Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ChN_AMTduFjtgFNNhleEurYjRek.roa
File:                     ChN_AMTduFjtgFNNhleEurYjRek.roa (raw, json)
Hash identifier:          1CZN/sTfI9z8iTAcusjqcD2FJoKbo5K2IsiQB+Q1a1M=
Subject key identifier:   0A:13:7F:00:C4:DD:B8:58:ED:80:53:4D:86:57:84:BA:B6:23:45:E9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0177
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ChN_AMTduFjtgFNNhleEurYjRek.roa
Signing time:             Wed 24 May 2023 16:33:21 +0000
ROA not before:           Wed 24 May 2023 16:33:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.19.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0A137F00C4DDB858ED80534D865784BAB62345E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:65:94:a5:21:1d:e8:ea:05:9a:be:2b:29:
                    51:35:dd:27:a7:64:6b:dc:de:72:74:b8:9f:23:0e:
                    e2:10:83:35:f4:ed:2c:45:92:b7:63:fc:d7:d7:44:
                    7f:05:3b:41:55:40:6b:c5:ac:23:1a:db:f1:83:64:
                    9e:9e:d9:d3:34:19:ee:3b:0f:38:74:65:21:d4:e5:
                    98:1b:4e:e4:ab:ea:2f:e3:22:39:94:c7:dc:06:0d:
                    e1:34:4e:69:18:82:c9:41:07:c2:95:f5:11:29:da:
                    f5:34:10:7c:4c:3b:b9:41:3b:20:9a:d5:d6:78:f4:
                    2a:0f:a9:df:9e:3d:7b:18:49:ea:8b:b8:e7:3f:10:
                    0b:e8:f3:e1:a9:31:81:1c:d8:1c:3b:18:2b:8e:af:
                    db:f6:77:d1:0e:55:84:5f:9c:85:5c:c7:61:af:15:
                    4d:9d:de:19:ac:83:f6:a7:6d:03:5b:75:08:4c:14:
                    4a:3b:0f:42:3e:66:22:68:f6:e0:9f:ea:47:c1:4c:
                    dc:d9:68:95:71:a7:f0:57:a9:1b:70:f7:d5:df:8b:
                    da:fd:2b:01:47:9a:05:e3:ca:52:ce:be:50:c0:15:
                    cf:cd:f8:9f:f6:a6:81:4c:6e:76:12:6f:06:29:ed:
                    fd:8e:95:1c:4a:87:97:3f:84:19:1e:1f:d5:42:e5:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:7F:00:C4:DD:B8:58:ED:80:53:4D:86:57:84:BA:B6:23:45:E9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ChN_AMTduFjtgFNNhleEurYjRek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:2c:b9:b0:12:36:28:6b:b1:bf:43:a8:23:d4:3b:9e:8f:76:
         6b:c5:ff:73:97:07:b2:26:de:b9:90:ab:92:83:91:40:a3:ad:
         54:a3:10:03:7f:b7:8d:b6:8d:53:72:f5:ad:e1:39:cf:63:ed:
         2f:9f:29:db:cb:82:e9:36:71:14:49:1c:43:5d:6e:4c:c8:9f:
         6e:4b:b8:53:fb:87:c3:9f:76:a4:3d:a4:47:da:bc:1f:29:04:
         6a:a2:69:c5:60:bf:ce:ef:0a:c8:3a:f2:0f:1a:bc:fc:17:82:
         86:6b:47:00:9d:b4:b5:10:5a:bc:92:53:42:27:ab:f1:59:5e:
         4a:85:dd:e7:97:c8:35:a8:12:fd:16:03:72:cc:02:ce:8b:11:
         00:d5:9d:dc:ab:c2:71:a2:01:86:2a:d0:e8:fa:53:00:74:1d:
         ae:82:21:9c:5a:b6:2e:a5:f5:22:4f:b1:c8:82:c9:9e:e3:6f:
         72:c0:42:b9:8c:6a:0b:cb:9a:7d:18:56:d8:b5:c7:bb:29:9f:
         19:5e:60:25:38:12:e0:29:5d:1a:20:2a:ec:43:99:92:89:98:
         09:e9:83:2f:fd:f5:18:bf:a0:7d:91:88:00:7b:db:8e:cb:51:
         03:9d:fb:05:ba:45:ad:e1:d7:9c:04:8e:1e:eb:94:f7:b1:cd:
         cc:b7:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:06 2025 by rpki-client