Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/TtEdBuAxjDZ_-muxgdchGaY8lSc.roa
File:                     TtEdBuAxjDZ_-muxgdchGaY8lSc.roa (raw, json)
Hash identifier:          TZExCDEbgST1XxV/lOaFFlMwiiZY5IDhX/UsSFD6bk8=
Subject key identifier:   4E:D1:1D:06:E0:31:8C:36:7F:FA:6B:B1:81:D7:21:19:A6:3C:95:27
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       15
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/TtEdBuAxjDZ_-muxgdchGaY8lSc.roa
Signing time:             Fri 31 Mar 2023 08:15:53 +0000
ROA not before:           Fri 31 Mar 2023 08:15:53 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18094
IP address blocks:        123.200.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Mar 31 08:15:53 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4ED11D06E0318C367FFA6BB181D72119A63C9527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:62:4d:b8:03:ec:d5:ea:f2:24:ee:3d:fa:09:
                    74:5e:49:86:47:40:e2:e7:8b:13:dd:6a:23:8f:50:
                    5a:6f:3b:ab:13:55:6c:dd:90:a0:db:1c:ca:94:32:
                    21:31:28:3a:6e:40:5d:02:ff:35:6c:70:ac:86:55:
                    12:ca:c4:1e:16:1b:33:0e:30:22:55:65:a3:15:b4:
                    9f:3b:de:bd:c9:ba:ae:6f:19:58:1a:9d:30:49:a6:
                    46:59:cc:7e:e7:bb:98:78:ef:6a:15:1d:59:00:01:
                    7f:0d:49:0f:96:ef:20:f5:63:cb:5e:d2:44:7c:32:
                    aa:0d:e5:9e:49:33:be:f7:7d:5c:1a:a4:a4:e3:02:
                    ce:a6:9f:31:cf:17:ea:59:ad:15:ae:dd:ba:c0:f7:
                    99:ba:c8:e2:86:f2:93:a0:00:6a:51:2d:c0:f7:3e:
                    43:a3:01:25:51:6d:6a:73:f8:6f:0b:ff:60:10:ae:
                    28:ad:36:10:d9:86:80:07:a7:c0:af:54:6d:91:8a:
                    f5:34:33:7e:8b:cb:17:ec:56:94:75:a1:5b:62:89:
                    8c:1d:73:64:bf:dd:86:e4:9d:5e:19:3f:32:47:1a:
                    a7:ed:31:a6:77:9b:f5:ed:aa:f2:54:c5:9d:80:71:
                    fc:88:43:b0:26:69:48:a8:84:5a:f2:44:80:cd:c5:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:1D:06:E0:31:8C:36:7F:FA:6B:B1:81:D7:21:19:A6:3C:95:27
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/TtEdBuAxjDZ_-muxgdchGaY8lSc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:61:7f:13:ee:f5:57:66:46:67:77:0e:c2:25:a7:11:ba:5f:
         5a:ef:6c:7c:4a:00:a3:e9:f6:e4:77:e1:c5:30:06:55:d9:da:
         34:89:b1:8d:60:d5:5d:af:d5:bc:f3:b5:b5:2b:20:06:b7:1b:
         56:29:e3:3b:46:09:41:64:ce:19:f3:12:56:54:86:83:ef:8f:
         6b:2c:df:55:ce:3d:8e:c3:ca:6b:a6:20:07:af:23:7f:cb:9a:
         f8:e9:17:9b:f9:1b:0b:c3:2d:8c:af:82:cb:01:4a:1d:c7:9a:
         7c:40:9c:78:e5:a6:0f:e2:3c:04:fd:e8:a1:fc:19:91:ee:4d:
         d3:5a:c9:52:59:3e:6b:38:55:0c:31:77:00:35:51:10:4f:52:
         41:fb:8e:3e:90:7f:9b:d6:dd:00:ff:ec:62:c0:54:5c:d8:24:
         57:83:2d:dc:19:8a:dc:d9:b4:db:87:8a:6a:e0:63:8c:f2:95:
         36:2a:c1:6c:f6:29:1f:75:29:4f:58:2f:eb:55:1d:ce:85:33:
         75:40:0c:de:e6:69:bb:7c:02:dc:5d:e7:cf:32:dd:a5:fd:9a:
         4c:b2:6f:9f:d7:11:90:d5:da:8b:83:51:4d:74:7d:79:c1:c3:
         57:94:48:2f:c8:2b:08:17:37:92:08:b4:7e:24:88:45:32:8b:
         5f:9f:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:54 2025 by rpki-client