Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WZXzWC_wYYlXGdjPxUfcYJBZNxg.roa
File:                     WZXzWC_wYYlXGdjPxUfcYJBZNxg.roa (raw, json)
Hash identifier:          M7NH9w2ys/8kVe5S2J+Gi5IoJIwoxj0A3cqX6ejmeQg=
Subject key identifier:   59:95:F3:58:2F:F0:61:89:57:19:D8:CF:C5:47:DC:60:90:59:37:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       027F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WZXzWC_wYYlXGdjPxUfcYJBZNxg.roa
Signing time:             Tue 30 May 2023 16:34:25 +0000
ROA not before:           Tue 30 May 2023 16:34:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.10.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5995F3582FF061895719D8CFC547DC6090593718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:4d:1b:0e:15:ee:5a:57:70:72:92:75:9e:
                    03:5e:e4:61:de:6a:86:9b:14:c7:93:be:15:c7:76:
                    3c:6d:46:73:7e:f6:42:a4:45:98:7a:a1:1f:7e:b1:
                    b4:e6:b3:7d:08:d0:8d:a8:14:cd:60:f5:0f:0b:89:
                    c6:c9:02:9a:a9:de:a4:5f:6d:1b:19:49:32:84:24:
                    e3:6c:d4:40:be:0b:7a:ea:dd:96:bc:02:c3:78:24:
                    f8:7c:db:e4:d1:41:de:ea:47:78:92:f8:93:a4:e0:
                    06:f7:66:0e:ab:2f:1a:ce:2e:90:53:55:47:3a:92:
                    5c:4a:a4:90:39:d0:19:ff:4b:c6:48:33:ba:21:6a:
                    f8:fc:1f:9d:42:c7:c5:b5:19:43:71:c3:c8:31:5b:
                    d1:ad:82:33:e7:93:7b:39:c0:fb:b5:0c:d3:b9:e8:
                    e5:3b:fd:46:55:1a:ea:1b:c3:d9:82:d6:e9:85:db:
                    db:d4:84:fc:4f:9c:15:39:3f:96:d2:3c:95:d7:0a:
                    4f:a5:a3:89:22:98:d5:d8:5d:71:dc:51:4e:f4:1c:
                    50:a4:b3:54:29:4e:ba:17:4a:ce:96:b1:c7:c0:d6:
                    0e:20:f9:df:1d:5d:73:28:50:83:de:06:73:df:a8:
                    2d:9a:5a:5b:92:b7:8d:d9:68:c9:7c:7c:b7:c0:87:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:F3:58:2F:F0:61:89:57:19:D8:CF:C5:47:DC:60:90:59:37:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WZXzWC_wYYlXGdjPxUfcYJBZNxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:be:e1:b0:fb:81:b0:69:cb:81:09:f2:ea:1f:37:f5:95:a5:
         e0:0e:d7:ac:c5:19:05:0d:e9:88:2c:7c:fb:8f:01:ef:93:2e:
         38:3a:16:6d:f6:50:fe:6b:6c:64:82:a3:b2:de:fe:d4:c9:cb:
         63:69:53:24:85:e4:c0:0b:8c:86:6c:d3:1b:b1:cb:67:c0:24:
         58:86:d1:b9:60:67:48:d3:f0:b6:85:cb:ed:62:3d:4c:cb:68:
         74:0a:b8:01:ba:57:c7:94:0a:2d:16:2a:18:09:fb:dd:47:78:
         b3:25:a4:b4:8f:08:6b:98:0e:5f:a9:76:45:92:d5:d8:82:0d:
         88:6d:93:0a:36:56:61:e5:73:25:2e:79:f4:ae:05:d2:7c:5a:
         80:4c:86:5a:29:74:d4:84:09:36:75:32:40:62:f7:34:fb:f4:
         3f:e8:4c:dc:47:ad:b0:e8:57:47:4e:b3:97:d3:79:b6:a4:ce:
         96:5b:a0:ed:4a:16:da:26:34:98:25:cb:34:e4:12:18:c6:0f:
         a0:bb:ee:7f:62:36:20:8a:b4:d7:52:88:23:6c:52:45:f7:db:
         92:31:8f:98:3c:9b:d9:eb:a9:b7:8d:d9:19:54:53:d6:16:9c:
         1b:ea:32:6b:83:cf:d8:9c:e2:86:b7:f5:2f:b3:55:21:80:1f:
         37:a2:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:01 2025 by rpki-client