bd:3f:07:ba:24:f7:8d:ba:28:d3:04:bc:9e:e0:
                    62:75:aa:e7:5a:df:15:d1:e4:ce:3d:b0:8c:ff:12:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BC:BA:16:B3:B8:34:8D:1D:7E:7F:89:82:D9:58:14:67:E8:4C:35
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lry6FrO4NI0dfn-JgtlYFGfoTDU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:fe:7b:3c:6e:b4:13:08:c1:f7:6a:01:b2:0d:71:d2:bf:
         66:68:63:08:ef:01:a8:ce:84:7e:bd:f9:b3:f0:b3:3b:61:71:
         2c:b7:06:05:91:19:cd:75:41:0d:e9:5a:28:d4:14:6f:20:58:
         47:05:00:75:6e:a0:a5:c2:20:ce:bf:18:9d:bc:45:e8:a1:5f:
         00:92:c7:1e:d1:a8:9f:64:35:8c:1e:95:42:85:56:2e:d0:2b:
         9f:ce:03:7d:7c:73:e8:39:14:79:aa:1b:de:d9:5b:4c:ca:ea:
         f2:f6:83:25:e6:5f:56:e9:61:be:18:b0:d2:c2:7e:a3:b2:e9:
         c1:ca:e4:42:cd:ef:28:1c:cf:29:f0:74:6f:51:e0:0e:39:62:
         30:8c:86:da:c9:b5:84:7b:40:20:09:97:0a:b7:e8:ff:af:81:
         86:ad:44:bd:64:c0:95:f4:02:a8:7a:49:fc:d1:ca:55:e9:cc:
         e6:63:75:e8:e8:8a:d4:4b:12:db:11:02:33:b4:9b:3a:2c:92:
         1a:18:1c:a0:9f:ed:7f:48:71:b7:5f:45:ab:30:0a:02:a9:28:
         4a:c5:8e:97:a6:a9:4d:ce:52:e1:f4:c7:05:8c:88:6b:12:86:
         02:6d:e8:5f:cf:9f:cb:06:9b:dd:36:42:ea:bd:80:75:f7:e5:
         d5:d6:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:35 2025 by rpki-client