Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/-OPhs4xa4NspLV10ok6l3_mwivA.roa
File:                     -OPhs4xa4NspLV10ok6l3_mwivA.roa (raw, json)
Hash identifier:          8vWC9OQ+duBi3trdlv6PYAcgrfJRtx/azvRanyOfqP4=
Subject key identifier:   F8:E3:E1:B3:8C:5A:E0:DB:29:2D:5D:74:A2:4E:A5:DF:F9:B0:8A:F0
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       08
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/-OPhs4xa4NspLV10ok6l3_mwivA.roa
Signing time:             Wed 23 Aug 2023 01:46:24 +0000
ROA not before:           Wed 23 Aug 2023 01:46:24 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     23791
IP address blocks:        202.122.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Aug 23 01:46:24 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=F8E3E1B38C5AE0DB292D5D74A24EA5DFF9B08AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:a1:d1:68:72:90:bf:ba:8d:ec:67:de:64:
                    28:7a:4e:e3:9b:64:3c:b4:11:90:5d:5c:95:5c:35:
                    b6:ed:0c:71:da:e4:60:03:23:2f:69:40:90:6f:fd:
                    54:f4:e0:23:01:88:ff:03:d1:76:92:a4:ab:f9:c5:
                    d8:d7:fe:be:ec:72:99:4e:e7:6c:8a:2e:f2:23:4f:
                    3a:c6:a8:24:ba:0a:e4:01:ec:0d:65:4d:97:d3:cf:
                    2f:81:f7:75:fb:1d:59:a2:2f:f5:8d:d9:55:e0:36:
                    3d:58:16:20:d7:d1:e9:42:d9:8c:16:2d:0b:2b:14:
                    6b:0f:cd:c0:0c:5a:26:8d:e3:be:25:a0:d0:0d:14:
                    fa:05:eb:3f:9b:96:3b:14:35:9f:ab:6b:a1:9d:22:
                    09:0e:8b:2a:20:13:ac:71:50:5d:84:ed:7e:0c:e3:
                    ec:22:98:57:eb:8c:6d:09:fb:6f:4d:48:e8:d0:fb:
                    09:81:16:19:cf:fe:95:27:f4:a4:3b:30:e7:5c:dd:
                    53:3b:84:47:be:a5:99:d5:ae:6e:36:6d:cf:e4:fb:
                    c6:3c:5e:49:6c:43:65:0d:cf:ad:f6:98:61:60:72:
                    04:ce:af:78:b1:c8:61:39:a5:b4:13:b7:78:2c:ec:
                    9f:9b:bd:6e:15:18:93:c6:e0:42:a1:ae:01:80:3b:
                    2e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:E1:B3:8C:5A:E0:DB:29:2D:5D:74:A2:4E:A5:DF:F9:B0:8A:F0
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/-OPhs4xa4NspLV10ok6l3_mwivA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d2:29:79:6d:7b:11:f1:a8:df:d9:d4:02:38:6f:fb:cf:b0:5e:
         f3:7e:64:d0:26:88:6f:42:a2:dd:b6:83:38:95:76:0b:a6:ce:
         73:fb:11:59:2c:3e:77:90:d3:3c:b8:ec:1f:60:13:15:62:e9:
         e3:1f:51:df:86:58:aa:db:f6:4b:ad:59:fd:3b:2e:19:72:43:
         8f:b1:c5:0e:d7:19:a8:ce:5e:28:6d:d7:e9:18:09:76:aa:22:
         f5:78:12:46:76:46:c3:04:3d:3c:8d:a4:37:88:f1:24:9b:40:
         19:c9:93:02:97:7f:13:6a:ee:07:5a:d5:fb:d9:71:82:d4:ce:
         62:eb:94:c7:2b:52:26:de:dd:b2:55:b3:f2:b2:1f:a9:6a:f7:
         04:4c:a6:46:fe:76:8e:ac:bb:4b:fe:39:08:84:69:12:a0:0c:
         b1:0c:c7:6d:02:02:2b:b1:86:ce:0c:c1:4f:db:c3:71:c6:9b:
         3b:29:28:02:de:f3:22:76:55:00:73:d3:bd:4b:a6:ad:cc:90:
         70:34:d8:5c:3d:b8:f9:03:71:76:16:b4:63:05:16:46:f7:91:
         fa:31:6d:94:f7:3a:d8:b1:ec:44:05:19:00:77:b1:3f:a6:42:
         0a:ac:d5:80:5a:c6:fb:8b:12:28:8c:4b:a6:c8:21:51:cd:b2:
         03:be:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:32 2025 by rpki-client