Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/ft3a-euDFMadQCeT4i6qXKgrDtc.roa
File:                     ft3a-euDFMadQCeT4i6qXKgrDtc.roa (raw, json)
Hash identifier:          Atc+TviI5/farwj++Uu8ydmqRGX2KDKAZnhLdamBuBE=
Subject key identifier:   7E:DD:DA:F9:EB:83:14:C6:9D:40:27:93:E2:2E:AA:5C:A8:2B:0E:D7
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       02
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ft3a-euDFMadQCeT4i6qXKgrDtc.roa
Signing time:             Fri 15 Apr 2022 01:12:32 +0000
ROA not before:           Fri 15 Apr 2022 01:12:32 +0000
ROA not after:            Fri 14 Apr 2023 08:17:47 +0000
asID:                     18094
IP address blocks:        123.200.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Apr 15 01:12:32 2022 GMT
            Not After : Apr 14 08:17:47 2023 GMT
        Subject: CN=7EDDDAF9EB8314C69D402793E22EAA5CA82B0ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:ce:27:27:0f:57:62:28:7c:17:9b:fa:d2:
                    c7:20:64:64:0c:a5:f2:30:e7:40:2e:8d:93:4e:54:
                    2d:ed:f6:17:63:b3:e7:16:02:3c:07:42:95:34:2a:
                    36:17:bc:3a:7b:86:6f:e8:e1:b8:bf:d7:5e:d8:46:
                    5f:0d:2f:86:c0:3c:df:66:6a:de:70:1e:22:fe:78:
                    fc:7e:95:42:c9:fd:21:0e:ee:bd:b1:49:94:c4:06:
                    6e:97:7e:cc:e0:44:d4:39:5d:f8:9e:43:ca:08:0e:
                    8e:f2:30:fc:c4:e1:74:87:00:73:ce:59:6c:55:b0:
                    52:3d:08:1a:4c:c6:ca:0c:b5:56:57:29:59:17:c9:
                    19:09:7f:1e:68:d4:af:20:7e:f1:78:c0:dd:fd:b3:
                    79:b0:56:fb:f6:1f:e0:ae:30:d1:c6:ac:5c:27:10:
                    77:3f:e6:74:c0:0f:2c:dc:25:a5:74:e7:08:30:b5:
                    1c:30:cd:45:ca:5f:2d:a6:eb:d9:d2:9d:37:06:ad:
                    52:58:9d:ef:28:1a:3b:9e:a5:85:f4:f4:db:0c:3f:
                    16:bc:77:9e:e5:fe:6b:94:4c:fc:9b:7b:a3:ec:5b:
                    ac:e9:6f:af:09:81:95:71:80:ef:18:8e:78:eb:e8:
                    a2:f7:8f:1b:ac:78:97:7d:4c:08:b8:76:51:b2:fb:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:DA:F9:EB:83:14:C6:9D:40:27:93:E2:2E:AA:5C:A8:2B:0E:D7
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ft3a-euDFMadQCeT4i6qXKgrDtc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:48:46:b0:a7:b5:83:a7:14:b6:28:9d:ec:02:f3:eb:5e:70:
         84:c6:ed:26:be:e0:c3:5a:16:24:4c:73:96:44:bb:e8:77:4b:
         1a:be:10:13:74:58:de:d6:92:b0:3d:1c:96:b8:4a:bf:7b:32:
         08:28:06:55:fc:b3:a0:7d:6c:39:bf:60:4c:d0:93:22:4a:2a:
         ce:ed:f9:cc:34:bb:96:ad:8b:63:ce:2f:4c:6d:ab:43:b7:8f:
         f8:40:3a:25:e2:23:ff:f3:ca:08:53:31:91:2a:fa:d9:91:eb:
         15:20:b6:ee:05:31:a4:ea:70:be:5c:b1:51:1c:0d:90:3a:8a:
         25:0a:0c:4d:cf:75:d7:74:b9:cb:a7:bd:8f:1c:40:69:fe:a7:
         52:50:46:71:54:51:fe:67:1e:11:fa:8c:13:3f:64:28:e1:d1:
         2e:77:88:bc:c4:f1:0a:c8:fa:4e:1c:54:36:8b:4f:96:8e:9b:
         85:65:cd:3e:58:35:7b:c2:f3:32:13:37:48:fb:c3:75:55:62:
         df:b9:81:52:78:fe:fc:7d:c9:d6:82:65:49:cd:28:2f:6e:4b:
         85:e3:37:bd:b4:d5:e2:76:b1:0a:17:fd:86:57:87:f2:74:1b:
         5f:83:49:f0:cc:77:b7:41:69:95:bb:b0:f2:42:bf:fe:9c:2d:
         79:2f:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:30 2025 by rpki-client