Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ggKsRcuyS50lzv1eoKg7KsZTeYI.roa
File:                     ggKsRcuyS50lzv1eoKg7KsZTeYI.roa (raw, json)
Hash identifier:          hkOHvsbxIVU0v9ClV0CVexWAZmQdq5mUSuTts7XBdHk=
Subject key identifier:   82:02:AC:45:CB:B2:4B:9D:25:CE:FD:5E:A0:A8:3B:2A:C6:53:79:82
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       3F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ggKsRcuyS50lzv1eoKg7KsZTeYI.roa
Signing time:             Mon 27 Mar 2023 16:02:09 +0000
ROA not before:           Mon 27 Mar 2023 16:02:09 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.227.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:09 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8202AC45CBB24B9D25CEFD5EA0A83B2AC6537982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:8f:e6:8e:69:04:6c:2f:e2:d3:13:7b:17:
                    69:ca:fa:f6:99:5e:fa:b4:8e:01:91:91:d2:fd:41:
                    2a:c1:7d:ec:c1:26:57:fa:af:0e:8a:c4:b2:20:79:
                    e3:48:0c:67:4c:41:20:3b:f6:e5:11:1d:5a:76:9b:
                    f6:07:e3:66:44:eb:2e:97:1f:ef:2b:ed:60:fe:9e:
                    45:72:aa:52:60:e0:08:74:9d:4d:e5:8d:7a:f7:03:
                    60:7d:98:49:fd:d4:26:5c:ff:55:45:1d:78:96:db:
                    04:7e:c9:56:3d:6b:be:ae:04:59:6a:2b:e8:72:62:
                    d8:c0:9d:2a:dd:36:3e:e0:fe:6e:25:f7:5c:b1:c1:
                    fd:4f:9d:77:e5:e0:17:5a:fa:29:4c:a2:40:23:18:
                    6b:2a:df:47:45:9d:73:97:84:5c:40:50:6b:f8:85:
                    3b:4d:25:3d:29:96:de:f5:28:7b:f9:f7:7c:39:b7:
                    1c:df:b1:01:56:1f:be:d4:fa:06:c8:49:e1:52:30:
                    0f:e7:52:dd:d0:cb:93:4e:b2:b4:b9:a8:3f:a7:7e:
                    8d:52:d6:d4:39:2a:e0:22:a1:d1:c5:54:b1:fe:81:
                    0e:21:c3:c1:17:a0:4c:56:ac:e6:06:a3:42:2d:03:
                    29:55:6e:12:f8:a9:54:a4:48:0b:66:fc:08:bc:6e:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:AC:45:CB:B2:4B:9D:25:CE:FD:5E:A0:A8:3B:2A:C6:53:79:82
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ggKsRcuyS50lzv1eoKg7KsZTeYI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:08:cf:b2:6b:40:34:e7:b6:4e:24:c6:a8:88:f6:3b:6a:7c:
         12:d4:cf:f7:8a:af:50:84:75:d5:3b:01:22:34:e0:96:d9:55:
         fc:24:89:68:bf:0a:ee:2c:39:57:49:05:ff:10:96:b2:01:84:
         94:74:b3:9b:0b:47:75:87:2c:fb:a6:8b:ae:b7:e7:96:9f:fb:
         03:9a:dc:a2:0a:80:ff:fc:21:3c:b4:24:75:5a:ae:52:88:10:
         72:e1:7c:d6:5f:2e:07:0f:20:65:25:89:73:ce:d2:cc:7d:a0:
         d8:93:cd:53:8b:0f:24:30:4b:2d:c2:15:9e:0c:8a:22:26:05:
         17:85:2d:40:e9:13:85:39:bc:05:43:3d:e5:bc:62:ad:b7:fa:
         0b:61:b8:78:59:80:d7:e6:47:47:25:eb:dc:bb:37:95:29:7b:
         dc:0c:a3:38:eb:db:c4:f5:7c:23:8a:29:a2:7c:ff:5f:e8:57:
         da:aa:ac:7c:a7:94:46:30:14:1b:f7:5e:3f:8b:f0:cc:45:12:
         67:21:c9:08:b3:08:7f:f5:58:36:b5:0a:68:b5:09:2f:d8:d9:
         e0:07:4d:0b:fe:15:cd:31:b3:a0:9a:86:0c:88:38:56:5e:51:
         39:49:e8:14:0a:88:a6:e2:42:59:3e:e3:22:36:78:08:70:1d:
         54:4e:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:35 2025 by rpki-client