Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S1t5EUv0pyZjQ4YB7sw-blKsjqE.roa
File:                     S1t5EUv0pyZjQ4YB7sw-blKsjqE.roa (raw, json)
Hash identifier:          HF8lfX3XEJ01J7juTXOG4NYRbOL3ffANFlBhxkMqav0=
Subject key identifier:   4B:5B:79:11:4B:F4:A7:26:63:43:86:01:EE:CC:3E:6E:52:AC:8E:A1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0417
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S1t5EUv0pyZjQ4YB7sw-blKsjqE.roa
Signing time:             Tue 06 Jun 2023 16:05:57 +0000
ROA not before:           Tue 06 Jun 2023 16:05:57 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.205.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:57 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4B5B79114BF4A72663438601EECC3E6E52AC8EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:e9:a3:9e:4a:44:11:fd:b3:e2:74:01:19:
                    79:c0:bb:89:25:1f:b6:e7:6b:02:f7:72:9c:ea:ba:
                    8b:8b:8b:fc:e0:18:86:ee:d3:ff:c6:1c:36:63:7a:
                    ba:64:de:6d:bc:b1:19:a6:49:85:39:85:f4:3d:d8:
                    62:34:86:df:01:4c:16:fc:c8:5c:fe:06:f8:06:7f:
                    ed:fa:68:d3:1e:a2:1b:0b:31:c7:ca:e2:f6:24:4c:
                    17:fa:88:ca:e6:f6:27:34:b6:67:f7:66:86:84:d8:
                    d5:30:25:95:ba:b6:3f:ce:84:3f:5e:a2:f7:4b:fa:
                    71:08:bd:fd:38:f7:d1:42:52:d0:fa:85:9c:a8:28:
                    c1:54:80:9d:d8:20:02:92:5a:28:4e:8e:ec:cb:ae:
                    8c:0f:e4:4b:cf:c7:69:36:b0:a7:52:76:f6:f0:41:
                    c7:0f:98:dc:10:80:75:97:cb:dd:71:30:68:20:6d:
                    10:5c:a1:9f:18:65:32:56:99:ff:92:b0:eb:84:8a:
                    90:5a:a2:1f:bb:2a:39:5e:38:b8:85:6f:52:6c:4f:
                    e0:52:34:9a:f0:13:71:a2:e9:5f:0c:45:fa:9c:18:
                    05:e6:e1:c7:6a:5f:de:09:aa:02:10:5f:89:14:ad:
                    a3:fc:59:32:c5:80:0d:42:9f:be:9c:78:47:ce:7f:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5B:79:11:4B:F4:A7:26:63:43:86:01:EE:CC:3E:6E:52:AC:8E:A1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S1t5EUv0pyZjQ4YB7sw-blKsjqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:00:52:5c:16:e8:7f:7d:18:d8:bc:46:c0:cc:5f:aa:77:
         f3:ec:91:ab:a4:03:4c:eb:83:76:df:ef:7d:3d:85:5a:9a:b3:
         3b:65:37:8c:d8:75:78:75:67:4f:59:08:15:f0:59:ac:28:55:
         ee:a4:20:45:e2:da:b1:21:2c:6b:68:88:c3:b9:8a:6d:4f:fd:
         7d:87:ff:6f:75:55:21:5c:3f:0a:71:2b:78:79:52:ee:51:b1:
         ab:3f:7a:17:db:c3:2c:c1:f5:a5:5b:7b:be:89:f9:75:0e:70:
         f9:16:ac:c6:fd:45:b3:e1:02:18:7e:3d:85:01:5d:cd:2b:54:
         ae:a8:a4:f5:29:5b:03:a3:da:7b:41:7c:66:24:7d:d8:78:6c:
         86:ba:db:60:a8:5c:71:50:c0:8f:d5:80:96:4a:51:f5:1e:e8:
         8c:38:e3:18:dd:b9:9a:3f:99:00:d8:c7:09:5d:0a:15:18:ae:
         84:b5:ae:76:86:c9:5b:07:f4:3e:be:e0:4e:ee:c5:8e:fb:6f:
         29:fe:e4:50:c5:7d:c6:5d:a0:a6:0f:b2:44:ec:b7:44:4b:65:
         f7:72:8e:b1:60:d5:9f:a2:78:a0:d7:d2:cb:61:81:02:b0:b8:
         b4:7d:be:39:76:cd:37:9b:0d:8e:27:79:a5:32:f0:55:0d:5a:
         b2:32:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:00 2025 by rpki-client