Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LWHmpfCWC_cxHNyB_yidmUVeY7Q.roa
File:                     LWHmpfCWC_cxHNyB_yidmUVeY7Q.roa (raw, json)
Hash identifier:          uHJ4Sop6scxQ6UKIflXRJTV9/hoYNBkirS1dJAVJcyA=
Subject key identifier:   2D:61:E6:A5:F0:96:0B:F7:31:1C:DC:81:FF:28:9D:99:45:5E:63:B4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       022A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LWHmpfCWC_cxHNyB_yidmUVeY7Q.roa
Signing time:             Tue 30 May 2023 16:30:33 +0000
ROA not before:           Tue 30 May 2023 16:30:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.56.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2D61E6A5F0960BF7311CDC81FF289D99455E63B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:46:ed:36:43:35:66:14:c0:c3:64:19:da:
                    d2:df:c8:b5:ec:7f:44:f5:1b:90:08:d7:62:7a:52:
                    0b:85:4e:1e:5f:67:09:a5:85:94:fc:3c:ff:ce:ed:
                    0e:c7:4f:85:ac:f0:61:20:b1:73:28:36:ca:51:aa:
                    ec:f2:e4:68:23:5d:94:50:22:ea:9a:2f:92:e1:8f:
                    b8:db:24:c5:f8:50:48:28:24:2b:7c:0f:a7:1a:c6:
                    7b:0d:93:a3:36:de:3f:bc:e3:71:c6:35:1f:08:a6:
                    a9:c6:bc:1b:61:ee:8f:6a:0e:a0:ca:a0:db:24:22:
                    4c:09:58:e7:2e:e7:9d:ce:c2:24:88:c7:83:01:54:
                    77:28:4a:86:8e:ca:3c:19:2c:1c:8b:0e:22:33:97:
                    63:1d:60:28:43:73:49:53:e5:3a:2b:d3:bf:eb:2c:
                    a1:d1:37:64:dd:16:ed:82:90:2c:58:37:43:b0:92:
                    26:12:a3:2e:a8:61:9a:36:51:ac:07:a9:fa:ef:57:
                    53:f6:db:0d:6b:5c:9d:25:d9:e1:2d:9d:1e:7b:af:
                    1b:72:2f:f1:ad:a9:c8:bc:31:8c:ca:af:4a:94:8e:
                    a1:44:63:ba:c8:0f:ef:ca:d1:78:98:cd:d2:95:35:
                    0e:a0:ce:7f:95:f7:f6:22:0a:2a:ec:21:6d:a1:3f:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:E6:A5:F0:96:0B:F7:31:1C:DC:81:FF:28:9D:99:45:5E:63:B4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LWHmpfCWC_cxHNyB_yidmUVeY7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:0f:eb:55:85:35:42:29:ed:8f:72:95:cb:ef:a5:3e:ad:
         06:42:bc:1c:52:02:4b:7d:2a:12:9c:5d:32:2c:10:6c:78:4d:
         a9:49:c6:eb:48:e9:c6:b2:7a:c4:b2:75:80:97:f5:81:2b:f9:
         fa:bb:1c:68:86:dc:5e:71:ad:a4:f6:91:18:d2:71:38:9c:a5:
         97:62:ae:6a:d4:c6:67:31:4c:21:ed:bb:c2:a6:a7:c9:58:52:
         5b:ef:65:a1:a4:53:75:42:b8:f4:b7:e5:b1:21:61:b0:36:2d:
         ed:cb:0f:16:53:ad:f0:13:9c:a3:4c:fb:dd:81:5a:dd:08:1c:
         9f:71:41:ef:0c:a1:cd:8c:d1:90:a4:1a:3e:77:0f:7a:f5:7d:
         8d:0e:0b:41:6e:36:80:64:b8:73:25:2b:78:8e:69:3e:bc:d8:
         fc:7b:f2:bd:08:e9:47:71:92:8a:35:c2:c1:f8:e9:2d:79:63:
         5e:bc:dc:b2:f7:89:30:55:1d:2d:c5:77:86:de:21:71:f3:4a:
         59:eb:d7:4a:2b:d8:83:7b:2b:42:d9:b1:c4:ba:4b:25:63:7f:
         5e:27:14:c9:bb:d9:4e:8c:43:1a:3b:7c:5a:28:e5:c2:db:41:
         51:fa:a8:7e:48:18:a6:c7:cd:7d:8d:e5:aa:61:55:51:f5:4f:
         55:7f:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:05 2025 by rpki-client