Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzT3eXxTe24lGWDuKXA-mHYLXAs.roa
File:                     NzT3eXxTe24lGWDuKXA-mHYLXAs.roa (raw, json)
Hash identifier:          gDJ4TatAOe+sNsgQiHyd7SOp5emLCaxIspsh+ceuMLA=
Subject key identifier:   37:34:F7:79:7C:53:7B:6E:25:19:60:EE:29:70:3E:98:76:0B:5C:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0524
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzT3eXxTe24lGWDuKXA-mHYLXAs.roa
Signing time:             Thu 27 Jul 2023 16:54:10 +0000
ROA not before:           Thu 27 Jul 2023 16:54:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.74.0.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=3734F7797C537B6E251960EE29703E98760B5C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:6b:76:8e:ef:12:7a:9f:ba:72:d0:04:d1:
                    c1:3a:7c:66:72:9f:2e:91:26:c7:ef:ef:21:97:ec:
                    4b:84:a8:7a:36:40:77:95:24:f0:76:32:44:12:4b:
                    43:20:20:52:d6:97:3b:13:91:48:d6:d6:bc:71:9a:
                    50:a2:47:24:06:f3:5e:a4:fe:42:35:90:23:25:85:
                    f6:74:c7:28:d4:1c:21:3b:2c:42:e6:cf:52:9a:3a:
                    27:5d:41:18:ac:2e:26:0c:f8:bb:19:e1:c1:d6:e5:
                    a7:97:9d:f0:bb:d4:b2:19:1e:81:0f:62:f7:8c:ce:
                    55:20:ca:05:24:d9:00:21:b1:6d:7d:db:4c:ee:51:
                    0d:bf:22:9c:83:a1:09:bc:dc:6a:d4:26:d4:df:b8:
                    43:bd:5f:7a:a9:a0:bc:82:b7:22:e2:ab:13:cc:3d:
                    d0:70:40:04:71:0a:53:ff:07:0e:98:d6:b3:54:a5:
                    fd:f1:e4:9b:e4:3b:00:66:b5:09:48:08:7c:ad:e3:
                    09:39:f5:f3:52:e5:b2:6a:c1:68:c4:c6:42:86:30:
                    f4:b3:13:70:22:65:fa:58:99:92:ee:ab:c7:80:12:
                    6c:a1:3b:30:eb:d7:8d:87:37:1b:44:f7:df:9b:f4:
                    14:96:c5:e0:a5:b3:f2:63:8c:04:5f:4f:02:7d:e0:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:F7:79:7C:53:7B:6E:25:19:60:EE:29:70:3E:98:76:0B:5C:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzT3eXxTe24lGWDuKXA-mHYLXAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:60:a0:37:0e:29:5a:28:a5:83:c3:89:fc:b2:35:65:d4:04:
         b6:c3:2e:3f:d8:df:bd:13:ac:fe:9d:63:54:dc:b9:18:38:b5:
         da:61:66:99:24:e2:fc:a7:d8:88:87:bd:34:0c:0d:78:78:3a:
         47:d0:72:24:29:02:d7:76:0a:f9:f2:95:e3:ea:14:38:7b:41:
         46:98:ed:63:0b:f8:8f:eb:d7:d2:c8:ab:90:15:ab:cc:e9:45:
         1d:3b:c1:1d:44:29:7f:55:39:68:1f:5a:b3:32:af:9b:d1:f4:
         ec:c8:2b:05:e0:87:c2:c4:7c:f6:4c:e8:50:5d:15:ba:a9:d1:
         8a:8b:db:f8:29:6d:99:7b:23:de:b9:45:76:cb:7a:ae:7c:2b:
         d5:69:d6:55:6c:0a:9a:6f:4e:49:77:40:f0:3c:30:0d:0d:9a:
         77:64:f5:00:f1:97:9c:95:23:43:d6:fc:a1:d9:d7:41:53:6e:
         27:98:dd:7c:62:fc:3b:f8:26:53:a0:4e:1f:44:52:0f:ca:a1:
         fc:e5:0f:a0:7f:1e:64:33:e0:66:79:61:b1:7e:98:51:31:5e:
         fb:cd:ec:cf:6c:2b:3b:d6:5d:c7:3d:2a:28:9c:e7:2b:b5:9b:
         27:c1:45:13:0e:d8:4f:5e:9f:f0:4f:01:32:9d:97:66:62:c6:
         c9:6d:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:03 2025 by rpki-client