Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7j0NICc0XZ_Vu7nxJD-FhOuBkoo.roa
File:                     7j0NICc0XZ_Vu7nxJD-FhOuBkoo.roa (raw, json)
Hash identifier:          8WE0YHilxbp8rWUhMhneq5R6ouwMAzmAxlpvfH6cnpU=
Subject key identifier:   EE:3D:0D:20:27:34:5D:9F:D5:BB:B9:F1:24:3F:85:84:EB:81:92:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01A7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7j0NICc0XZ_Vu7nxJD-FhOuBkoo.roa
Signing time:             Wed 24 May 2023 16:35:19 +0000
ROA not before:           Wed 24 May 2023 16:35:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.76.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:35:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EE3D0D2027345D9FD5BBB9F1243F8584EB81928A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:83:19:fb:6c:cc:73:77:58:4f:16:3a:17:
                    03:c0:fe:f6:fa:aa:6b:ef:b1:7a:1b:af:e8:78:87:
                    14:82:9c:6f:15:45:4a:dd:7b:72:36:cf:a6:2c:82:
                    0e:6d:cf:8a:2d:24:44:9e:30:dd:2f:8b:99:d6:1f:
                    a2:eb:13:5e:3e:98:cc:43:58:4f:f7:83:0a:b2:e9:
                    aa:fb:28:6b:d5:72:7b:59:24:92:dc:ae:c2:6f:5e:
                    33:4f:a4:91:12:54:68:89:ea:d4:4a:4b:b3:fb:d2:
                    8f:90:0c:e5:af:06:d8:86:23:27:ae:34:e6:52:1e:
                    c9:f6:1f:ea:b2:df:a2:89:d1:b8:4f:6a:2b:c0:0a:
                    c1:a5:63:22:cc:ad:a9:75:bf:ad:0e:ea:b5:1e:0b:
                    ba:ff:8b:59:6f:45:5e:af:fd:ec:dd:c9:5b:34:5f:
                    60:0c:6f:71:4f:3b:62:2a:a4:c8:90:b6:8d:db:2e:
                    aa:89:79:8e:ab:4c:5a:95:82:6a:b2:f5:4f:a5:43:
                    c5:43:f1:b0:3f:37:03:89:14:d3:c2:ee:97:c7:9c:
                    88:41:f0:93:d2:61:b1:ee:99:22:1c:c8:16:55:58:
                    8f:48:4d:21:0a:2d:84:a2:8d:ed:26:fb:ba:00:b1:
                    9d:a4:79:18:d2:26:07:23:6c:13:b2:57:d5:e3:c3:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:0D:20:27:34:5D:9F:D5:BB:B9:F1:24:3F:85:84:EB:81:92:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7j0NICc0XZ_Vu7nxJD-FhOuBkoo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:19:fd:02:09:46:d2:ff:a2:6d:a8:3f:f9:b8:43:d1:50:ec:
         45:e0:a6:62:aa:ff:56:84:6d:df:3f:4d:2e:3e:09:89:e7:87:
         d8:8f:ba:7a:3b:d9:7e:f0:20:47:49:a1:c1:09:50:fc:94:53:
         d9:7a:95:a3:08:b6:e3:42:ab:94:e6:d3:78:29:b4:1d:79:07:
         c2:fa:d5:71:98:e6:d6:0d:af:49:70:94:6e:37:2c:be:ff:1c:
         6c:12:30:9c:96:13:2a:94:fc:4e:f9:dd:02:86:fd:98:65:ba:
         9d:df:93:38:fe:54:a3:f6:97:a4:d8:dc:c8:74:7c:94:de:2b:
         49:5b:ef:86:79:0d:3a:82:7c:a7:95:23:2c:6a:ca:9f:26:65:
         a0:1c:24:38:7d:49:2d:e9:57:40:e7:4f:4c:ce:10:a8:07:00:
         a2:47:88:2c:69:82:3a:ac:79:c5:fc:fb:a8:ed:53:a1:b2:a8:
         2e:6a:17:34:4d:8b:36:63:b9:f3:54:29:a7:fa:99:44:e4:47:
         81:08:9a:01:54:29:71:7d:d1:9a:9a:eb:cd:7f:0a:ee:fd:27:
         3a:78:6f:ef:c9:42:af:7d:a6:60:56:34:ec:3d:1b:f3:90:3e:
         80:7d:ad:f8:35:9a:92:76:a6:5e:b9:3f:66:18:b7:fc:32:d1:
         99:15:ea:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:56 2025 by rpki-client