Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/69B4qVDJkF5KuYr68Sv0lcmXlos.roa
File:                     69B4qVDJkF5KuYr68Sv0lcmXlos.roa (raw, json)
Hash identifier:          UL4owrENVr7uGPwFeHTuQfWDnIuNPtHDbrW7jwnfKo0=
Subject key identifier:   EB:D0:78:A9:50:C9:90:5E:4A:B9:8A:FA:F1:2B:F4:95:C9:97:96:8B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/69B4qVDJkF5KuYr68Sv0lcmXlos.roa
Signing time:             Tue 06 Jun 2023 16:03:04 +0000
ROA not before:           Tue 06 Jun 2023 16:03:04 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.204.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:04 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EBD078A950C9905E4AB98AFAF12BF495C997968B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d3:99:7b:50:c6:b4:35:be:85:9c:61:a3:c4:
                    01:36:e7:2c:dd:b6:e4:2c:db:7a:39:88:cf:78:7e:
                    83:b1:60:82:be:27:ff:f6:40:c4:48:0e:35:e3:51:
                    11:2f:af:cf:52:80:12:7f:7b:b4:fb:6d:73:44:f8:
                    95:fd:c2:5f:ff:57:59:23:40:92:90:a5:2c:33:9b:
                    80:d0:b4:eb:68:79:b0:57:9f:4b:fe:7d:48:c2:6e:
                    3f:6a:1f:a8:59:e6:0f:a0:fb:fa:ba:ec:70:8c:13:
                    f9:69:1e:9f:f1:1b:88:ea:8d:c8:3c:2a:ff:c5:aa:
                    de:30:1f:98:ec:aa:7e:c4:4c:ca:20:59:6a:16:b3:
                    0e:3f:5f:ff:10:c6:b0:43:60:c2:d7:03:a6:c4:10:
                    31:aa:95:ef:27:c0:39:78:1e:e0:d1:c0:55:5b:38:
                    fe:e5:06:52:01:c1:f7:7c:6a:4e:27:18:30:ee:15:
                    75:8a:23:3a:89:6a:db:d7:13:f7:20:3a:96:30:2e:
                    8f:82:1b:6f:38:f2:2f:ab:61:91:da:ed:ca:fa:ad:
                    23:e9:46:97:b0:c2:1f:de:e3:96:bd:65:48:7a:18:
                    fe:89:8e:ea:e6:e6:32:1d:17:7f:2a:d7:18:36:c6:
                    ca:07:5b:b6:76:e9:3f:15:29:f1:15:10:e6:06:71:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:78:A9:50:C9:90:5E:4A:B9:8A:FA:F1:2B:F4:95:C9:97:96:8B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/69B4qVDJkF5KuYr68Sv0lcmXlos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:24:d4:1d:0b:ad:55:21:40:3c:7c:ab:20:9a:db:22:1e:0b:
         74:13:6b:32:e6:e9:86:ca:f4:d2:2b:70:ac:1e:9a:e1:27:d3:
         f7:7d:b8:00:02:45:2a:09:b3:e5:42:68:cd:df:fd:57:36:ba:
         c5:31:c5:18:be:7b:75:29:dd:9f:9d:1c:4c:ae:27:7a:8c:62:
         0b:0a:1b:21:fb:76:b9:3c:b4:56:3c:29:b3:c7:01:41:b4:98:
         06:5a:fd:8b:14:6f:97:42:31:ea:f3:38:d1:d7:07:21:87:6f:
         9c:3a:bc:3f:d5:3d:ee:cb:04:20:73:61:81:b8:2e:40:e2:5c:
         69:04:16:06:25:5c:44:8e:82:43:f8:29:82:87:ac:e8:89:af:
         02:75:9a:17:44:82:5c:08:e0:2a:22:10:df:44:dc:8f:c8:90:
         12:70:ea:45:d5:6e:9c:d7:4c:8a:ac:30:49:4e:05:4c:f0:8e:
         1a:77:3e:1e:19:15:31:e0:41:96:c2:ef:89:78:c2:04:5e:18:
         88:c4:d7:c1:80:bd:64:06:0f:ee:20:68:2c:34:e6:a7:73:dd:
         d3:04:9a:bc:e5:fc:fd:3f:a1:60:cc:44:76:2d:91:24:86:3a:
         db:c3:83:1c:13:3b:5e:88:76:f1:1f:f2:5b:96:f1:98:c6:77:
         0f:95:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:25 2025 by rpki-client