Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKc176TcpQXNrQiNPJwpfPyz7kg.roa
File:                     mKc176TcpQXNrQiNPJwpfPyz7kg.roa (raw, json)
Hash identifier:          RxtYq/XBFbWD0PH8/iD/Css0ZzuCniNQGc67W/fUT2Q=
Subject key identifier:   98:A7:35:EF:A4:DC:A5:05:CD:AD:08:8D:3C:9C:29:7C:FC:B3:EE:48
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       014C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKc176TcpQXNrQiNPJwpfPyz7kg.roa
Signing time:             Wed 24 May 2023 16:31:15 +0000
ROA not before:           Wed 24 May 2023 16:31:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.73.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=98A735EFA4DCA505CDAD088D3C9C297CFCB3EE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:f9:7f:bd:22:13:49:41:96:4f:e5:f0:b7:
                    34:53:21:8d:9a:f8:dc:36:cb:02:d4:4d:57:15:49:
                    8b:b2:44:64:6f:7f:9c:f3:12:7f:a7:ad:27:9f:09:
                    39:95:66:2c:9e:f8:6d:54:1c:7c:9b:a2:0f:98:16:
                    61:24:9b:13:48:12:0c:55:97:9b:df:f3:8b:67:32:
                    ce:47:d3:55:ca:35:66:f7:fe:97:a1:7f:9f:90:4b:
                    74:e6:9b:f3:1f:3a:78:29:bc:9b:3d:f9:20:b6:53:
                    0b:8f:51:49:6f:c1:22:5c:59:13:4d:91:77:8e:fd:
                    0e:cd:3f:bc:87:08:1d:2e:70:c9:7b:b9:b0:db:0d:
                    ac:de:b2:e1:35:cc:2a:62:76:94:f4:b9:5b:b4:54:
                    bf:6b:f5:d2:72:eb:e0:0e:b0:e3:87:a8:a9:92:1b:
                    15:fa:03:97:e5:20:8e:a2:28:0a:06:69:76:ff:6f:
                    6b:f7:ec:4f:77:7f:58:4f:af:94:4e:56:ff:48:69:
                    e2:90:9c:19:f9:f3:0f:35:37:ac:95:9c:d3:fa:bb:
                    5f:83:f5:3f:7c:c8:11:a7:e1:96:43:39:3a:c6:e1:
                    af:0c:f9:8c:9e:fd:7d:01:68:54:84:bd:98:dc:93:
                    e8:a7:5d:03:cf:0f:3c:15:d1:df:dd:2c:6d:fe:b8:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:35:EF:A4:DC:A5:05:CD:AD:08:8D:3C:9C:29:7C:FC:B3:EE:48
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKc176TcpQXNrQiNPJwpfPyz7kg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:11:2a:97:2c:bd:8c:73:b6:95:10:09:2d:22:39:d7:8e:
         59:f8:4c:40:b7:60:5f:03:8c:e8:e7:9f:c7:06:a7:b7:80:e4:
         04:d3:82:a7:ad:f0:32:ea:68:b9:f0:98:1a:f5:55:7a:d9:0c:
         c9:a7:c5:b1:65:39:df:51:f2:47:10:1b:ee:a2:9e:5a:93:4d:
         b7:03:44:56:35:a6:a1:ca:f8:19:ed:c7:a6:b4:f2:f5:53:f2:
         25:a2:e7:9d:92:b1:d6:a5:77:a3:b9:28:12:62:fa:42:77:a5:
         5d:90:25:86:ae:1f:2b:93:f7:03:f3:89:98:94:02:a2:11:d6:
         ce:76:6c:49:4f:43:0e:cb:3a:fe:0d:2f:2d:0b:30:fc:2c:64:
         d8:82:21:af:0a:76:25:b6:34:03:45:8d:16:53:31:b8:43:2a:
         20:11:e6:9f:0a:6b:63:24:72:2d:20:1e:3f:4c:15:e6:b5:0e:
         9d:1e:09:3d:73:83:16:16:53:fc:6a:47:07:da:1c:b6:f5:6a:
         bc:ff:f6:fd:fb:a9:18:a3:be:8e:e1:77:cd:4f:73:8d:a0:78:
         1f:68:b1:83:d4:23:2b:50:de:92:65:7e:58:01:4c:03:69:1c:
         01:f3:b4:b0:ff:a6:58:ad:95:c6:6b:db:4a:52:e6:4b:08:59:
         50:6e:82:ae
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMxMTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk4QTczNUVGQTREQ0E1
MDVDREFEMDg4RDNDOUMyOTdDRkNCM0VFNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC09Pl/vSITSUGWT+XwtzRTIY2a+Nw2ywLUTVcVSYuyRGRvf5zz
En+nrSefCTmVZiye+G1UHHybog+YFmEkmxNIEgxVl5vf84tnMs5H01XKNWb3/peh
f5+QS3Tmm/MfOngpvJs9+SC2UwuPUUlvwSJcWRNNkXeO/Q7NP7yHCB0ucMl7ubDb
DazesuE1zCpidpT0uVu0VL9r9dJy6+AOsOOHqKmSGxX6A5flII6iKAoGaXb/b2v3
7E93f1hPr5ROVv9IaeKQnBn58w81N6yVnNP6u1+D9T98yBGn4ZZDOTrG4a8M+Yye
/X0BaFSEvZjck+inXQPPDzwV0d/dLG3+uOkzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUmKc176TcpQXNrQiNPJwpfPyz7kgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L21LYzE3NlRjcFFYTnJRaU5QSndwZlB5ejdrZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABT0kwDQYJKoZIhvcNAQELBQADggEBAJMbESqXLL2Mc7aVEAktIjnXjln4
TEC3YF8DjOjnn8cGp7eA5ATTgqet8DLqaLnwmBr1VXrZDMmnxbFlOd9R8kcQG+6i
nlqTTbcDRFY1pqHK+Bntx6a08vVT8iWi552Ssdald6O5KBJi+kJ3pV2QJYauHyuT
9wPziZiUAqIR1s52bElPQw7LOv4NLy0LMPwsZNiCIa8KdiW2NANFjRZTMbhDKiAR
5p8Ka2Mkci0gHj9MFea1Dp0eCT1zgxYWU/xqRwfaHLb1arz/9v37qRijvo7hd81P
c42geB9osYPUIytQ3pJlflgBTANpHAHztLD/plitlcZr20pS5ksIWVBugq4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:48:07 2025 by rpki-client