Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Gvfk5NSunI4JTDgglmSe6BJj1N4.roa
File:                     Gvfk5NSunI4JTDgglmSe6BJj1N4.roa (raw, json)
Hash identifier:          eJhBIoF0xu4wUgTJ2e3l8PysxWGEAu9d/nF4v2UMpWM=
Subject key identifier:   1A:F7:E4:E4:D4:AE:9C:8E:09:4C:38:20:96:64:9E:E8:12:63:D4:DE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       021E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Gvfk5NSunI4JTDgglmSe6BJj1N4.roa
Signing time:             Tue 30 May 2023 16:30:28 +0000
ROA not before:           Tue 30 May 2023 16:30:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.185.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1AF7E4E4D4AE9C8E094C382096649EE81263D4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:2a:d6:70:e2:ed:7b:a3:1b:e6:85:cd:6f:
                    15:33:1c:ab:c4:ab:bc:94:ec:3b:26:3c:ef:ba:c8:
                    86:42:35:92:aa:f7:2f:8d:d0:02:21:f0:5e:eb:eb:
                    a5:b5:a8:42:33:5a:41:e3:4e:0e:28:31:4d:ff:e5:
                    bb:52:03:70:bf:0f:0e:92:02:f0:7a:4d:0c:11:23:
                    00:00:d7:65:1f:aa:7a:fc:1e:df:e6:e6:03:cd:c2:
                    ff:3c:15:38:c8:f1:27:5d:b1:43:61:b8:10:bb:ed:
                    15:6a:6a:fa:a2:59:9e:ff:d9:ca:63:3c:6e:65:70:
                    09:7d:d5:df:bb:bc:06:c4:25:5e:c7:70:68:c7:28:
                    b5:da:79:9f:7f:30:41:5e:2e:82:3b:47:41:7c:54:
                    fb:28:82:6b:d6:be:fb:52:9e:0b:16:f4:b9:c5:bd:
                    6f:c4:d6:fb:e1:b9:53:99:a4:1d:a1:67:34:5e:45:
                    14:6f:e2:9f:f0:7d:ba:c8:61:e9:58:ae:5a:bc:7e:
                    e1:d3:f6:5f:9a:20:e8:f5:90:38:75:4c:83:99:63:
                    7a:e0:fa:3c:7e:da:99:8b:5d:c1:3c:a8:59:78:92:
                    f0:3a:fb:7a:e5:93:8d:38:e3:9c:32:ec:b0:55:d1:
                    64:68:8d:00:e2:11:a5:c0:15:e9:e0:ad:a4:05:e1:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F7:E4:E4:D4:AE:9C:8E:09:4C:38:20:96:64:9E:E8:12:63:D4:DE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Gvfk5NSunI4JTDgglmSe6BJj1N4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:89:b2:8f:cd:52:92:b8:10:00:71:43:07:e3:32:8e:77:1d:
         1c:5b:6f:41:fb:49:43:cf:ca:df:27:76:56:1d:58:8d:53:f4:
         61:4d:aa:ae:63:31:7c:e5:12:94:a5:12:a3:3c:d2:a6:2d:2b:
         e9:76:2a:42:2a:9e:62:a5:99:e2:cd:d8:e5:c8:23:75:fc:a9:
         67:3b:40:25:38:a3:5b:0d:0b:fd:47:f9:12:22:ce:b2:3d:2e:
         97:2e:19:5b:10:b8:45:19:36:15:e4:aa:fe:63:06:0e:b7:f6:
         47:59:93:19:d7:97:83:e4:94:58:ad:4b:19:51:0a:56:2c:d1:
         16:ac:4a:7a:3a:c3:3c:73:99:b9:1b:e4:4c:d2:6d:6c:a5:9c:
         81:a4:70:48:ad:64:de:a4:82:13:66:40:3e:71:80:d2:71:63:
         40:65:42:39:43:73:0e:bb:bf:b2:3b:07:52:f0:0a:4a:5b:35:
         41:e8:d7:27:1d:4d:4a:75:e7:50:cf:da:6d:68:f6:05:f2:40:
         a1:0e:02:d6:da:ca:78:5f:f7:15:57:1c:f7:6c:b2:8f:1b:4a:
         74:f3:14:62:8f:f2:71:7d:ad:6e:a9:d8:22:f6:bd:c3:c2:9d:
         70:b0:76:fd:d5:ff:0b:fd:dd:91:1a:7b:df:0d:9e:24:77:01:
         7e:7e:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:39 2025 by rpki-client