Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Bl6u3N3WIqfKHLzGIyvkz54SyA.roa
File:                     _Bl6u3N3WIqfKHLzGIyvkz54SyA.roa (raw, json)
Hash identifier:          mqSNQxAUH5V69mYEinofIo5ohxqWRSVFq0ES5SHu7Gg=
Subject key identifier:   FC:19:7A:BB:73:77:58:8A:9F:28:72:F3:18:8C:AF:93:3E:78:4B:20
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Bl6u3N3WIqfKHLzGIyvkz54SyA.roa
Signing time:             Wed 24 May 2023 16:03:02 +0000
ROA not before:           Wed 24 May 2023 16:03:02 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.160.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:03:02 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FC197ABB7377588A9F2872F3188CAF933E784B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:65:e5:28:f1:97:a5:91:6c:3f:7f:7d:92:
                    7d:6d:29:52:e1:33:80:c6:3a:ad:54:ed:82:33:e8:
                    f3:28:7f:d9:c9:27:14:6f:e8:65:f5:8f:85:b0:c9:
                    4a:fa:57:a9:e5:70:f1:fc:37:91:ba:52:ed:89:1b:
                    38:d7:24:cf:2a:21:f0:16:08:4f:a4:65:71:72:d6:
                    ee:6e:5d:65:18:64:5e:1d:4c:a2:b7:40:c9:6d:33:
                    f6:3e:8a:31:9e:8a:6c:7b:f0:37:04:17:90:6e:37:
                    bd:b3:9e:67:ff:cc:c9:d5:5c:50:3a:3c:f7:9f:af:
                    3f:4c:78:c5:a1:e9:4b:e7:7a:11:04:3e:a3:2e:63:
                    21:6e:a3:81:1e:75:cf:5a:5a:e4:e6:cf:ae:0f:6d:
                    b7:5b:68:75:bd:84:bb:c2:03:fe:42:e4:c4:77:4f:
                    de:56:a8:ad:11:de:66:a2:eb:1c:0c:0e:d6:99:29:
                    5d:5c:75:73:ce:c4:43:ee:b6:6e:6c:76:96:c7:b5:
                    32:d3:d1:14:a4:c5:69:fc:00:42:12:6b:b5:7f:de:
                    45:ed:67:66:82:26:21:69:da:f5:09:e3:e6:57:34:
                    14:fe:43:c8:5c:a6:a4:31:05:6e:e3:b1:0e:48:c0:
                    a5:bd:0c:88:60:c0:39:e5:db:42:ed:b5:aa:b7:1b:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:7A:BB:73:77:58:8A:9F:28:72:F3:18:8C:AF:93:3E:78:4B:20
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Bl6u3N3WIqfKHLzGIyvkz54SyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:16:5b:38:08:bf:6b:e5:9b:ee:d7:70:5a:f8:bb:70:9b:
         24:70:db:eb:81:2a:40:e7:c2:32:16:45:97:13:00:f3:a6:11:
         ab:02:ba:ec:8c:9b:4f:05:68:d5:d7:53:dd:81:83:90:12:cb:
         0e:66:2b:5d:c1:45:20:b9:01:8d:53:90:7f:c3:e0:82:4c:96:
         ad:12:e8:cf:94:10:35:4a:08:43:5a:88:98:02:71:95:de:1c:
         6a:da:cd:52:90:54:e5:e5:c7:1e:95:09:d5:a9:9d:ed:0f:5d:
         cc:a7:55:33:fc:d5:a2:30:b7:80:54:27:86:ec:73:b9:d8:ae:
         c0:7e:56:02:2c:66:31:c8:ea:26:28:d7:5c:ca:a1:7b:e2:f0:
         3a:60:79:f4:2a:4f:76:0e:76:8b:ed:d1:8c:d0:b1:2b:a6:19:
         c6:f9:c7:a9:57:a8:61:b5:68:e2:0a:b7:83:b8:7c:4e:f0:b5:
         1d:eb:74:74:fe:15:b0:bc:79:c1:29:15:0e:76:56:a5:a4:c8:
         6e:07:d0:8b:71:91:52:0e:a6:a2:24:3b:6a:d7:1c:65:59:df:
         86:5e:50:d9:42:7e:9c:27:57:cd:b8:b9:20:68:74:d0:0a:4a:
         c4:34:ce:7c:33:d0:11:b6:76:9d:e3:1e:1e:d8:28:74:d6:e7:
         43:a2:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:33 2025 by rpki-client