Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXtipS4rVuV7qs0dyxkA1LVK3XA.roa
File:                     AXtipS4rVuV7qs0dyxkA1LVK3XA.roa (raw, json)
Hash identifier:          dPx4N8YrUA1x99AMlkKS/w1G5DfbyOvWrdn36dAbpa8=
Subject key identifier:   01:7B:62:A5:2E:2B:56:E5:7B:AA:CD:1D:CB:19:00:D4:B5:4A:DD:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0501
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXtipS4rVuV7qs0dyxkA1LVK3XA.roa
Signing time:             Thu 27 Jul 2023 16:52:07 +0000
ROA not before:           Thu 27 Jul 2023 16:52:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.190.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=017B62A52E2B56E57BAACD1DCB1900D4B54ADD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:6a:97:34:88:c7:dc:46:95:6f:02:d4:ab:
                    2d:20:3d:81:56:6c:f9:67:84:ab:95:50:03:a8:5a:
                    bf:1f:c9:1c:9a:6e:f8:34:47:5d:4a:11:fc:09:0e:
                    12:d5:dd:4b:17:6a:61:5c:d1:db:3e:30:5e:a8:76:
                    08:6f:aa:01:40:24:76:ed:e8:3f:49:71:09:3f:cd:
                    fa:8c:a4:9a:75:dd:bd:35:c5:ac:4a:cb:f9:2c:a2:
                    7a:5c:39:de:c5:5d:ee:af:25:25:82:a6:18:22:9c:
                    e9:5a:fd:5b:6b:05:49:fd:43:0f:c1:e4:fd:d9:a8:
                    0c:31:18:36:67:48:8a:4f:33:70:e2:fd:aa:a6:e3:
                    f6:04:e3:9e:30:17:64:4e:bc:13:70:22:bb:37:15:
                    31:63:79:e1:ae:2b:c1:68:93:72:67:21:e9:1c:93:
                    4a:e3:af:d7:b7:3b:d0:49:fc:09:4a:41:5f:0d:55:
                    4b:35:d6:ae:59:ca:39:e2:65:7e:8c:a9:c6:11:5e:
                    1f:f9:06:a0:b0:d2:f2:35:21:9b:c3:be:0a:0a:5d:
                    0e:ab:67:54:52:b7:ce:2c:67:26:e7:69:57:c3:7f:
                    d0:2e:62:46:71:ec:8d:55:30:3d:a4:59:ae:7b:89:
                    1e:7a:0f:bc:ff:c3:ba:3b:9b:7b:55:50:2a:e2:0d:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:62:A5:2E:2B:56:E5:7B:AA:CD:1D:CB:19:00:D4:B5:4A:DD:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXtipS4rVuV7qs0dyxkA1LVK3XA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:45:ab:2a:c1:b9:ed:8c:e5:af:19:ce:12:2e:7b:e1:a2:b4:
         d4:7d:be:d6:4d:64:84:89:ca:ee:48:1a:9e:92:48:53:78:39:
         79:a3:14:85:21:25:85:e3:bd:8e:3a:36:39:3e:23:cc:62:c6:
         c4:0f:e1:bd:81:3f:4e:3a:33:f8:f2:86:ed:5c:7f:26:8a:2a:
         7d:62:7b:9a:75:35:fd:9e:d4:e8:55:25:aa:fc:58:52:df:65:
         86:29:03:ff:00:d6:a2:38:f4:04:9c:1e:e3:98:0e:2b:21:8d:
         26:0a:a0:a6:87:6d:07:e4:cc:96:c4:e1:b1:b8:d2:09:01:64:
         17:88:1b:e1:1a:c8:c0:44:8f:93:f3:16:2a:55:70:11:31:b5:
         47:71:ac:ae:c8:13:36:97:69:43:68:98:28:56:b9:7a:3c:36:
         4b:ca:2a:a4:b8:ce:63:23:5d:54:28:a0:c2:59:bf:2d:e3:83:
         a7:d5:70:a0:45:4c:34:b1:5c:c9:1c:49:d1:70:89:49:2e:4f:
         37:61:9b:76:d5:4e:4d:3e:72:ac:87:ba:e6:a5:58:ac:b0:0c:
         1a:c5:08:30:93:ea:7e:0e:cb:51:5b:8a:95:30:87:41:54:71:
         a2:d5:ab:15:ce:20:9f:bd:67:fc:52:7c:2c:39:8f:81:22:cf:
         d1:11:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:24 2025 by rpki-client