Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3mrJ37Wsc8uTb5Q3CZcU_vL_eA.roa
File:                     M3mrJ37Wsc8uTb5Q3CZcU_vL_eA.roa (raw, json)
Hash identifier:          vKCPK/vsdZBp+66eymtrD0Vf/nzsbATKyTTONX5XIsI=
Subject key identifier:   33:79:AB:27:7E:D6:B1:CF:2E:4D:BE:50:DC:26:5C:53:FB:CB:FD:E0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       010E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3mrJ37Wsc8uTb5Q3CZcU_vL_eA.roa
Signing time:             Wed 24 May 2023 16:10:17 +0000
ROA not before:           Wed 24 May 2023 16:10:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.140.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:10:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3379AB277ED6B1CF2E4DBE50DC265C53FBCBFDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:f3:d9:08:de:90:ac:4f:9f:bb:44:af:46:
                    d8:7f:af:f7:b2:86:7e:ef:8d:15:c8:e0:53:cb:a5:
                    84:a9:7d:99:da:c0:81:83:cf:67:03:98:6c:56:ef:
                    df:78:b1:58:8b:a9:a2:40:ee:28:73:89:58:e1:65:
                    68:df:e2:16:49:7f:31:f0:5b:39:6a:dc:99:d3:7d:
                    f0:a2:ea:39:e1:41:d4:41:93:2d:9f:93:19:c9:58:
                    ac:32:8a:8f:0b:a9:71:7c:34:6f:63:65:d5:b1:f8:
                    ad:80:59:71:53:68:10:84:da:d7:2b:1c:ea:eb:8c:
                    d6:7a:b7:bb:15:5b:7a:6d:5e:75:02:99:5e:7d:c9:
                    4a:cc:78:a9:a9:94:c5:05:3e:24:8c:31:2c:53:50:
                    d0:37:48:84:15:26:cd:5f:2f:a9:33:be:dd:43:aa:
                    45:07:c9:f1:e6:25:76:5f:43:dc:f5:f3:34:45:0e:
                    f4:10:5b:f1:a9:05:62:9b:b8:67:3d:fa:53:d5:b5:
                    21:28:aa:cc:ed:6d:ab:84:57:7a:15:2f:6d:ba:81:
                    3f:6f:02:58:60:93:d4:32:34:de:f5:ee:64:82:c5:
                    23:6f:9b:56:85:da:31:c2:a9:91:6a:dd:44:9d:42:
                    46:ef:a2:a8:8a:52:46:52:30:08:58:7f:69:27:8f:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:AB:27:7E:D6:B1:CF:2E:4D:BE:50:DC:26:5C:53:FB:CB:FD:E0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3mrJ37Wsc8uTb5Q3CZcU_vL_eA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:ce:5d:63:25:ef:c8:e6:c7:32:66:f3:ee:dc:22:26:32:e1:
         40:f8:7d:58:e5:01:c7:78:84:a8:b3:42:64:93:ff:b9:13:43:
         3e:13:1b:fb:84:f9:c3:99:09:f1:1f:27:7b:05:51:76:d3:fa:
         7c:41:76:fe:39:bd:1b:df:ee:6f:be:a5:8f:be:c2:9c:3b:b1:
         68:36:a6:77:29:a9:f7:29:08:6e:fa:be:8f:52:de:72:0b:21:
         9c:15:b2:96:5f:7a:c7:15:2f:93:a0:35:13:48:96:24:f2:44:
         28:2b:ca:a4:7d:fb:1f:46:d0:52:9f:2e:b7:bf:ff:26:09:6f:
         75:4d:04:5e:e5:07:0c:87:8d:17:54:b3:c9:ea:aa:1c:0a:05:
         d4:51:8b:29:ab:25:13:ae:ee:4a:94:00:b9:c3:ea:25:32:e2:
         5e:ad:65:52:66:34:32:77:fd:8b:78:4e:37:61:9a:e8:3c:8e:
         0e:60:d7:f0:1e:f1:93:f0:6f:db:1a:0d:c7:57:1c:3c:2f:5b:
         c6:6c:98:a8:9d:68:06:e6:34:98:c6:13:26:57:93:ad:c8:f0:
         1b:fd:70:2f:80:75:14:ee:b0:cc:6c:46:da:79:83:e2:01:59:
         fb:49:08:c8:4c:1c:e3:a8:cc:d7:9d:a6:d8:66:86:b4:b4:ab:
         9c:45:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:32 2025 by rpki-client