Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LMLA5KeC1vKhF04vdCDftQO6p0A.roa
File:                     LMLA5KeC1vKhF04vdCDftQO6p0A.roa (raw, json)
Hash identifier:          vfTDCCemz0zmT7yE1Ri3Br3JvT6qr/30K/fcB3s1tn8=
Subject key identifier:   2C:C2:C0:E4:A7:82:D6:F2:A1:17:4E:2F:74:20:DF:B5:03:BA:A7:40
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0451
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LMLA5KeC1vKhF04vdCDftQO6p0A.roa
Signing time:             Thu 27 Jul 2023 16:43:14 +0000
ROA not before:           Thu 27 Jul 2023 16:43:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.194.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=2CC2C0E4A782D6F2A1174E2F7420DFB503BAA740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:5a:39:1a:47:59:f4:d0:b2:61:3c:cc:1e:
                    2e:47:8f:98:0c:71:43:ce:70:33:fa:52:d9:5c:85:
                    ae:6d:a3:e2:99:92:ba:6b:9e:da:01:e0:01:eb:1a:
                    76:7c:47:3c:a8:7e:e2:23:f3:24:93:67:33:8d:fc:
                    40:a2:40:88:9e:eb:74:fb:43:0b:91:87:08:26:e8:
                    cd:61:15:e0:9f:8a:6f:bc:1a:5f:b0:49:1b:f7:70:
                    9d:c2:00:af:3d:30:1f:6e:4a:03:a2:ea:f1:4d:4c:
                    d0:3a:12:02:d1:4f:52:ce:81:c9:d5:95:8a:18:78:
                    19:c6:e4:35:57:7c:df:23:cc:89:72:47:9a:5f:86:
                    23:d3:33:73:e3:31:61:75:e0:8f:7a:f4:8f:c6:c2:
                    bd:04:d4:27:02:7b:53:1c:06:e6:87:2a:d6:7e:5a:
                    c1:7f:ff:5d:c0:57:6c:8e:9f:45:8a:a8:04:ea:5d:
                    de:b7:3d:24:0f:93:44:4e:f0:71:3d:79:53:eb:aa:
                    58:1b:eb:0f:c3:41:f1:59:3f:85:e5:c7:f5:31:46:
                    d6:6d:b3:cd:ea:46:91:7a:9f:b0:e0:ec:cf:dc:ae:
                    97:69:1e:ce:42:62:10:53:81:b2:a3:b1:49:2b:fb:
                    c3:6f:e8:ce:46:14:93:ab:eb:3d:be:ee:a1:9e:52:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:C0:E4:A7:82:D6:F2:A1:17:4E:2F:74:20:DF:B5:03:BA:A7:40
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LMLA5KeC1vKhF04vdCDftQO6p0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:29:17:38:58:26:07:b4:2f:24:e5:b2:e4:63:c4:2c:62:de:
         34:85:04:9b:d1:34:9f:4c:26:74:51:bc:3b:77:6b:b8:17:10:
         a8:ff:74:8e:39:41:e3:01:88:8a:6b:3d:e6:c7:3c:e4:96:dd:
         01:93:26:22:91:b3:8f:85:86:d6:6a:f6:40:ca:9f:43:f2:84:
         d4:5d:ae:8a:64:75:7f:00:e2:17:e1:6e:c0:8c:87:d0:ac:19:
         2d:de:e5:77:bf:2d:61:73:ac:67:25:cb:e8:a8:f6:a3:b3:4c:
         ff:84:59:bb:af:59:a9:f7:2a:89:11:1e:72:0f:f5:ca:69:b2:
         e7:e6:c1:63:1d:8d:49:9d:35:c2:f4:92:fd:18:af:ee:19:de:
         69:bb:fb:0b:05:3f:e2:cf:f2:e1:91:a3:b3:66:b3:22:18:50:
         94:63:5a:6b:fb:11:3a:72:62:a4:e7:99:30:48:d8:10:49:12:
         fe:3e:0b:a6:1f:20:5d:e1:06:74:a5:bc:5e:23:42:24:ae:d2:
         92:60:be:82:95:a6:81:7c:5a:15:ec:a1:0c:03:a8:3f:95:77:
         84:35:da:c0:55:86:15:b1:93:7e:ec:27:3e:ec:ea:ea:30:9e:
         68:1c:a8:3a:13:79:81:aa:65:99:14:f3:e5:d3:6c:4d:7f:7f:
         46:9f:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:03 2025 by rpki-client