Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zO2IujEJCmoSvXnDOFin5OmeC8A.roa
File:                     zO2IujEJCmoSvXnDOFin5OmeC8A.roa (raw, json)
Hash identifier:          ztvaYJgE56lpOkJuuV8BmjfTo88BUbaR2SbHreWecY4=
Subject key identifier:   CC:ED:88:BA:31:09:0A:6A:12:BD:79:C3:38:58:A7:E4:E9:9E:0B:C0
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       014D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zO2IujEJCmoSvXnDOFin5OmeC8A.roa
Signing time:             Thu 01 Sep 2022 01:28:32 +0000
ROA not before:           Thu 01 Sep 2022 01:28:32 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     9371
IP address blocks:        202.255.237.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:32 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=CCED88BA31090A6A12BD79C33858A7E4E99E0BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:ce:17:9f:6d:1a:3c:86:9a:63:2e:62:e4:
                    37:1f:dd:e3:90:a9:f6:28:6b:36:40:17:9c:c2:52:
                    7e:d8:1e:03:64:79:32:b0:87:47:14:aa:7b:0a:40:
                    f0:88:8b:8e:4a:f7:b2:b2:1d:e2:2d:fe:35:c2:4c:
                    f7:14:1c:46:43:cb:16:0f:c6:11:e1:e3:96:46:35:
                    a2:90:71:9f:6d:aa:4e:9c:70:00:20:c8:57:c0:33:
                    35:46:fd:da:5a:57:ec:f2:bf:65:25:06:b8:f3:b6:
                    95:d3:a7:4a:ae:c4:14:32:21:f5:91:90:6e:6e:3d:
                    53:d2:30:68:20:47:47:1a:65:ad:42:18:c2:84:75:
                    6c:95:ca:34:64:ad:f5:09:ee:7d:ac:23:53:b5:6e:
                    b3:54:28:f7:21:a0:37:92:76:2d:96:dc:7d:84:32:
                    cd:e7:55:dd:2e:68:91:fd:5c:ce:ed:a9:4f:ca:8e:
                    8a:45:68:f8:53:c1:74:0b:d5:7e:a3:c9:05:3f:9c:
                    2c:3e:a3:94:b6:aa:c4:24:11:4b:1a:3a:4e:84:a5:
                    56:4f:f6:3e:ad:2a:09:ba:d8:89:9c:c6:f2:0d:2f:
                    4f:2d:d2:de:a5:e8:c1:f0:7b:d1:a6:62:04:7d:4c:
                    fb:db:0a:a1:04:46:50:c8:4a:0d:d7:d6:53:fe:40:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:88:BA:31:09:0A:6A:12:BD:79:C3:38:58:A7:E4:E9:9E:0B:C0
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zO2IujEJCmoSvXnDOFin5OmeC8A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:cb:aa:70:62:1e:0d:a7:66:1b:39:02:9b:3f:13:b4:73:85:
         62:a0:3d:b5:e2:26:72:a7:3f:37:1c:ee:a8:4a:07:d0:ff:bd:
         45:7e:f1:f7:31:78:5a:55:69:29:64:86:c0:f7:db:6f:3b:74:
         af:ed:84:ab:7c:22:48:41:5d:c3:77:0e:5c:7a:4e:b2:dc:d9:
         57:90:dc:49:9a:ba:53:22:57:6f:33:83:c6:d1:e9:44:ef:1e:
         52:af:39:1e:c5:45:c3:85:29:60:dd:d0:57:94:43:d2:02:1e:
         45:73:79:71:5a:e5:53:e1:6c:ec:4b:14:59:1f:7f:92:b3:f7:
         a6:d3:2b:86:38:c4:ef:4d:ce:d0:4e:74:c1:33:7f:64:64:3b:
         15:10:d6:08:33:66:7b:4c:50:2d:19:6a:6a:77:5c:2a:3d:c5:
         10:b6:82:d1:64:cb:49:28:3f:6e:84:3d:eb:57:7f:13:18:a8:
         d6:20:17:3a:49:fc:85:e3:87:e3:0e:b8:99:41:4c:15:f4:0d:
         57:e8:f2:41:1f:a1:18:5a:26:0c:9b:a7:f6:dc:25:46:3d:25:
         41:94:1e:88:aa:8e:bb:26:54:89:50:18:e8:14:06:e6:98:cf:
         40:23:c1:22:3c:6f:f1:2b:a8:cb:5f:5b:fe:79:20:5c:c8:eb:
         c8:9e:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:29 2025 by rpki-client