Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UR87lHVq5C37JrdL3FSK9ZOyttI.roa
File:                     UR87lHVq5C37JrdL3FSK9ZOyttI.roa (raw, json)
Hash identifier:          ntKUYWh919dUdhoxpjRAP0VejNJ8QB6reDHEylYzTb4=
Subject key identifier:   51:1F:3B:94:75:6A:E4:2D:FB:26:B7:4B:DC:54:8A:F5:93:B2:B6:D2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0152
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UR87lHVq5C37JrdL3FSK9ZOyttI.roa
Signing time:             Wed 24 May 2023 16:31:19 +0000
ROA not before:           Wed 24 May 2023 16:31:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.32.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=511F3B94756AE42DFB26B74BDC548AF593B2B6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a3:84:1c:2b:c6:be:b1:db:38:ae:f3:3c:a0:
                    aa:a4:aa:67:d8:3a:a9:3c:94:5f:d1:40:e9:45:1f:
                    00:4a:18:81:52:0b:a3:09:af:08:23:0c:77:89:6f:
                    9b:19:2d:4a:93:71:60:33:02:03:82:66:0b:96:61:
                    e6:7f:43:f0:52:bf:f5:70:1a:cb:d2:04:ad:f0:5a:
                    6b:ae:87:4f:a4:97:32:47:7d:fa:69:5e:3e:60:85:
                    86:cd:25:74:13:b6:70:e2:63:42:4c:76:f8:07:a8:
                    f2:3d:84:d8:2f:a0:b2:26:66:39:bb:a0:f2:3b:73:
                    65:ff:a0:4b:be:e0:92:1d:0f:65:8b:e5:83:47:12:
                    2c:23:c1:56:a8:f2:68:36:f2:e5:c1:e4:40:6b:df:
                    04:66:92:aa:99:53:2c:55:14:6e:ac:f4:b3:f7:bb:
                    d2:02:ef:80:a5:fd:ae:4b:eb:50:87:5e:7c:c8:22:
                    51:d1:df:2b:09:1b:97:ce:de:09:59:a6:00:e9:71:
                    bb:bb:f5:30:be:66:71:e6:5b:c8:8d:65:f2:1c:ce:
                    d9:65:c2:c0:c6:cc:c1:f9:ff:59:42:c6:ac:0d:02:
                    85:54:88:eb:52:97:8f:87:e4:1a:9e:df:36:ee:4d:
                    41:f2:b8:84:8b:b9:85:ae:7d:f6:24:8c:72:94:79:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:3B:94:75:6A:E4:2D:FB:26:B7:4B:DC:54:8A:F5:93:B2:B6:D2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UR87lHVq5C37JrdL3FSK9ZOyttI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:20:89:cf:5f:e4:3e:4e:b4:31:20:72:fe:64:a1:f7:f3:
         bc:e0:4d:6e:5f:22:bf:fe:2e:d1:65:de:c7:7c:87:93:bf:fd:
         74:a8:c3:6f:42:a0:ba:ee:4c:65:94:f9:85:74:fc:80:84:f4:
         7e:34:e3:1a:25:7a:4f:dd:0a:c0:6d:51:a7:d3:ed:58:21:39:
         12:c7:42:a3:93:b0:32:f8:31:ce:d6:5a:ec:1f:4b:44:72:be:
         23:74:9d:d1:3b:35:24:1c:8b:24:1b:db:6d:f0:4f:8a:b6:62:
         10:d7:bf:17:db:73:44:4f:e3:b0:05:a2:19:ef:c0:dc:6a:ac:
         2c:f2:7b:c9:13:39:94:6d:33:56:d9:39:f5:69:3c:43:1e:1a:
         6e:7f:c6:e9:ba:14:36:e2:9a:28:79:58:87:2e:6c:37:b4:64:
         25:69:3c:4e:20:ef:0d:47:75:dc:18:53:cf:a2:d0:7e:0c:e4:
         05:c1:1f:44:60:fb:73:0a:ec:69:21:2a:16:1d:ba:7d:e5:e2:
         14:8d:33:ea:7c:a4:b0:41:b2:f5:30:58:ea:ef:e6:dc:ee:c4:
         68:3f:42:a9:ae:3d:1d:a6:da:c8:bc:ae:0f:84:b4:09:d0:09:
         0a:13:20:2f:f2:f2:96:9a:59:7c:69:7f:69:87:f0:de:bd:a2:
         f8:e9:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:40 2025 by rpki-client