Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/kb1EqGq5jj62-wuzxkaE2_HWqXI.roa
File:                     kb1EqGq5jj62-wuzxkaE2_HWqXI.roa (raw, json)
Hash identifier:          MznKxSoY6WqKlPEKzjhwrda9Ze+fOLziY6dLQQ6mnVY=
Subject key identifier:   91:BD:44:A8:6A:B9:8E:3E:B6:FB:0B:B3:C6:46:84:DB:F1:D6:A9:72
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       92
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/kb1EqGq5jj62-wuzxkaE2_HWqXI.roa
Signing time:             Mon 01 Aug 2022 01:28:47 +0000
ROA not before:           Mon 01 Aug 2022 01:28:47 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        202.181.96.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:47 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=91BD44A86AB98E3EB6FB0BB3C64684DBF1D6A972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:a0:6f:b1:cc:68:87:38:a5:62:16:4e:55:
                    36:c5:33:92:7b:9d:5e:88:90:62:96:00:34:a2:4e:
                    af:43:04:d5:2d:3f:0e:7d:2c:5e:e2:22:b4:dd:c5:
                    8a:8f:a8:c6:bc:45:86:02:13:7d:7c:ba:1c:c7:a0:
                    fd:9b:56:df:39:27:58:c0:b2:73:fc:cf:aa:4e:05:
                    6b:9f:3a:de:e4:8a:f3:a1:5d:f7:81:0a:91:22:86:
                    d4:79:e5:a9:fc:66:a4:24:96:42:f3:16:c0:b0:5f:
                    77:50:e0:f0:ce:63:c6:0b:b2:4f:5d:05:57:8a:4e:
                    47:5c:e3:fd:27:26:1b:81:ed:f7:de:d8:47:cf:f3:
                    ac:e0:d0:58:2d:6d:0a:b8:fa:88:d7:56:c8:9c:3b:
                    e9:30:21:5c:81:09:5a:f8:c5:54:95:1b:5c:26:d1:
                    46:f5:10:48:6a:80:44:c5:55:6c:49:0f:af:39:6f:
                    e3:ad:48:8d:a1:fe:74:90:80:2b:18:1e:f3:ea:de:
                    28:4e:99:dd:d6:fd:c2:f4:01:b4:79:87:3e:96:15:
                    12:2a:f6:eb:17:6c:ec:5f:06:c3:82:ae:8b:c6:ae:
                    28:56:57:e7:cf:fe:91:6f:94:e2:2f:cb:52:07:12:
                    33:ca:59:61:1b:ef:62:ea:7b:86:e0:64:f8:a4:0d:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:44:A8:6A:B9:8E:3E:B6:FB:0B:B3:C6:46:84:DB:F1:D6:A9:72
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/kb1EqGq5jj62-wuzxkaE2_HWqXI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:82:e1:49:fb:f0:6c:02:a2:a6:8d:ec:01:14:e8:0b:ee:
         cf:de:7b:0f:2a:a2:f1:27:2e:1d:e6:5d:e8:b6:9e:b3:fc:2d:
         33:ab:f5:dc:a7:39:31:e8:6a:12:b7:ec:4d:a3:b9:64:bb:15:
         7c:98:19:d2:2f:f5:0f:40:7d:18:b7:ee:93:b2:cc:61:67:37:
         8d:b9:3a:5c:7e:58:18:42:a5:2e:f1:fb:e4:f8:6e:3b:f0:c5:
         cf:b5:cc:a7:2d:95:05:61:7d:1d:d6:2d:8f:81:b7:7e:04:ce:
         0a:13:58:13:b7:8a:29:e6:db:fa:09:3b:3d:5e:65:c9:49:aa:
         13:ef:2e:a9:af:c9:bf:3d:32:90:bb:d7:1a:b1:0c:be:c4:76:
         fd:a2:cc:01:bc:68:ac:b7:36:71:6a:a1:32:5b:11:d8:84:58:
         7d:7f:7c:a6:56:82:79:92:04:e6:ce:20:23:50:01:a8:8b:13:
         09:34:92:df:8b:13:80:93:90:70:ba:84:89:8b:f7:43:08:99:
         ad:5f:4e:2e:97:80:19:51:d4:4f:2e:a4:49:d7:7d:13:e9:cb:
         46:57:e6:f9:28:5d:31:05:0d:a2:e8:bb:a2:b9:41:89:a3:ba:
         be:36:60:4f:59:e4:1c:14:e6:13:f2:b4:f7:53:7f:2d:fc:18:
         70:75:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:35 2025 by rpki-client