Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F9vRI9KpqqubwImI-wds6Y_qtwc.roa
File:                     F9vRI9KpqqubwImI-wds6Y_qtwc.roa (raw, json)
Hash identifier:          8cYyYLF6SZf2sus3L5GLyHMqdNoD+STywHolZW0aInk=
Subject key identifier:   17:DB:D1:23:D2:A9:AA:AB:9B:C0:89:88:FB:07:6C:E9:8F:EA:B7:07
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       81
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F9vRI9KpqqubwImI-wds6Y_qtwc.roa
Signing time:             Mon 27 Mar 2023 16:12:03 +0000
ROA not before:           Mon 27 Mar 2023 16:12:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.8.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:12:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=17DBD123D2A9AAAB9BC08988FB076CE98FEAB707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:09:d0:e5:10:35:fc:38:ca:65:3c:ff:fa:
                    73:5f:69:20:d8:de:25:8f:45:b4:1e:40:a4:4b:42:
                    34:03:02:0e:0c:61:33:fb:38:d6:70:c9:d7:31:9d:
                    d5:a2:be:d8:e5:dc:58:39:24:4f:93:af:86:0d:21:
                    36:f1:f3:ae:5f:9e:1b:0d:6f:55:0a:fa:61:64:ed:
                    5b:e9:e9:18:c3:1a:3d:b7:dd:b2:64:76:60:74:31:
                    0c:63:56:8d:4a:a7:f9:12:8b:35:55:dc:c8:84:5b:
                    c2:8f:e1:dd:c0:f0:e9:4a:f4:58:66:36:b1:68:8e:
                    23:29:d6:57:cb:e0:b0:5e:3d:11:95:4e:03:b6:42:
                    d4:14:20:f6:e8:75:be:de:d8:78:fe:3b:dc:cf:5b:
                    d8:6a:92:f8:69:f3:c7:8c:18:4e:85:32:a1:eb:6d:
                    29:9a:3b:e1:fe:d1:99:93:8c:dd:8f:39:55:9f:32:
                    b4:91:11:38:43:78:e4:86:01:06:0b:5c:6d:bc:62:
                    be:f6:bd:ba:60:22:e7:fa:33:c5:c2:81:19:2c:21:
                    ab:54:8e:ee:5d:de:c3:83:4d:8a:c5:3e:5f:9c:de:
                    64:97:6b:dc:d4:ac:5a:4d:f1:34:85:99:ef:5d:74:
                    89:86:2a:87:56:50:25:42:95:33:3f:07:bb:d9:80:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:D1:23:D2:A9:AA:AB:9B:C0:89:88:FB:07:6C:E9:8F:EA:B7:07
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F9vRI9KpqqubwImI-wds6Y_qtwc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:6e:9f:88:11:54:ab:d4:86:94:f2:e8:1b:9d:aa:74:77:
         ef:12:c7:b7:03:09:1c:e7:b4:46:7a:e3:c3:5f:85:49:a4:57:
         27:df:88:f8:11:a7:e1:f8:78:a0:44:51:37:1c:97:f9:97:20:
         ac:88:db:70:f0:03:4d:85:0d:3a:f8:a0:4d:c7:36:cd:3f:26:
         1d:50:6b:3b:5f:10:a3:76:b8:e4:f0:26:be:9a:fe:6e:de:ca:
         0a:1d:b4:dd:a1:83:27:5e:c1:68:af:30:a3:60:73:5f:0a:20:
         bb:10:ff:d7:6e:12:3a:dd:c0:1b:2d:3d:1b:53:90:9d:f5:1b:
         aa:5c:ac:e1:8b:fe:fe:90:81:0e:1a:98:3a:0f:43:ec:74:b3:
         e0:86:43:a4:8c:99:12:eb:3a:78:56:25:e9:ee:e4:13:df:75:
         87:18:6f:b9:4c:65:2e:76:84:58:c5:86:d3:5f:c2:7d:ba:e1:
         d4:21:82:ba:3e:e8:9d:80:95:c3:ef:c8:02:b9:fe:7f:d8:90:
         79:06:46:4c:e9:cd:cf:b6:ce:e3:08:84:70:41:3d:19:da:b0:
         7e:86:52:4f:35:6b:0a:60:c1:df:ba:2e:f9:f2:e7:42:b9:eb:
         07:53:ab:f4:95:53:03:2b:71:f0:66:3c:42:77:00:19:97:08:
         10:7a:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:10 2025 by rpki-client