Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/_tTD_Gg0lPERviF3jCaDuDZqRhU.roa
File:                     _tTD_Gg0lPERviF3jCaDuDZqRhU.roa (raw, json)
Hash identifier:          FmyinW8bSUffAmfK+9zuqjeC0aFKnJGa/MnJNYRdQLY=
Subject key identifier:   FE:D4:C3:FC:68:34:94:F1:11:BE:21:77:8C:26:83:B8:36:6A:46:15
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       3A
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_tTD_Gg0lPERviF3jCaDuDZqRhU.roa
Signing time:             Tue 01 Feb 2022 01:31:14 +0000
ROA not before:           Tue 01 Feb 2022 01:31:14 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        147.192.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Feb  1 01:31:14 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=FED4C3FC683494F111BE21778C2683B8366A4615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:57:a7:d6:77:66:87:e4:04:23:16:94:09:
                    ca:3e:af:c2:af:a0:14:f9:4b:9c:f2:5e:03:60:3d:
                    c8:52:c0:af:86:ab:a1:a2:2d:69:5d:97:e5:c1:53:
                    0a:e1:87:55:5e:7c:18:2e:e1:49:55:8d:81:84:7f:
                    81:a6:05:77:60:42:03:5f:7b:18:bf:41:3b:b3:cb:
                    07:34:99:4f:26:2a:7a:c0:76:d1:b7:14:45:ef:73:
                    a4:a5:a8:1c:28:c7:52:ed:00:fd:83:ee:6a:c1:06:
                    0e:88:20:0c:1a:2b:4c:a7:6a:da:b6:e8:bf:b2:ae:
                    d3:0e:5a:11:34:08:7b:b0:2b:ac:bd:cd:d7:e8:86:
                    1e:ad:63:43:f6:ce:aa:89:aa:82:c3:29:b3:40:8e:
                    c4:f3:f2:55:bc:76:57:0e:e9:40:1a:97:7f:b5:55:
                    ae:85:a1:6d:62:20:eb:4c:79:53:55:8c:82:f1:11:
                    5c:44:5c:18:d4:8b:e3:2e:be:c4:30:22:bd:2d:44:
                    7f:73:c7:6f:b6:7d:00:a5:ab:49:20:70:81:b0:a0:
                    24:d6:b7:37:13:85:c8:3d:dc:4d:95:8f:fa:cf:f4:
                    4c:00:31:f9:cf:e6:e0:9a:25:9b:c8:3d:e1:ce:a2:
                    f4:ab:d6:50:1a:af:50:59:83:29:32:86:17:4f:c9:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D4:C3:FC:68:34:94:F1:11:BE:21:77:8C:26:83:B8:36:6A:46:15
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_tTD_Gg0lPERviF3jCaDuDZqRhU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:d5:8b:a4:59:28:7d:0e:0b:8a:7f:81:f0:48:ca:b7:08:
         8e:59:50:19:f4:51:5e:39:bf:fa:71:56:40:ec:7a:ed:12:18:
         cc:59:96:30:02:78:cd:95:36:d3:2e:41:95:55:5d:3a:3a:47:
         72:0a:6a:89:16:67:5d:eb:cd:af:79:c3:f0:27:a9:57:cb:ac:
         c9:a9:89:9c:da:87:51:89:0e:94:2f:ef:ca:e7:ee:75:92:22:
         b0:8e:82:bc:f1:e4:32:48:79:a3:e2:b7:2c:82:67:dc:4f:19:
         da:a3:ad:42:3e:95:1d:97:c5:3d:67:d4:a8:05:45:da:78:b0:
         ba:ab:57:1a:b5:59:b0:87:25:9d:ed:f0:7e:c5:2e:cf:70:58:
         f1:17:0c:3c:3f:8b:4d:65:f8:67:df:d5:3a:ad:c8:83:00:a0:
         54:95:6b:7d:6c:e1:f3:9e:c3:77:fb:5d:7f:53:0d:ee:45:37:
         e0:37:22:54:e3:6f:13:3f:87:58:a6:f9:20:95:6a:28:11:0e:
         2d:81:2f:3f:cf:f5:ed:b3:f0:7d:6c:6d:99:3d:6d:56:53:48:
         f8:0f:59:99:9b:f3:3d:3f:93:f3:43:a5:c1:5c:54:a0:91:5c:
         db:f9:d6:8c:2d:30:60:18:46:39:8d:ed:72:9f:af:90:ed:23:
         fa:b2:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:25 2025 by rpki-client