Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/eDlzJ8QiduSb9MIWazjrbHqDsLE.roa
File:                     eDlzJ8QiduSb9MIWazjrbHqDsLE.roa (raw, json)
Hash identifier:          CoXWDCJPWXDJkhepVLePzclHiHmYmAST5zaUI/Od+7w=
Subject key identifier:   78:39:73:27:C4:22:76:E4:9B:F4:C2:16:6B:38:EB:6C:7A:83:B0:B1
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       18
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/eDlzJ8QiduSb9MIWazjrbHqDsLE.roa
Signing time:             Thu 21 Oct 2021 06:39:04 +0000
ROA not before:           Thu 21 Oct 2021 06:39:04 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     17675
IP address blocks:        103.28.24.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Oct 21 06:39:04 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=78397327C42276E49BF4C2166B38EB6C7A83B0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:fc:84:b1:dd:da:ef:66:a0:7d:3f:2b:e0:
                    53:cc:32:ad:ba:d3:bb:4a:e3:23:cc:d2:e1:8d:ed:
                    6c:2a:f8:ec:a5:8c:db:d1:d2:0f:00:93:3f:f8:33:
                    11:f0:7b:d3:2a:16:3c:ad:c0:a8:3a:87:64:cb:d1:
                    5a:be:81:17:90:c8:0c:df:73:44:e9:00:f8:2b:49:
                    e4:d1:bb:0b:56:48:64:fc:cb:7c:7f:eb:67:65:29:
                    1a:8d:3d:be:8b:45:15:98:43:a5:15:45:38:71:da:
                    20:1d:25:bc:b1:af:42:00:fe:fd:85:ef:bf:18:40:
                    30:4f:4d:e9:b9:d2:02:13:f2:51:24:ec:99:97:26:
                    14:cd:7a:1b:9c:4b:4b:dc:f8:9e:ce:36:fa:b6:aa:
                    fb:4d:99:0a:78:6a:cc:06:0e:92:8d:c9:e0:99:3e:
                    0c:30:a4:7c:bd:83:39:c8:52:78:68:71:7c:18:fe:
                    53:9d:f8:85:23:ea:14:ed:3b:38:5e:49:31:50:1b:
                    09:18:31:dd:50:9a:a4:42:ff:d7:c2:d1:c4:87:e9:
                    1c:48:52:7b:da:6a:21:89:7a:75:9f:79:c8:1c:58:
                    36:19:05:aa:ef:c7:40:19:df:04:7a:e9:e5:ac:ad:
                    66:76:f3:d1:d3:a5:1a:2d:d1:c3:49:f2:0e:4c:4b:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:73:27:C4:22:76:E4:9B:F4:C2:16:6B:38:EB:6C:7A:83:B0:B1
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/eDlzJ8QiduSb9MIWazjrbHqDsLE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:47:d2:5d:f3:4b:03:31:c1:2c:80:b1:d2:0d:1a:e1:b7:
         fa:7d:43:dc:bc:eb:ad:54:17:b3:1c:8b:d2:0a:6a:d6:65:9f:
         a9:cc:17:ae:61:5a:2a:10:db:9f:2d:68:d0:16:a9:8c:c3:d5:
         ff:e3:94:cc:1c:97:e3:65:e5:6d:94:ff:27:54:4e:f7:a2:28:
         bd:c1:cd:fd:aa:41:61:6b:f4:ce:37:ec:51:59:97:d9:21:4d:
         3d:23:96:f5:64:e7:af:ba:86:6b:8a:6c:45:1e:e6:e3:88:d8:
         20:db:cf:55:bd:c4:af:e2:5a:bd:6e:b2:8c:af:78:b0:ad:3b:
         73:cb:b6:30:82:d6:43:4a:79:06:ac:7a:9f:7b:0f:f0:df:ff:
         ad:f6:00:c5:25:20:94:c8:f0:ab:0c:af:c3:46:72:e6:76:ae:
         d5:78:34:ba:93:10:47:37:39:d1:63:f6:f5:93:4c:bd:2c:3f:
         48:ee:99:e6:0a:02:dd:af:a6:e8:e0:65:aa:ab:bf:ce:a3:8b:
         6a:9e:7f:ea:e5:c9:f2:d6:39:41:50:46:18:a2:3e:a5:b4:ba:
         af:f5:79:7a:f2:74:84:c8:b2:90:09:b0:99:dc:44:54:a7:59:
         c4:ad:bc:92:04:44:ea:00:fd:07:67:99:a2:a9:c4:8f:aa:8d:
         f0:5f:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:04 2025 by rpki-client