Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/tL19N6EZIJx2ykdBTYGneFI1tlU.roa
File:                     tL19N6EZIJx2ykdBTYGneFI1tlU.roa (raw, json)
Hash identifier:          TGBWT7kQmOFV4p7WissKFDEAYcwu2bcvQINsN/C1TU8=
Subject key identifier:   B4:BD:7D:37:A1:19:20:9C:76:CA:47:41:4D:81:A7:78:52:35:B6:55
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       06
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/tL19N6EZIJx2ykdBTYGneFI1tlU.roa
Signing time:             Tue 29 Mar 2022 03:20:48 +0000
ROA not before:           Tue 29 Mar 2022 03:20:48 +0000
ROA not after:            Wed 29 Mar 2023 00:14:48 +0000
asID:                     17683
IP address blocks:        202.227.64.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 29 03:20:48 2022 GMT
            Not After : Mar 29 00:14:48 2023 GMT
        Subject: CN=B4BD7D37A119209C76CA47414D81A7785235B655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:bd:84:19:41:aa:97:05:69:33:ad:89:d6:
                    1f:7a:08:8b:e5:83:6e:a2:96:0d:12:01:f9:70:dc:
                    37:a2:1c:72:cf:b6:42:f7:f7:3e:16:f2:28:86:82:
                    db:01:3c:8f:8b:94:b8:b6:36:55:a4:02:f9:43:91:
                    5f:31:30:e8:16:67:cd:b2:a1:6c:78:7b:91:1d:3c:
                    74:6f:07:4f:62:c8:04:ce:c1:e5:14:6c:fd:fa:00:
                    07:b8:3e:09:d6:09:4e:67:0b:f4:10:59:1c:96:36:
                    5d:f3:95:cb:57:07:37:cc:a6:21:fb:8a:fb:74:c4:
                    91:d6:2e:c7:d5:99:75:37:b2:8e:ef:37:cc:31:8c:
                    65:bc:5f:5a:65:0b:58:8d:26:1e:e7:10:99:b2:df:
                    3b:47:3d:a1:05:bd:ba:1e:d2:27:cf:6e:37:98:b6:
                    c1:9c:30:2e:b5:6f:ab:4a:bb:7d:3e:0e:31:e1:7b:
                    5e:c8:23:08:95:d3:ea:b4:d5:c3:de:ae:d6:a3:44:
                    eb:9b:a6:ad:e1:97:39:85:93:0d:f3:94:d4:ea:2d:
                    27:83:bb:c3:b6:a8:44:3a:67:3a:58:ad:07:7f:97:
                    2b:24:02:fb:7d:bf:0c:35:25:df:bc:b8:49:b3:f3:
                    26:de:11:6d:6e:0b:3e:4f:58:ec:56:fb:26:a6:4d:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BD:7D:37:A1:19:20:9C:76:CA:47:41:4D:81:A7:78:52:35:B6:55
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/tL19N6EZIJx2ykdBTYGneFI1tlU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.227.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b8:d2:01:64:aa:90:00:a4:16:31:20:3f:4b:d4:f6:4d:6a:53:
         a7:c0:b8:c4:75:cf:a6:4b:1a:db:97:b1:4d:60:84:38:6c:d2:
         21:35:5e:af:7f:5b:97:4c:cb:86:10:02:a2:8f:6e:64:cc:eb:
         fc:ef:af:5e:cd:ce:a1:0c:01:92:f0:05:3f:af:93:17:52:e7:
         8b:eb:9c:ba:1a:c4:29:1d:8e:4b:b1:2a:4c:c9:77:1d:9e:4c:
         10:10:28:d4:04:56:6c:51:fd:e9:9a:15:e1:5b:a2:22:9c:67:
         f6:f3:bb:43:c3:a7:28:a8:6a:bb:ef:ab:67:37:fc:ca:6f:37:
         16:95:c6:d2:db:c1:85:ad:15:72:0b:2d:ae:72:9d:e0:8d:ca:
         01:f2:3c:25:f7:23:3f:47:73:5d:a9:1c:ba:6e:7f:fa:f0:c6:
         a0:4c:c3:52:c7:8c:c7:d4:07:92:93:ca:25:a4:40:92:12:ca:
         d8:4e:7e:5d:76:3c:72:73:04:be:c3:ab:6c:4d:83:f3:71:31:
         90:8b:a9:5b:18:ac:6d:a3:38:90:eb:ae:ec:27:bf:54:04:47:
         91:49:e4:80:c1:e4:7b:69:90:dc:fe:4c:7e:84:40:bf:63:60:
         8a:b8:f2:f6:14:0c:49:2a:31:9c:0b:55:f9:8c:d1:30:e2:88:
         62:83:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:22 2025 by rpki-client