Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mWFbS0L96mnvVarp-sSwUxDGYL4.roa
File:                     mWFbS0L96mnvVarp-sSwUxDGYL4.roa (raw, json)
Hash identifier:          T/9C1I+pZ7w3CCFLhGbFd0FQvA8IrchlMDS75J1oFzY=
Subject key identifier:   99:61:5B:4B:42:FD:EA:69:EF:55:AA:E9:FA:C4:B0:53:10:C6:60:BE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0246
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mWFbS0L96mnvVarp-sSwUxDGYL4.roa
Signing time:             Tue 30 May 2023 16:32:26 +0000
ROA not before:           Tue 30 May 2023 16:32:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.16.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=99615B4B42FDEA69EF55AAE9FAC4B05310C660BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:1d:a0:cc:ed:63:88:24:51:7c:cb:57:dd:
                    4f:e8:6b:e2:68:46:8f:8e:0f:f8:20:62:12:27:4d:
                    70:e3:e3:7e:61:b0:a9:f6:b9:03:47:b0:a7:48:8a:
                    5b:2d:40:3a:d2:4d:19:36:69:1f:43:01:3f:c3:94:
                    45:a1:c3:8d:ad:5e:40:20:24:0d:e9:3b:6a:02:17:
                    95:55:a6:fe:f3:2f:01:de:e5:e7:b0:35:e5:0c:1c:
                    38:00:41:ea:f3:82:cd:e7:f2:1a:88:fa:d5:43:4c:
                    f4:dc:78:6f:d1:3f:67:85:e3:ba:25:7b:7b:00:8b:
                    c4:ad:93:00:31:03:c8:78:68:c6:02:52:88:45:fb:
                    5f:17:6c:f8:3b:9d:41:11:a8:0e:21:cd:7c:ff:0f:
                    94:46:8e:45:58:03:77:35:99:2f:c3:a9:9d:e6:e0:
                    5a:87:2d:c2:40:d5:18:e5:47:e7:0e:83:6a:62:ca:
                    22:df:81:08:0e:21:cb:b2:3a:0a:c3:a8:ab:0d:c6:
                    c9:f0:a1:9a:3e:ce:28:32:12:dd:ab:6a:d1:12:27:
                    7a:ea:63:8e:8c:4a:da:d8:8e:0f:6b:31:20:12:9c:
                    cd:99:3e:05:c3:82:1b:52:64:72:ae:4f:59:3f:33:
                    ef:19:12:01:4e:64:4a:f8:18:90:b1:3c:0e:f5:4a:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:5B:4B:42:FD:EA:69:EF:55:AA:E9:FA:C4:B0:53:10:C6:60:BE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mWFbS0L96mnvVarp-sSwUxDGYL4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:bd:0e:8d:1a:b6:e2:61:e8:94:9a:80:5a:98:ae:fd:97:
         96:4e:df:e7:80:f8:57:14:ce:cb:d7:86:78:cb:64:b2:99:db:
         70:1f:6c:cf:c4:65:24:e1:9c:cf:13:2c:72:c5:92:e0:a2:9a:
         04:63:85:58:fa:14:95:ca:42:48:9e:f7:be:47:91:c3:53:a0:
         3d:68:05:e5:38:08:c1:e4:f0:2f:d1:5a:0e:ac:0e:8f:eb:8e:
         e4:d3:a2:d9:b9:f7:0b:64:fc:13:63:50:4b:33:bb:03:40:e0:
         a9:a7:3d:a2:38:4f:d0:f1:06:46:c8:66:08:df:d6:61:a4:d7:
         ac:1a:97:b2:c7:79:2d:3e:57:57:27:c9:4e:5a:60:e1:52:7e:
         7a:f1:9f:61:47:79:df:17:37:ac:01:52:f1:e9:6d:44:3e:78:
         0a:dc:92:c0:ff:c4:bf:4d:9e:31:61:61:89:66:3e:e2:48:45:
         68:11:bf:76:6c:00:d3:5e:ca:ff:3d:09:1e:a6:92:03:a8:d2:
         aa:51:a6:31:ab:5d:9c:37:de:07:ed:ea:eb:08:4b:b6:f3:8f:
         16:32:2f:d6:96:d9:e4:92:1c:a8:8b:67:05:c7:d6:6d:27:c7:
         a0:29:95:cd:44:89:66:2f:cc:60:46:40:9a:6c:ae:57:94:39:
         1a:06:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:08 2025 by rpki-client