Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/p9FhS9CH-nvwfMJUh-FwmudDYc8.roa
File:                     p9FhS9CH-nvwfMJUh-FwmudDYc8.roa (raw, json)
Hash identifier:          RS5Ol8BCDGtlXipp4MGoYvbJKBnPT7ss4A6bI8ISGHA=
Subject key identifier:   A7:D1:61:4B:D0:87:FA:7B:F0:7C:C2:54:87:E1:70:9A:E7:43:61:CF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       EC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/p9FhS9CH-nvwfMJUh-FwmudDYc8.roa
Signing time:             Fri 01 Oct 2021 01:28:21 +0000
ROA not before:           Fri 01 Oct 2021 01:28:21 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.15.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Oct  1 01:28:21 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=A7D1614BD087FA7BF07CC25487E1709AE74361CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:23:94:5e:4a:77:12:08:31:76:de:2a:7b:
                    a8:5a:67:61:0b:99:7a:be:9b:90:e7:38:2b:5d:17:
                    be:11:bd:5f:ec:f1:f7:d7:2b:fa:cf:cf:68:2b:e9:
                    4f:d6:fd:14:03:39:ce:7e:16:d1:8f:a8:5b:e7:da:
                    40:47:d3:13:97:92:5b:79:9c:c3:15:77:09:9a:33:
                    c7:07:3c:90:da:c7:00:6f:b2:37:64:23:bc:a6:76:
                    78:fd:48:da:71:df:39:0e:53:d1:0f:be:ad:ea:2c:
                    f4:80:33:49:cc:35:a8:32:86:13:45:ee:45:f7:91:
                    e2:49:9b:f5:78:7c:a2:48:15:e2:d9:97:40:0d:0f:
                    c6:09:68:c7:46:82:07:da:b5:02:1c:2f:61:56:ad:
                    40:b5:61:45:3e:48:51:6c:4c:a3:22:92:66:05:df:
                    0b:45:a3:e4:fb:ad:f5:4e:33:ff:00:04:14:21:b7:
                    1d:f9:04:37:f9:95:23:ce:b0:0d:87:b8:ec:06:25:
                    f5:03:2e:e1:29:24:d6:96:71:61:2b:80:d5:87:c9:
                    e5:c0:5d:90:5d:80:3a:9c:37:bf:93:4c:3d:38:bd:
                    b5:34:66:45:42:a2:45:c4:c5:65:3c:41:23:13:8f:
                    67:cd:13:39:e4:76:79:36:1f:06:58:a9:fd:b8:66:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:61:4B:D0:87:FA:7B:F0:7C:C2:54:87:E1:70:9A:E7:43:61:CF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/p9FhS9CH-nvwfMJUh-FwmudDYc8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:01:9c:97:ab:87:68:af:d0:26:1a:66:3e:a9:f1:af:9f:8a:
         63:06:5e:66:05:c1:f4:a7:2a:44:0b:96:b3:1c:00:4b:94:ac:
         6c:cb:69:35:fa:d9:e1:9c:43:c9:40:b8:6c:0e:8e:ed:7c:2f:
         a9:1e:6e:04:ec:ab:6d:6d:87:4f:77:8d:aa:22:11:fd:94:6e:
         35:cb:fe:0b:63:7c:f7:db:fe:8f:b9:ac:d8:a1:7c:94:e4:fe:
         cf:da:4a:6b:c3:ca:5f:8e:6c:63:6d:e0:a4:11:68:c7:9d:9a:
         07:17:7d:3d:cd:9c:81:d9:8e:db:55:5f:d6:2b:02:9c:9b:02:
         c0:bb:38:81:c0:5c:28:b0:bc:d8:85:92:ea:62:28:0d:a0:97:
         62:e1:c8:49:7c:c7:10:68:5a:7b:e8:e0:58:e0:83:97:84:5c:
         1e:73:4e:bb:26:a0:d2:f8:64:e3:71:39:02:18:5d:18:60:9c:
         78:5e:69:b8:10:72:78:b4:32:a7:96:0b:09:72:6a:a0:92:da:
         cf:6f:6b:7b:ec:ff:c5:88:f3:12:ca:34:e0:fb:81:4a:1c:f1:
         ea:10:6d:c7:02:39:8e:38:4c:25:c6:d1:f7:51:e5:e6:fc:4f:
         e7:68:91:c7:a1:87:aa:2b:0d:71:02:c5:97:95:f6:08:0a:39:
         68:46:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:21 2025 by rpki-client