Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jrbiytDZRJySkeFWxGpBcClvCgU.roa
File:                     jrbiytDZRJySkeFWxGpBcClvCgU.roa (raw, json)
Hash identifier:          Czdzce/KjUOE5Rgf6T9enDu9FZ+wHkzX2Pw4T+M9OQM=
Subject key identifier:   8E:B6:E2:CA:D0:D9:44:9C:92:91:E1:56:C4:6A:41:70:29:6F:0A:05
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0201
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jrbiytDZRJySkeFWxGpBcClvCgU.roa
Signing time:             Tue 30 May 2023 16:29:25 +0000
ROA not before:           Tue 30 May 2023 16:29:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.112.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8EB6E2CAD0D9449C9291E156C46A4170296F0A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:35:a2:99:1c:0d:0d:9b:ab:b1:91:3b:90:
                    1a:a0:d6:dc:8c:37:64:5a:98:66:0b:36:cc:7f:1c:
                    e4:de:dd:64:c5:58:5a:0a:18:df:ab:7d:b1:f3:65:
                    8e:ec:66:95:2a:13:a7:59:29:65:90:4e:f6:0d:c7:
                    7c:05:f7:b4:51:b9:5c:76:5d:60:e1:c4:64:83:23:
                    21:ca:62:4e:7d:df:ad:ed:fa:0a:96:6c:f7:0e:26:
                    4a:3a:e4:1d:87:54:9d:80:b4:5b:b4:46:1b:43:ab:
                    21:f2:66:32:a3:6f:42:c2:59:e7:19:73:c4:e9:e8:
                    a9:fe:a7:23:ce:7a:46:29:8e:ca:db:b7:1c:04:06:
                    65:20:b5:86:3d:f2:91:b6:aa:c6:90:35:6f:29:63:
                    7f:45:eb:03:76:af:fb:e2:a4:8b:10:76:91:f3:0f:
                    da:78:15:61:da:d9:19:a6:9d:ae:23:6a:98:ed:05:
                    8d:eb:f8:81:54:7d:a9:b6:d1:b1:12:31:2d:bc:27:
                    2c:6a:de:98:17:2a:48:6a:a1:6a:7c:f6:1e:f3:32:
                    61:cc:bb:28:ff:73:3f:e0:67:af:b4:a2:52:54:c3:
                    e4:91:32:fe:e5:e9:ea:1a:b6:0d:26:38:ee:82:3b:
                    ba:30:70:fa:65:4c:9a:df:08:af:ef:06:f9:25:13:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:E2:CA:D0:D9:44:9C:92:91:E1:56:C4:6A:41:70:29:6F:0A:05
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jrbiytDZRJySkeFWxGpBcClvCgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:78:9d:7c:3c:55:87:80:75:69:b2:eb:42:7e:c0:55:a5:78:
         cb:14:39:5e:c3:6a:42:92:c9:bd:a5:d0:f6:0e:80:5c:c3:12:
         9a:e2:34:e2:fa:fa:bc:7c:7e:3e:2c:82:e9:12:8a:e0:d3:64:
         39:8f:da:57:a4:3e:d6:45:ad:2c:92:eb:10:8b:2a:4f:b0:ba:
         e7:15:a7:28:66:c4:df:96:86:2c:73:05:0e:98:a5:03:d2:68:
         c8:29:cc:f6:28:9e:be:e3:ee:91:b6:19:4f:e5:c2:62:8d:4c:
         64:ef:65:65:f7:0f:01:71:a4:dd:54:7c:15:24:d5:31:5d:22:
         11:4c:60:1b:86:25:7e:4f:da:b1:b4:1e:0c:af:19:da:03:13:
         32:c0:57:19:23:55:fd:c4:47:03:a7:3b:84:6d:dd:45:f6:f5:
         47:45:62:ed:51:7c:f3:5a:8e:d8:a4:f2:af:73:31:44:a3:23:
         15:53:b3:3f:cf:78:5f:7f:70:5e:5f:30:29:1f:01:13:7b:4f:
         84:01:6c:39:e2:63:c3:89:1c:12:9d:49:ad:8d:47:0c:2c:6d:
         38:f9:0c:ac:59:19:88:f4:1b:27:77:5e:cb:10:45:9d:2b:b3:
         25:b2:62:5a:98:f9:df:c6:17:f5:4d:0c:c3:c1:5d:f6:fd:99:
         46:2f:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:10 2025 by rpki-client