Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa
File:                     CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa (raw, json)
Hash identifier:          DrxlhEN7WqJjSuby1mzI5KIurfPiaGTQpHRSAsXkbGk=
Subject key identifier:   0B:37:96:29:7B:C1:58:1A:A5:37:97:48:61:FE:CA:AE:42:19:1D:E2
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       12
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa
Signing time:             Wed 18 Aug 2021 07:54:18 +0000
ROA not before:           Wed 18 Aug 2021 07:54:18 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     24295
IP address blocks:        122.200.32.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Aug 18 07:54:18 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=0B3796297BC1581AA537974861FECAAE42191DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0d:ce:29:9c:32:c5:6b:be:5d:84:40:e9:10:
                    40:1f:ce:76:3c:75:74:8c:41:96:9e:09:5d:fd:89:
                    b0:fb:50:41:ff:6b:a2:06:77:bc:6a:cc:3f:ef:da:
                    fd:f4:fb:06:c5:31:98:4f:ad:fd:4d:21:99:00:07:
                    1e:55:7d:71:98:17:1a:17:11:75:d6:97:af:1d:a5:
                    32:a8:8b:33:74:04:71:a9:b7:7e:28:67:7a:c8:24:
                    a7:28:d8:31:81:1e:c9:2b:b3:b0:ec:ef:29:4a:d0:
                    c8:a7:54:aa:53:0d:53:cf:ce:f2:62:57:44:14:79:
                    d3:98:9b:1e:f2:a0:1c:12:12:f4:e8:9c:35:78:83:
                    61:bc:12:30:80:a9:39:6d:ec:2d:52:47:13:7b:6e:
                    28:50:ae:02:87:85:c0:fa:d9:ff:31:87:27:0e:d7:
                    56:e3:9e:3d:f5:27:a5:b3:b6:f3:bf:d7:b4:2f:75:
                    01:69:c3:88:93:a9:a9:64:f8:bf:f0:7b:22:0e:01:
                    bc:0e:81:c2:d0:78:21:5d:35:60:f4:a1:68:dc:0d:
                    1a:58:af:02:ab:d0:f4:e2:b5:e5:ed:da:3f:34:0c:
                    9e:f4:20:df:b9:10:da:80:4a:e7:dd:71:af:46:18:
                    93:88:1a:05:68:68:f1:6c:8b:02:4e:ce:74:12:45:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:37:96:29:7B:C1:58:1A:A5:37:97:48:61:FE:CA:AE:42:19:1D:E2
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:05:a0:7f:9b:84:93:26:ab:48:2a:6c:9c:1b:08:3f:36:
         41:d6:9c:2b:e4:6e:4a:47:50:00:e5:8d:22:ec:f8:16:06:68:
         54:7a:05:52:75:2e:38:2a:a7:e7:a7:2e:ce:b1:f8:4a:6a:d0:
         6c:07:de:b3:69:5a:75:7d:5f:38:54:cc:47:c0:b6:f8:47:60:
         c0:89:83:43:45:48:1e:8c:ef:ae:c0:8a:d3:b2:07:13:81:76:
         8e:48:60:80:6f:05:b3:31:90:5c:ac:06:fd:59:fa:2d:da:9f:
         96:4c:c3:21:12:2d:26:d4:09:25:07:58:88:c9:14:f8:f6:de:
         eb:ad:3f:25:1c:61:72:dc:71:04:fd:06:c9:4e:12:51:46:18:
         20:dd:9b:39:e4:45:58:d6:fc:40:9e:3c:11:9e:5a:8d:ae:51:
         9c:19:73:37:24:d6:f9:50:d3:65:19:8d:04:13:27:0e:f2:36:
         f3:55:a1:a1:36:0d:53:ac:41:d5:61:79:5f:df:71:1e:ea:a7:
         07:e3:22:15:e7:60:de:5a:10:68:39:97:1a:8b:c6:8d:51:96:
         8e:34:3f:8b:7e:5c:be:9a:89:42:38:ca:eb:e9:90:0a:cd:fa:
         a0:54:35:ab:6b:21:73:22:55:e1:99:fe:e0:42:b1:87:e3:47:
         b2:cd:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:18 2025 by rpki-client