Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wqZhBEZHbd_Esj_eSOIdyOVO_Yk.roa
File:                     wqZhBEZHbd_Esj_eSOIdyOVO_Yk.roa (raw, json)
Hash identifier:          GEL/kVAp+nZIIZRGCnwtDHZ/vWj/OM7NRDMZJ38FFJs=
Subject key identifier:   C2:A6:61:04:46:47:6D:DF:C4:B2:3F:DE:48:E2:1D:C8:E5:4E:FD:89
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0569
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wqZhBEZHbd_Esj_eSOIdyOVO_Yk.roa
Signing time:             Thu 27 Jul 2023 16:56:21 +0000
ROA not before:           Thu 27 Jul 2023 16:56:21 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.110.128.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:21 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C2A6610446476DDFC4B23FDE48E21DC8E54EFD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:55:fc:11:c1:cb:ce:54:32:7f:39:69:77:3a:
                    a1:94:b8:f8:33:79:da:40:43:27:07:53:c4:6c:ec:
                    19:23:1f:71:fa:6c:a4:6b:d6:ff:02:7c:a5:41:c2:
                    0c:ed:94:96:37:c8:35:f5:22:8d:95:47:83:28:fb:
                    b0:96:48:aa:f4:73:1c:6a:91:87:36:17:ef:78:c9:
                    4c:e2:a7:e5:ea:81:10:e4:a6:2e:82:7f:47:4c:c9:
                    ce:24:b2:4e:19:e3:ae:9c:b7:e1:91:ef:75:b3:19:
                    b5:63:8e:96:8d:80:a5:51:4a:a3:61:d4:2e:5d:da:
                    49:db:8e:a0:99:d9:ce:fa:67:26:ff:e0:ba:13:20:
                    f3:28:d4:c6:37:01:16:8e:be:80:19:42:1a:04:89:
                    3e:77:cb:1c:56:5d:10:45:df:fc:ec:65:9b:01:18:
                    10:15:ba:55:6a:3f:7c:9d:5c:fb:04:a9:fb:89:36:
                    bb:29:86:a3:da:53:1f:5e:4a:96:19:a8:32:c5:dc:
                    22:b9:f1:7c:d3:65:d0:59:20:44:a2:6b:64:73:a7:
                    5b:1a:eb:87:76:2d:44:d3:bb:4f:9b:bf:2e:f0:65:
                    1b:5f:6b:43:30:7f:d4:26:75:aa:c9:a4:fa:63:18:
                    e7:6b:48:3d:49:2f:30:d5:03:bd:62:b3:59:c3:e6:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A6:61:04:46:47:6D:DF:C4:B2:3F:DE:48:E2:1D:C8:E5:4E:FD:89
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wqZhBEZHbd_Esj_eSOIdyOVO_Yk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6f:23:ff:6f:c3:37:7e:3d:90:e4:98:5f:56:a9:a2:0f:1a:da:
         45:81:cb:3c:1f:d1:c0:9d:21:b7:66:e9:dd:ea:00:ff:5f:fd:
         77:a9:a6:c6:1a:45:aa:fa:e5:5d:1d:f1:4d:82:d8:1d:44:4f:
         4e:09:de:79:84:c6:d3:2a:0c:c6:76:3f:1f:55:1e:30:1d:45:
         35:2c:2b:fa:3e:3c:d7:1e:3d:b0:f1:fb:27:13:27:1e:a6:a6:
         0d:bf:bb:9a:28:9e:c1:8f:f2:16:68:0c:a9:0c:dd:1e:3e:ff:
         82:81:07:f6:7a:9d:aa:b5:64:ea:eb:e4:36:5e:2a:18:76:8c:
         89:ba:ce:9c:93:bc:a8:78:b9:f6:c7:96:ce:22:1d:3a:87:be:
         20:fc:1c:c0:f8:71:39:f7:49:8b:5c:9c:02:5f:15:e3:8a:6a:
         71:39:e3:3a:f2:f5:78:95:61:9b:3e:b2:a1:90:8c:98:64:e1:
         4a:20:e9:48:fc:b4:24:bc:70:53:3a:e7:c7:28:70:4f:57:e4:
         70:f9:fb:69:2b:6c:77:44:d3:de:32:95:79:73:c7:a8:e3:d1:
         e9:9d:5e:25:c4:95:75:67:66:0b:8b:40:78:ac:dd:89:79:1f:
         ba:16:60:4d:c3:4e:d0:b8:f4:0c:d7:41:2e:c4:79:4c:dd:5c:
         f3:a6:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:57 2025 by rpki-client