Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IGvG_9vfYD7QCREPESrBAPFKJ9o.roa
File:                     IGvG_9vfYD7QCREPESrBAPFKJ9o.roa (raw, json)
Hash identifier:          lK1ixCcxdm+PpP0KDtZoUX9pumWLFMb536n5rwYKUPk=
Subject key identifier:   20:6B:C6:FF:DB:DF:60:3E:D0:09:11:0F:11:2A:C1:00:F1:4A:27:DA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IGvG_9vfYD7QCREPESrBAPFKJ9o.roa
Signing time:             Thu 01 Jun 2023 16:04:32 +0000
ROA not before:           Thu 01 Jun 2023 16:04:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.236.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=206BC6FFDBDF603ED009110F112AC100F14A27DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:0f:86:ee:de:ca:d6:3c:c9:e7:dc:b2:42:
                    cb:d0:36:c7:72:2d:3b:13:1b:fd:fd:d2:7b:30:5c:
                    c0:de:95:8e:ec:69:3f:a3:76:2e:ef:5b:52:1d:51:
                    72:97:9e:f4:27:d8:a8:2f:68:15:4c:bf:7b:34:1c:
                    47:03:6d:be:bd:fb:74:1b:89:ef:42:5c:12:0b:e0:
                    80:d2:f7:30:41:28:6a:ad:39:70:69:c1:cb:5c:d2:
                    31:6b:49:a6:30:55:fb:19:72:3d:a8:ef:57:69:91:
                    19:bb:8a:d6:81:04:90:bd:9a:f2:d8:5d:f0:f1:81:
                    9a:79:31:44:46:ed:9a:e7:9e:6d:d5:79:c9:91:d8:
                    ad:f6:21:ae:65:7a:e5:0b:b2:e2:12:52:e0:ce:ce:
                    cc:27:79:a3:05:73:f8:d3:fe:ec:bd:11:a0:f1:c5:
                    e5:8b:68:8f:d1:d2:d7:22:e8:15:ec:ad:6c:d1:23:
                    e2:e1:ac:97:99:d6:5f:fc:a5:17:44:f2:72:18:9e:
                    36:a6:e2:f5:c8:79:b9:56:16:ea:d8:5b:ea:59:54:
                    fd:73:6d:00:61:79:31:07:bd:72:27:b6:e2:71:7d:
                    de:68:05:c1:b3:6b:5a:7b:03:73:e4:3f:7f:6b:7f:
                    ff:94:b0:ad:2a:1c:e1:67:2d:ab:f4:0d:b5:bc:88:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6B:C6:FF:DB:DF:60:3E:D0:09:11:0F:11:2A:C1:00:F1:4A:27:DA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IGvG_9vfYD7QCREPESrBAPFKJ9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:3c:c7:0c:1b:81:94:1e:3f:d1:71:c9:a5:0f:38:73:1f:d1:
         f2:f4:59:c9:7d:c6:91:98:0b:c2:1f:7e:38:7b:db:7b:2c:4b:
         9d:57:7e:0a:89:cc:e3:c7:01:8b:1f:c4:63:ec:ae:c9:c4:50:
         4a:0b:ec:41:15:87:6d:a5:7c:40:5b:86:bd:e4:09:6f:a0:29:
         4d:34:e6:64:5a:0d:76:51:61:92:b5:25:a4:a6:33:77:44:b9:
         5f:0b:d2:fb:e6:d3:1c:26:d0:b2:13:2f:e7:b6:48:e0:2d:63:
         98:48:2e:12:a0:b1:6f:3d:ce:6f:ad:f3:27:7d:46:2b:7d:11:
         74:6b:b0:37:21:5e:08:ca:6b:99:27:04:18:b2:50:bd:c7:af:
         02:90:f0:0e:66:9d:ad:d6:8f:c4:d9:4e:ac:95:06:b5:ab:9d:
         03:04:49:86:95:ed:ab:0f:9f:d2:fb:0e:01:ac:37:ab:a6:3f:
         20:ce:52:e7:62:a5:b1:5d:e0:57:f6:48:44:dc:e1:f1:88:a3:
         ae:91:d7:6d:9a:18:12:0c:eb:8a:12:03:ec:09:5b:cb:3f:8d:
         2e:6b:87:a5:30:2c:eb:3b:fe:a4:af:9a:44:ed:7b:96:b4:88:
         0e:81:ba:c0:fb:b1:df:c5:2e:31:14:83:e5:08:36:fa:56:5f:
         8a:ea:18:55
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA0MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDIwNkJDNkZGREJERjYw
M0VEMDA5MTEwRjExMkFDMTAwRjE0QTI3REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfkQ+G7t7K1jzJ59yyQsvQNsdyLTsTG/390nswXMDelY7saT+j
di7vW1IdUXKXnvQn2KgvaBVMv3s0HEcDbb69+3Qbie9CXBIL4IDS9zBBKGqtOXBp
wctc0jFrSaYwVfsZcj2o71dpkRm7itaBBJC9mvLYXfDxgZp5MURG7Zrnnm3VecmR
2K32Ia5leuULsuISUuDOzswneaMFc/jT/uy9EaDxxeWLaI/R0tci6BXsrWzRI+Lh
rJeZ1l/8pRdE8nIYnjam4vXIeblWFurYW+pZVP1zbQBheTEHvXIntuJxfd5oBcGz
a1p7A3PkP39rf/+UsK0qHOFnLav0DbW8iMQfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIGvG/9vfYD7QCREPESrBAPFKJ9owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0lHdkdfOXZmWUQ3UUNSRVBFU3JCQVBGS0o5by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBSewwDQYJKoZIhvcNAQELBQADggEBANE8xwwbgZQeP9FxyaUPOHMf0fL0
Wcl9xpGYC8Iffjh723ssS51XfgqJzOPHAYsfxGPsrsnEUEoL7EEVh22lfEBbhr3k
CW+gKU005mRaDXZRYZK1JaSmM3dEuV8L0vvm0xwm0LITL+e2SOAtY5hILhKgsW89
zm+t8yd9Rit9EXRrsDchXgjKa5knBBiyUL3HrwKQ8A5mna3Wj8TZTqyVBrWrnQME
SYaV7asPn9L7DgGsN6umPyDOUudipbFd4Ff2SETc4fGIo66R122aGBIM64oSA+wJ
W8s/jS5rh6UwLOs7/qSvmkTte5a0iA6BusD7sd/FLjEUg+UINvpWX4rqGFU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:17 2025 by rpki-client