Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-VssScDuM2YOV8lcU4oJCPLAiTs.roa
File:                     -VssScDuM2YOV8lcU4oJCPLAiTs.roa (raw, json)
Hash identifier:          HqasMHukDHgoziRpNV+m2QJhox09e4BMadpL4ua6bPQ=
Subject key identifier:   F9:5B:2C:49:C0:EE:33:66:0E:57:C9:5C:53:8A:09:08:F2:C0:89:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-VssScDuM2YOV8lcU4oJCPLAiTs.roa
Signing time:             Tue 30 May 2023 17:17:28 +0000
ROA not before:           Tue 30 May 2023 17:17:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.152.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F95B2C49C0EE33660E57C95C538A0908F2C0893B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:a8:6b:61:07:5e:d4:84:70:b4:17:3c:55:
                    0e:e9:21:82:10:ae:f9:db:73:7b:f4:ef:08:24:2e:
                    7f:34:84:d8:9a:bd:7d:4d:7b:05:e2:17:be:de:93:
                    f3:b2:45:cc:b6:52:7a:1f:39:de:1a:26:54:3d:a4:
                    d9:8c:f1:14:e8:9e:84:d7:f5:4a:5d:a3:e0:13:63:
                    1c:5d:7d:b3:6b:ac:3e:be:01:31:07:30:25:f4:42:
                    86:85:1a:da:fb:2a:03:e4:36:c2:ab:d6:a2:11:5a:
                    d2:5e:32:80:2e:5e:b3:20:f7:26:74:62:86:14:50:
                    a3:d0:19:2e:97:cc:f7:47:8c:89:bb:8a:ff:16:23:
                    f5:ad:75:9a:cc:9a:49:b1:cb:6a:54:f7:ba:e8:8c:
                    c6:86:2d:d6:99:82:46:d0:36:2c:69:e8:0a:7c:9d:
                    f4:6c:e1:bc:ad:52:d5:b7:cc:01:88:62:f9:ba:0a:
                    16:4e:c5:79:02:04:04:61:cf:d6:30:74:4e:d5:33:
                    a1:be:34:d4:23:d2:aa:29:01:f8:ef:98:63:d4:97:
                    df:12:8b:0e:e4:32:3d:ba:bc:25:1c:52:cd:65:6a:
                    87:85:45:a7:51:a7:b0:ee:7b:61:4c:71:9a:a5:37:
                    05:14:22:7b:d7:db:2a:09:dc:cb:be:60:a4:43:db:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:2C:49:C0:EE:33:66:0E:57:C9:5C:53:8A:09:08:F2:C0:89:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-VssScDuM2YOV8lcU4oJCPLAiTs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:95:4c:b6:77:6b:e7:8d:da:7e:24:ca:d4:78:46:1d:58:26:
         5e:11:0c:ab:07:d0:ed:e3:54:05:84:5d:5e:21:05:ca:aa:f4:
         d0:98:62:78:b9:01:89:15:72:4b:6c:45:40:85:bb:71:3e:0e:
         5a:5b:00:3c:ac:23:3c:6f:08:2d:55:5b:27:14:60:41:78:e1:
         98:84:84:12:22:d7:0a:ea:3a:fd:2f:71:17:d1:a7:f4:37:1c:
         49:3f:f3:d1:61:86:97:5f:81:bc:e8:e6:04:b3:1a:f6:45:d6:
         b0:09:9c:09:78:45:e9:9e:b7:2f:a5:2c:be:b0:1d:04:4d:80:
         bd:a9:c8:54:e6:03:08:79:b8:61:23:14:b0:9d:4e:dc:85:b7:
         99:07:80:3f:d9:ce:41:e0:b7:48:1c:32:27:99:9d:73:72:72:
         cb:ab:4d:a2:f8:8a:de:c8:2f:ac:69:5e:b1:89:18:08:e4:6b:
         d2:ae:1e:df:57:e7:d9:93:d7:7c:96:b7:22:0d:34:f4:51:90:
         51:82:35:1d:25:09:be:ab:0e:bb:2c:fa:88:9a:2a:91:2b:86:
         87:eb:6e:10:f3:a0:51:56:fb:97:33:20:f7:d3:f9:7f:34:26:
         2d:a2:e7:85:97:11:b5:1e:fd:1f:6f:dd:a3:5f:f1:57:32:e3:
         7c:9a:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:57 2025 by rpki-client