Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/voBgT4crPLJZj5YFt37PfOZYtdw.roa
File:                     voBgT4crPLJZj5YFt37PfOZYtdw.roa (raw, json)
Hash identifier:          szYN23kF4vpVih2snf5BaMJ3u/Qog6TwKwDRrMcp6E0=
Subject key identifier:   BE:80:60:4F:87:2B:3C:B2:59:8F:96:05:B7:7E:CF:7C:E6:58:B5:DC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       96
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/voBgT4crPLJZj5YFt37PfOZYtdw.roa
Signing time:             Thu 01 Sep 2022 01:28:11 +0000
ROA not before:           Thu 01 Sep 2022 01:28:11 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.212.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:11 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=BE80604F872B3CB2598F9605B77ECF7CE658B5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:3d:53:8f:37:ef:0e:f3:fc:a6:df:39:3e:
                    0d:b4:e6:d1:3f:00:2e:85:d9:c6:20:59:69:9e:7e:
                    de:c3:4d:d7:3c:d4:a8:fb:ac:b7:b5:fd:24:dd:21:
                    82:a4:0a:81:df:e3:d8:6f:06:05:15:ec:6e:8f:8b:
                    3f:83:57:01:c2:b0:43:ae:9b:d0:2b:cb:8e:50:82:
                    2f:0b:ed:0c:03:53:f0:c7:42:3e:73:20:ec:20:56:
                    10:15:e2:e6:fa:ca:21:7d:d2:1b:06:d0:35:f2:8a:
                    12:63:9a:6e:b2:19:ff:21:5f:cd:4e:0b:af:8b:eb:
                    11:b4:8a:c3:22:45:62:43:4f:70:df:34:59:f9:3e:
                    11:73:58:ec:d5:8d:32:2b:d3:00:b9:54:a2:6d:ad:
                    77:3a:29:74:28:5a:ed:7c:4e:96:9c:16:87:f3:5f:
                    e5:4e:5b:52:24:ff:51:f8:b8:18:92:49:54:63:f4:
                    24:ea:af:3e:14:5f:13:b0:8b:c9:ea:2e:8d:b8:42:
                    31:ca:26:f4:0d:1f:c7:84:92:5f:24:20:59:da:f1:
                    c2:0c:29:c9:d4:95:c3:84:d8:c5:ad:bc:d8:a0:13:
                    2e:b4:22:7a:0f:ee:3d:e1:6c:7a:70:df:c9:52:29:
                    89:72:0b:be:13:1a:a1:4f:9e:32:af:16:37:53:70:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:60:4F:87:2B:3C:B2:59:8F:96:05:B7:7E:CF:7C:E6:58:B5:DC
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/voBgT4crPLJZj5YFt37PfOZYtdw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:b8:07:fc:8d:23:af:b6:8d:51:53:4b:2d:e4:e5:de:2a:25:
         7c:25:73:cf:95:9c:36:33:73:70:97:8c:58:e1:a8:12:41:16:
         92:63:01:94:07:d0:61:f0:46:f2:73:cc:73:74:d1:22:5c:5b:
         87:8f:a9:28:c0:0a:24:bf:62:8a:86:4d:fa:50:36:69:88:c9:
         a2:3d:63:a0:cb:25:99:e3:80:11:fd:27:dd:e6:10:64:b2:aa:
         35:ec:ee:13:2a:54:96:3c:b2:45:e7:d8:67:6c:93:2d:70:e2:
         3b:97:69:f7:7d:85:76:40:9e:36:66:a0:18:0f:88:9e:66:59:
         ec:56:4f:b8:b3:a5:a5:48:fa:bb:1a:4a:f9:a3:61:ab:0c:f2:
         b7:19:4b:03:92:9c:df:15:72:a0:df:15:80:c7:93:4f:dd:de:
         c1:52:aa:0a:aa:09:9d:21:43:86:8a:08:a9:a4:07:85:6f:06:
         56:98:5e:37:03:fc:e1:7d:62:89:a8:c1:5b:32:99:a1:37:af:
         c5:81:b8:93:c6:27:81:26:42:ba:8f:56:fd:3d:72:ca:8e:27:
         27:6a:47:c8:cc:d4:7e:9e:fe:52:8a:da:d2:96:9c:28:cd:5d:
         02:df:b7:f0:f2:8b:b7:35:5f:cf:e3:73:82:55:50:cf:52:b5:
         b4:bc:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:57 2025 by rpki-client