Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M8JZdgjPRtgUbhPxKFHNh1HuQpQ.roa
File:                     M8JZdgjPRtgUbhPxKFHNh1HuQpQ.roa (raw, json)
Hash identifier:          a3m44Da+ZxyhaKk2LlhB560Qk035k3xa+2vbC2FfUCw=
Subject key identifier:   33:C2:59:76:08:CF:46:D8:14:6E:13:F1:28:51:CD:87:51:EE:42:94
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       039B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M8JZdgjPRtgUbhPxKFHNh1HuQpQ.roa
Signing time:             Thu 01 Jun 2023 17:59:28 +0000
ROA not before:           Thu 01 Jun 2023 17:59:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.11.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:59:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=33C2597608CF46D8146E13F12851CD8751EE4294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1e:cc:92:77:f4:57:99:76:00:03:76:16:c0:
                    67:2e:0a:be:df:67:55:cb:77:6b:fe:40:3b:2a:f9:
                    1b:dc:ac:98:0b:d8:92:0e:91:dc:ba:a5:46:fc:1d:
                    19:da:57:31:3f:0d:ca:ad:68:df:b6:48:ec:fc:a3:
                    67:13:eb:51:96:12:e6:44:65:87:8f:1d:2a:72:30:
                    21:53:b0:1b:10:50:d9:f6:7c:e8:14:12:18:6a:4d:
                    15:ba:54:14:c3:e5:3f:48:73:23:eb:96:52:74:12:
                    16:2c:90:74:08:01:6c:d8:83:0d:e6:39:9c:9c:d9:
                    0f:28:91:c3:ca:de:df:25:df:96:98:77:d1:54:e1:
                    bc:99:46:e5:62:85:6f:1d:c2:75:ab:48:22:41:98:
                    a1:9e:5e:9e:6f:20:3a:67:04:4f:04:17:b7:56:03:
                    bb:75:03:e5:d1:4c:3e:3c:2c:d5:81:3c:67:e9:ef:
                    2f:06:01:81:79:91:a6:1a:db:b3:e3:f9:ca:2c:33:
                    e8:94:5d:4e:ba:34:c5:ff:cb:76:a7:cb:ed:bf:04:
                    c0:9a:38:c8:b3:4a:e8:9e:1f:78:86:76:38:81:42:
                    ce:3c:b4:07:67:74:c5:43:d2:4b:59:53:62:dc:29:
                    8d:16:b5:df:88:c1:ff:c1:c2:bd:da:3d:b4:fa:4e:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C2:59:76:08:CF:46:D8:14:6E:13:F1:28:51:CD:87:51:EE:42:94
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M8JZdgjPRtgUbhPxKFHNh1HuQpQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:66:f8:8d:5d:26:09:fe:60:95:f7:8a:6e:73:30:f8:33:
         75:82:68:f2:44:77:16:e5:39:31:f2:1b:0a:9f:80:9c:8e:74:
         79:45:60:55:f5:8f:fb:91:d7:e1:85:80:37:52:9f:2c:31:bb:
         bd:65:28:d2:44:37:7d:78:a0:bb:12:e9:e9:c7:17:2f:14:75:
         66:ff:35:18:90:6c:4e:48:53:8f:56:b8:ec:30:e1:eb:ea:b3:
         f1:21:be:29:5a:2b:79:dd:d8:5e:df:bb:89:c9:f9:a4:e4:30:
         b9:20:c0:dd:6d:b6:a1:bd:c2:fd:6e:94:5c:e5:ba:9e:6e:c8:
         71:17:6d:c2:89:64:db:fa:00:37:27:41:7a:81:9d:ba:79:a6:
         28:ba:2c:92:8b:ae:74:50:a5:20:b2:e1:3a:3b:bc:4c:7d:ba:
         92:f8:b1:26:ef:e3:bc:c2:09:0b:87:d4:09:b5:45:be:ba:86:
         2d:3d:0c:89:d4:cf:5f:24:70:77:d6:4e:20:12:0d:da:b0:e3:
         88:b7:64:66:24:e9:77:2d:5f:d4:cf:76:6f:fb:6b:00:81:2c:
         45:ca:f1:d0:c1:d2:dc:dc:60:46:1d:8b:1d:6f:8c:58:0a:ea:
         5a:b7:6f:50:12:bf:79:70:b3:b6:3a:72:92:a3:e8:1b:2b:3b:
         88:80:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:38 2025 by rpki-client