Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/odAOGATqHDa6Bz1RioQq50021kY.roa
File:                     odAOGATqHDa6Bz1RioQq50021kY.roa (raw, json)
Hash identifier:          6+XspxWEiqfC90hotE82pIqLZgr3rYGtnLt2GBouEuY=
Subject key identifier:   A1:D0:0E:18:04:EA:1C:36:BA:07:3D:51:8A:84:2A:E7:4D:36:D6:46
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       F2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/odAOGATqHDa6Bz1RioQq50021kY.roa
Signing time:             Fri 01 Oct 2021 01:28:23 +0000
ROA not before:           Fri 01 Oct 2021 01:28:23 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.9.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Oct  1 01:28:23 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=A1D00E1804EA1C36BA073D518A842AE74D36D646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:40:f9:35:1a:e3:fb:6f:8c:1e:37:d9:48:
                    f3:e3:51:39:b8:7d:b5:73:2e:c2:bc:8e:71:b5:56:
                    29:23:a9:48:ed:ff:0b:a9:16:f5:ad:45:55:7a:d4:
                    c2:f4:21:d0:4f:5b:8a:58:2d:ac:ee:43:d9:3c:b2:
                    41:9e:38:f1:1a:e0:f2:57:51:30:e0:ec:e2:e0:21:
                    50:52:16:6f:a1:8f:05:31:06:a8:89:9e:16:3d:cb:
                    cc:13:64:f0:7b:8e:4a:21:8d:ed:a2:98:7c:24:88:
                    28:75:ed:37:2d:90:f0:c2:0a:38:6b:28:36:15:8f:
                    49:32:1e:e9:e0:3d:d6:c1:1e:70:ac:63:bf:d1:95:
                    fb:9e:b0:d8:a1:21:03:2d:15:c0:e0:e3:ab:fa:60:
                    82:d5:83:5b:bf:f0:17:d7:3f:c6:c2:6b:08:6e:a8:
                    f4:ad:2e:56:f6:4a:d4:1f:f3:ba:c0:1b:75:0f:f2:
                    c1:78:93:95:c6:53:55:38:31:8c:f0:70:6d:b8:67:
                    4a:b3:53:d7:28:ae:87:09:34:9d:6b:4d:34:a2:49:
                    7a:71:42:e6:52:85:8a:9c:9d:4e:00:d8:7c:77:fb:
                    ab:eb:93:49:25:aa:2d:e8:ba:b0:25:5b:f3:dd:db:
                    fb:46:f6:cc:c3:73:92:0b:e5:03:fb:05:c0:4d:57:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D0:0E:18:04:EA:1C:36:BA:07:3D:51:8A:84:2A:E7:4D:36:D6:46
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/odAOGATqHDa6Bz1RioQq50021kY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:19:61:e0:08:c2:9d:1c:30:c3:48:0a:b4:3c:b1:18:f4:33:
         90:c0:ac:7b:3b:0a:eb:9d:e3:37:a5:cb:4d:7d:be:51:a9:b5:
         e2:3b:09:80:76:12:8c:97:50:3f:98:6b:53:6e:40:ee:17:82:
         07:88:58:e6:ad:80:54:fa:03:50:54:80:93:6f:06:be:75:f3:
         17:2c:15:0d:14:2c:95:e9:00:92:b0:a6:41:2b:9f:b4:5d:4b:
         c9:0d:88:69:53:49:50:a8:f0:13:12:a9:ed:6c:d7:e7:62:c0:
         01:75:d9:16:5f:9e:b0:4b:9b:30:fd:f8:b1:4b:00:1a:15:1c:
         81:c9:b3:ac:41:a2:31:9a:3e:fc:94:7a:ad:a9:ba:e5:fd:22:
         2f:98:08:4e:6d:5f:77:14:7f:f6:87:b9:79:92:fb:c9:69:19:
         5f:d7:01:1e:b4:dd:b4:e6:3b:a3:47:07:46:15:bc:1f:d5:ff:
         69:64:8f:21:5e:fe:10:0b:12:1b:71:a4:2f:2a:a4:6c:2b:74:
         6a:66:63:92:3d:f8:c2:45:25:4f:89:31:6b:9c:56:b4:fd:b3:
         49:cb:de:3e:83:89:51:54:7d:99:68:aa:8a:9b:b2:4a:fe:d4:
         7e:d1:d3:cf:46:9d:b8:e6:32:4f:42:09:36:f2:85:c5:c1:04:
         b1:95:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:13 2025 by rpki-client