Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/rYKOKBoB74-44YwsBtvH-n9XnSc.roa
File:                     rYKOKBoB74-44YwsBtvH-n9XnSc.roa (raw, json)
Hash identifier:          jwjhK/JViWrPk+A5i17gCAB1mIL80QWftkcvwVI2b2A=
Subject key identifier:   AD:82:8E:28:1A:01:EF:8F:B8:E1:8C:2C:06:DB:C7:FA:7F:57:9D:27
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       84
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/rYKOKBoB74-44YwsBtvH-n9XnSc.roa
Signing time:             Sun 01 May 2022 01:30:16 +0000
ROA not before:           Sun 01 May 2022 01:30:16 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        211.14.24.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:16 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=AD828E281A01EF8FB8E18C2C06DBC7FA7F579D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:8c:e2:eb:93:2e:9d:d7:e3:44:b3:57:d9:
                    42:dd:89:ec:ba:bd:b8:b4:75:15:60:33:38:5c:a6:
                    ce:41:c1:7e:27:b8:28:42:ae:c6:87:87:5f:7e:7c:
                    86:29:06:63:2f:9c:a5:d8:3b:36:42:9f:00:69:3e:
                    1b:e2:77:5b:d3:63:37:34:1c:93:96:92:31:d7:53:
                    a8:8c:ff:8a:7f:11:de:a3:22:27:4b:90:9e:a1:93:
                    ae:e4:48:5a:78:38:5f:d6:af:97:cb:88:34:f9:54:
                    62:0d:00:bf:38:12:b2:44:cf:a7:60:ed:79:2d:53:
                    eb:e5:41:e1:1b:97:81:e5:f2:b8:db:65:3d:4f:f4:
                    24:b3:c7:08:0d:f5:f5:6a:23:1f:5a:73:b6:ac:8b:
                    fe:d4:15:2f:9a:36:f7:77:4c:d7:2e:cd:1a:7c:15:
                    b5:a7:c2:dd:75:5c:62:39:2a:d1:73:e9:93:1e:68:
                    6b:1a:0c:a1:11:20:c6:98:ee:99:ea:d3:f5:20:d4:
                    cf:6c:ca:c2:48:6b:1e:13:0c:67:41:26:4a:0f:41:
                    74:d8:db:cf:3d:d2:e7:4a:8d:2a:2f:f2:1b:42:ff:
                    0e:fe:37:50:1c:59:8f:6e:f5:13:7d:56:a9:0d:fc:
                    e2:af:0f:37:a7:4d:3b:11:b5:73:7d:c0:43:1d:bb:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:8E:28:1A:01:EF:8F:B8:E1:8C:2C:06:DB:C7:FA:7F:57:9D:27
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/rYKOKBoB74-44YwsBtvH-n9XnSc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:f1:9b:ad:05:a4:a9:99:23:70:c7:14:9e:16:5c:6b:a3:
         72:ea:a2:c1:ec:ef:85:4b:47:00:5e:6d:f0:27:cf:43:b3:d2:
         ee:75:9b:b0:fd:54:90:4a:c9:50:9e:bd:d5:a5:ba:7c:bb:41:
         c6:16:bf:88:37:04:dc:ce:29:c5:c1:66:07:a8:96:74:9d:b5:
         4b:af:6c:26:47:79:ac:cd:90:cc:ae:e4:7e:7c:86:7a:70:62:
         ac:61:52:d6:48:de:6a:dd:a2:0c:b2:66:38:49:77:e8:28:de:
         71:2a:e0:6c:fc:61:81:75:a5:a2:1d:5b:3e:c1:39:99:cc:c8:
         e7:7f:ef:9b:e8:db:b0:24:cf:59:d3:e2:61:76:d9:fa:9c:9c:
         49:e8:ed:5e:63:ea:ad:13:5b:b7:0e:39:9f:54:83:b2:e9:b3:
         87:49:cd:bf:17:68:ec:61:86:60:d3:15:83:01:bf:b0:ac:fd:
         31:01:55:e5:c1:16:fd:93:14:70:d9:5d:a8:80:0a:da:73:06:
         b7:5e:fd:e1:24:a1:03:08:3f:dd:90:b5:78:4a:99:25:27:38:
         74:73:f4:2f:5f:70:95:61:32:43:6e:30:09:65:b9:e4:3f:bb:
         5d:2a:e9:3f:50:d3:da:9e:0c:7b:7a:f8:48:c6:f7:af:89:f7:
         62:c4:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:33 2025 by rpki-client