Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/SNR_39Rjb89fAmDrREQqFkFLdow.roa
File:                     SNR_39Rjb89fAmDrREQqFkFLdow.roa (raw, json)
Hash identifier:          IiKDVgyNxXRR8aimtE/XIGVw8VNq4bndq9nWLtnsJSo=
Subject key identifier:   48:D4:7F:DF:D4:63:6F:CF:5F:02:60:EB:44:44:2A:16:41:4B:76:8C
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       3A
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/SNR_39Rjb89fAmDrREQqFkFLdow.roa
Signing time:             Fri 01 Sep 2023 01:29:52 +0000
ROA not before:           Fri 01 Sep 2023 01:29:52 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17707
IP address blocks:        219.109.208.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Sep  1 01:29:52 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=48D47FDFD4636FCF5F0260EB44442A16414B768C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:e4:0a:8f:c0:8c:2d:37:89:b3:97:76:26:
                    ed:11:97:c1:99:6a:d9:96:72:2a:cc:a6:20:79:59:
                    56:4f:98:8a:88:73:2d:70:9c:d3:b0:ec:1a:90:b3:
                    ec:1c:18:98:62:66:2e:01:b8:2c:c3:58:41:4f:0a:
                    45:8f:4b:f7:c1:ea:1c:f6:e4:38:36:a2:91:10:c9:
                    6c:75:85:82:fd:c4:2a:d3:21:a8:40:f0:4c:41:59:
                    fb:24:48:43:e5:ee:57:69:33:de:ac:70:c4:df:b0:
                    ed:33:da:77:13:5b:34:63:b7:46:37:db:e7:35:2f:
                    47:34:7c:44:86:6a:a8:3e:5e:f0:f7:31:82:61:49:
                    0a:ef:09:06:20:7f:2c:aa:f1:80:2d:2f:7e:d1:20:
                    cd:71:56:02:a4:42:f8:0e:c3:fa:29:c5:68:14:68:
                    07:72:f1:f1:16:75:59:46:69:34:eb:48:28:02:c5:
                    56:c7:fb:7c:a7:75:0e:f0:02:a4:c4:6a:76:5b:cd:
                    33:65:a2:3f:7c:f8:bc:b2:c6:25:21:ab:d7:f0:5a:
                    ff:bb:86:45:02:85:cc:44:eb:91:bc:59:1c:8d:6a:
                    a8:48:fb:92:bd:bd:95:78:b3:e2:91:7f:6b:a7:56:
                    68:5c:e7:a9:68:e2:f6:10:fa:c2:61:7c:ee:99:19:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D4:7F:DF:D4:63:6F:CF:5F:02:60:EB:44:44:2A:16:41:4B:76:8C
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/SNR_39Rjb89fAmDrREQqFkFLdow.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:79:b7:e8:db:e9:bb:fd:0a:ac:71:32:cd:b8:55:2f:78:
         56:3c:29:bf:4b:f9:88:7f:cd:4b:b8:08:66:e9:46:d2:f9:a9:
         e8:61:d5:72:9b:79:0c:60:5c:9b:fd:36:b4:02:35:e3:1c:e0:
         31:2a:f7:d8:c4:bc:41:50:76:cd:39:a4:d3:bd:fd:81:89:95:
         5f:a9:4e:d0:84:ea:b9:40:63:b8:d2:92:53:4c:00:47:ec:91:
         5a:0b:b9:c2:c0:df:dc:a9:30:02:b4:37:24:77:8d:99:12:d2:
         5d:b0:0a:48:e5:1b:6e:13:ef:ad:f2:0f:b0:1c:0d:7b:5e:e2:
         cc:de:f3:01:03:70:a2:4b:66:9f:e7:b8:af:02:59:30:c5:23:
         33:78:7d:aa:da:22:f4:97:c2:5d:0d:09:2f:61:0b:ff:84:d5:
         90:d6:48:09:fc:63:07:64:29:f6:f7:d8:21:f1:c2:78:e8:a9:
         63:b3:93:dc:b7:20:cc:92:27:4e:cb:0b:6b:62:32:6a:21:0b:
         67:94:ae:f2:11:a7:93:ac:9b:f5:43:d2:4c:d5:a1:ce:99:2e:
         63:2a:e7:c4:2e:b2:eb:6f:44:ab:9e:80:f2:d6:47:67:db:f0:
         af:2a:65:1c:63:e2:52:fc:fe:69:d3:d5:17:7c:fa:fd:be:59:
         4e:4f:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:37 2025 by rpki-client