Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfKJ8Yuixvd17SGMMcvRlZJV9vQ.roa
File:                     dfKJ8Yuixvd17SGMMcvRlZJV9vQ.roa (raw, json)
Hash identifier:          yOk1JPVl2CLVqPi2nXeSxW8N5pRAyUA3MI1SkYqhDPo=
Subject key identifier:   75:F2:89:F1:8B:A2:C6:F7:75:ED:21:8C:31:CB:D1:95:92:55:F6:F4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0484
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfKJ8Yuixvd17SGMMcvRlZJV9vQ.roa
Signing time:             Thu 27 Jul 2023 16:44:12 +0000
ROA not before:           Thu 27 Jul 2023 16:44:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.107.0.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=75F289F18BA2C6F775ED218C31CBD1959255F6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:a0:ac:29:26:9b:5a:78:b3:4f:61:6b:80:
                    39:0b:81:86:7e:45:b6:bc:12:75:48:eb:b5:64:3b:
                    e2:38:a3:7e:eb:68:eb:1d:ed:a3:f0:96:95:25:76:
                    bf:ec:db:0a:e6:88:c3:6a:2a:9d:35:1b:09:88:62:
                    92:e6:48:26:81:14:45:fe:0e:82:84:e3:b1:87:a9:
                    3e:8a:52:64:01:17:32:1b:d8:32:92:8d:97:2c:66:
                    2f:75:ad:1d:c0:3d:e6:bd:c5:ee:a3:33:f2:07:00:
                    56:93:15:a6:42:0d:bb:bc:13:de:94:ab:dc:d3:0f:
                    87:01:50:c9:e1:f8:b8:09:df:e9:f6:62:c0:24:06:
                    14:e6:06:20:f6:70:f3:e0:07:cb:65:9d:c3:93:33:
                    fd:ea:c4:7e:30:35:d1:b6:40:9f:0e:ef:92:af:11:
                    2f:7c:57:5f:2b:1e:09:87:7c:77:3f:e1:3a:6e:30:
                    dc:fe:1f:da:85:8f:24:31:f3:38:df:b2:6f:26:18:
                    44:0e:fa:8d:0d:31:98:8d:cc:21:48:45:da:d7:00:
                    c4:d4:26:88:1b:d0:6f:33:c4:81:df:74:37:d7:5d:
                    6a:a6:20:db:7e:a4:29:df:2e:13:bc:d1:98:e4:6d:
                    82:af:1b:df:06:05:af:be:d5:4a:3b:dd:b5:c7:be:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:89:F1:8B:A2:C6:F7:75:ED:21:8C:31:CB:D1:95:92:55:F6:F4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dfKJ8Yuixvd17SGMMcvRlZJV9vQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.107.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:52:8d:7f:a2:da:78:db:83:1c:9d:54:ea:4b:17:a1:62:54:
         ed:9a:49:da:4f:ec:1b:af:23:db:d8:d6:92:69:2a:65:18:eb:
         a5:5a:9a:8f:99:7c:d8:2b:14:f8:61:64:b8:92:94:27:89:e6:
         83:38:48:ba:45:b0:e9:f8:ac:e0:e9:dd:90:8a:a9:0d:e4:ff:
         a7:d3:46:e3:e9:d9:77:67:0c:e0:9b:99:f7:0b:b0:f7:3a:13:
         ba:d2:74:51:f2:0d:3f:b1:15:61:73:70:ab:f7:0e:55:fa:ae:
         5b:44:1c:1f:de:33:a7:e7:d8:c8:a3:63:f3:20:aa:e4:55:00:
         80:85:cc:a4:77:55:6f:a7:2d:84:93:70:99:73:8a:5f:4a:b5:
         03:bf:2d:2d:93:6a:91:8c:ce:15:20:25:6b:35:78:5e:a5:1e:
         13:63:84:af:b5:81:af:f5:d1:78:0a:3c:3e:74:8f:4f:af:9e:
         dc:0a:7d:7f:ff:3a:99:5c:95:d6:88:e2:e8:80:61:ab:ba:37:
         a5:d9:e0:6e:3b:15:80:a0:7f:9a:5a:31:8b:d8:62:b0:1c:b7:
         ed:bc:91:77:8e:39:a7:69:8e:51:0e:55:e2:49:18:c3:d3:87:
         4a:83:49:85:d3:eb:18:b8:1f:8b:f9:67:d1:4c:f0:54:fa:a9:
         73:0c:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:02 2025 by rpki-client