Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TZLP76ODgT72YMyj7-6Vl6de4xg.roa
File:                     TZLP76ODgT72YMyj7-6Vl6de4xg.roa (raw, json)
Hash identifier:          83YES8+3JVkI33+gFo2jHNLk/RBvSq6iMHxSHcapSBg=
Subject key identifier:   4D:92:CF:EF:A3:83:81:3E:F6:60:CC:A3:EF:EE:95:97:A7:5E:E3:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TZLP76ODgT72YMyj7-6Vl6de4xg.roa
Signing time:             Thu 27 Jul 2023 16:50:05 +0000
ROA not before:           Thu 27 Jul 2023 16:50:05 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.107.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:50:05 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=4D92CFEFA383813EF660CCA3EFEE9597A75EE318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:7f:de:9a:f4:cf:ed:f7:b0:d4:5b:13:22:
                    a1:4d:78:db:9a:04:64:96:ae:4f:4a:19:1f:fe:b6:
                    b6:d8:6a:e8:6f:9b:d1:b2:32:90:48:5f:08:fb:ed:
                    8a:68:65:4b:60:dd:7e:34:57:bb:d0:41:8a:c9:45:
                    93:5d:2c:22:52:bc:43:07:16:94:91:f1:97:8b:40:
                    ba:77:9d:0d:d3:d7:c6:60:1b:1a:0c:28:c6:6d:f4:
                    6d:6a:3d:0f:5d:9e:03:34:37:3d:d1:40:ae:96:08:
                    7d:68:1f:45:a0:86:2f:f8:ef:2f:4a:b0:83:c8:07:
                    9d:bf:73:f6:c6:82:b6:95:d4:b6:af:16:fd:d1:32:
                    6c:b4:b3:25:46:41:77:4d:b6:fc:2a:88:c2:7f:a5:
                    f7:a7:7d:e5:72:4e:26:f1:33:62:b7:c0:71:ae:42:
                    d1:d2:9b:31:72:75:80:db:63:1e:0b:58:e2:6a:b9:
                    b4:a7:12:69:76:cb:61:db:d8:5d:2b:ab:db:cf:6c:
                    cb:2e:5e:11:64:9c:f5:a4:db:3a:d1:2d:1b:4c:17:
                    9a:5f:2c:6a:6a:69:be:44:53:26:a1:63:b6:4b:4a:
                    c2:e9:ea:ed:0b:b5:25:b2:1e:ed:53:cf:6f:0c:43:
                    3e:1e:36:b2:f9:82:1e:ad:d8:3e:ba:17:7f:90:de:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:92:CF:EF:A3:83:81:3E:F6:60:CC:A3:EF:EE:95:97:A7:5E:E3:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TZLP76ODgT72YMyj7-6Vl6de4xg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.107.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:0e:54:88:a1:99:23:e9:a5:36:9a:34:46:73:19:b3:fc:
         45:41:78:02:5c:5f:f7:57:2f:db:69:dc:a5:36:2f:d1:ce:49:
         1e:d7:8f:1c:1d:6a:2b:35:18:91:3c:df:fd:7c:9f:2c:ab:b9:
         28:de:41:9c:dd:fb:a6:b3:57:27:e5:6c:29:c0:fe:d5:25:0f:
         14:72:b0:76:00:88:96:98:87:3c:2f:a0:86:6d:bc:85:e3:55:
         c6:53:84:0e:6d:a7:26:56:7e:56:cd:a7:cb:84:be:a3:9e:dc:
         86:75:f0:19:4b:24:25:cb:46:1e:68:87:4b:b8:8a:9e:21:ba:
         db:16:ae:8a:24:c9:b2:76:27:c3:c1:bc:fc:d8:5c:13:44:08:
         13:b8:ea:12:6c:68:ae:4a:2c:17:04:9f:10:6e:26:56:4c:24:
         20:ed:e3:43:2c:3f:1a:36:8d:06:4b:94:54:22:e7:55:0d:11:
         c8:29:bd:59:f0:b5:1c:b9:16:6f:9d:ad:ab:70:95:93:58:08:
         f4:7a:2a:49:0b:92:b4:6d:bb:48:46:77:54:94:4b:74:34:a2:
         d3:06:4a:6f:8f:33:b5:a0:f2:3f:62:4f:93:b0:8e:42:54:1f:
         e0:42:3a:cb:d4:4a:2f:1f:5a:10:29:a3:35:c1:0e:02:6d:c0:
         83:6e:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:43:03 2025 by rpki-client