Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9RxekmgJj_cSrQaSQP_fPkAaZVg.roa
File:                     9RxekmgJj_cSrQaSQP_fPkAaZVg.roa (raw, json)
Hash identifier:          AeTYQnZtNNUopxlG5oTdLTLNAg93dgZ8sw4eh+AlJvE=
Subject key identifier:   F5:1C:5E:92:68:09:8F:F7:12:AD:06:92:40:FF:DF:3E:40:1A:65:58
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0299
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9RxekmgJj_cSrQaSQP_fPkAaZVg.roa
Signing time:             Tue 30 May 2023 16:36:30 +0000
ROA not before:           Tue 30 May 2023 16:36:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F51C5E9268098FF712AD069240FFDF3E401A6558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:1b:ff:78:c1:44:a4:32:ee:f6:58:86:1d:
                    a3:8f:b5:d1:47:2a:a1:d4:03:0e:2d:08:62:65:4d:
                    1a:4e:0b:3d:61:b0:57:8d:54:18:3e:04:11:b4:f3:
                    53:79:db:0a:ad:83:7f:ea:ba:e9:d2:07:59:ed:a6:
                    36:a3:3a:f5:7c:d0:a5:22:45:c2:7a:63:fe:f7:52:
                    03:8a:cb:59:6b:1b:9f:1b:3b:68:a1:d1:57:e1:3c:
                    dc:7b:74:8f:ff:68:b2:ae:dd:c1:14:d5:37:55:af:
                    cf:02:8d:62:55:30:ed:83:8f:b2:3b:aa:5c:1d:22:
                    35:d7:77:c2:8f:4f:5e:13:27:9f:7b:41:e9:a0:99:
                    25:77:92:e7:7e:5e:e4:31:d0:29:70:28:23:4a:4d:
                    ea:7f:95:06:ab:c7:65:4a:41:5b:c5:a9:6e:e4:f9:
                    91:38:2e:ed:42:71:d0:42:fe:c5:06:63:dc:b3:b5:
                    8b:06:70:fa:82:af:a8:eb:c1:77:38:58:94:0e:48:
                    02:58:5e:69:bd:84:7e:e3:c1:15:50:51:2e:c4:5c:
                    72:22:e1:c9:4f:80:52:38:1a:a6:0a:99:ab:70:fe:
                    f9:64:21:10:de:11:61:7a:02:b8:5a:93:c4:b2:a4:
                    58:84:9b:02:79:c6:4a:fb:77:f6:9f:fb:0d:aa:54:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1C:5E:92:68:09:8F:F7:12:AD:06:92:40:FF:DF:3E:40:1A:65:58
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9RxekmgJj_cSrQaSQP_fPkAaZVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d6:ae:90:e8:32:4c:6d:9a:b7:7e:bb:3b:33:1f:dc:8b:fa:b1:
         3f:d9:aa:9f:39:1f:b2:43:02:cb:f9:b5:30:67:e5:8a:76:8b:
         e1:b1:12:f9:81:87:c4:54:53:4e:2e:eb:9a:c2:81:9f:52:6d:
         35:54:4a:96:de:87:a3:69:90:c4:3a:ed:e2:ce:8c:5d:98:25:
         51:36:01:76:51:0f:f7:bd:87:29:03:3b:17:6b:ec:4c:b4:a1:
         3f:c2:69:a4:28:42:78:91:0b:80:77:cf:96:9e:a4:2b:c6:ab:
         08:47:f8:33:8f:68:38:08:73:c4:d8:37:6c:c0:fb:5e:50:2a:
         1c:1d:1e:53:24:bb:9c:ff:91:d6:30:af:b9:bb:32:35:8c:17:
         69:a6:50:86:df:ec:90:79:21:c6:41:79:f9:b0:34:3e:12:33:
         c2:73:0b:5d:a1:9d:d8:f3:dc:dc:e1:1a:fe:94:6f:00:bf:8d:
         1b:bf:b0:0e:bc:75:58:54:bf:30:63:43:21:43:84:43:ad:ad:
         7a:cc:52:95:cd:2f:3f:ab:24:82:03:1b:63:66:0a:98:32:aa:
         05:6b:4b:94:86:1f:b6:77:a3:9d:a9:46:7b:66:0a:92:7d:63:
         03:22:45:eb:54:ba:20:b2:47:d2:4c:42:d6:d7:fc:16:a8:4b:
         12:f6:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:46 2025 by rpki-client