Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/2rJ6uYT26WgV8FlhjrBvXy8E-OE.roa
File:                     2rJ6uYT26WgV8FlhjrBvXy8E-OE.roa (raw, json)
Hash identifier:          6hvNEnSKPwzqnPyatQbgAOztKuHWGc1uxqMZ3ftyejg=
Subject key identifier:   DA:B2:7A:B9:84:F6:E9:68:15:F0:59:61:8E:B0:6F:5F:2F:04:F8:E1
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       71
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2rJ6uYT26WgV8FlhjrBvXy8E-OE.roa
Signing time:             Wed 01 Sep 2021 01:30:25 +0000
ROA not before:           Wed 01 Sep 2021 01:30:25 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9370
IP address blocks:        113.20.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Sep  1 01:30:25 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=DAB27AB984F6E96815F059618EB06F5F2F04F8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:a7:0c:f2:8b:cc:ac:01:52:6d:0c:73:e4:
                    54:59:63:c8:99:9c:4b:dd:4f:63:25:56:cb:6f:1f:
                    f1:b9:b3:28:ce:83:19:b7:1c:30:0a:74:4d:cf:e2:
                    5f:b4:80:c9:3f:bf:98:16:e8:b0:55:56:99:72:78:
                    7a:ad:2e:ea:01:2e:b5:19:9f:ea:04:84:9a:0a:87:
                    8b:16:e1:8a:86:66:6a:2c:98:64:f8:ec:a3:dc:87:
                    40:17:13:d7:a7:09:d8:d5:29:2d:4d:e6:0e:4a:9d:
                    f8:1d:3e:47:e9:2b:d2:96:53:27:96:0b:2a:b6:0c:
                    58:f7:db:3c:36:b1:94:f2:32:3d:7f:76:71:8d:7f:
                    92:53:35:85:57:4f:66:a2:d8:4a:d1:95:ab:c0:c9:
                    4f:53:5a:1b:83:dd:98:28:d3:d8:43:37:7a:d0:83:
                    92:df:ad:c9:c4:58:06:79:31:96:2b:99:d9:ea:62:
                    6b:7b:14:ba:bd:03:48:87:a2:4d:52:9d:18:6e:70:
                    4c:d5:87:7c:db:fa:ab:6e:78:84:02:11:f1:7a:a8:
                    d1:ef:4e:3f:17:13:80:4c:c6:b2:cb:a9:ee:34:04:
                    36:fe:e8:8f:54:56:f9:36:78:96:56:39:2f:d4:fc:
                    47:0a:8d:81:e2:51:1d:3f:d6:8c:5d:df:f5:de:83:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:7A:B9:84:F6:E9:68:15:F0:59:61:8E:B0:6F:5F:2F:04:F8:E1
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2rJ6uYT26WgV8FlhjrBvXy8E-OE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:38:c3:6f:0a:b7:14:d9:3d:2e:b5:dc:24:81:b3:c2:2e:a4:
         68:8b:5f:19:39:b9:2c:74:35:37:3d:a1:4f:8c:a9:35:f6:b7:
         6e:97:e6:e1:71:30:5b:0a:f4:36:d3:dd:44:82:4a:95:9b:ec:
         98:36:90:a9:e5:e1:c6:c7:4e:59:9e:b9:3a:87:35:65:3d:6b:
         78:f0:30:ab:d8:74:ba:f9:ff:57:b3:87:38:7d:c4:17:ea:34:
         9a:5a:f1:5a:66:e9:32:ff:f8:f8:19:e4:ba:8d:f6:f9:20:9e:
         6a:0b:de:d0:62:e9:b0:76:6d:f9:cc:18:be:03:ed:a9:e6:4f:
         f1:e7:c8:60:0c:6a:dd:6c:35:19:cf:f4:cf:cc:f0:f7:44:47:
         81:85:41:c7:62:32:0e:4d:aa:b3:62:9c:4d:a5:34:cc:18:67:
         a7:24:c4:3c:44:26:80:4a:48:59:32:8a:41:b1:ec:38:a2:f4:
         4c:35:de:79:3f:cb:39:b4:1a:8e:93:9b:0e:00:8a:18:41:ab:
         2e:17:dc:6a:b0:47:27:ce:a2:a6:fd:41:22:22:05:01:fd:ea:
         80:6f:dd:fb:e2:ad:6e:ea:27:88:d2:66:7a:f2:7b:e9:b5:cd:
         79:f3:b6:23:fd:70:a5:10:f3:db:44:49:d8:b5:47:9d:2f:83:
         13:5d:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:05 2025 by rpki-client