Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa
File:                     WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa (raw, json)
Hash identifier:          V50mqnrVcAQC6kCgTPRiD7BgLPRmeBf9UHjR2LKfTt8=
Subject key identifier:   59:A1:87:1F:D1:07:A1:76:90:47:FD:6A:4B:49:29:E2:21:74:FD:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0198
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa
Signing time:             Wed 24 May 2023 16:35:13 +0000
ROA not before:           Wed 24 May 2023 16:35:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.230.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:35:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=59A1871FD107A1769047FD6A4B4929E22174FD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:18:09:79:fd:7a:cd:d0:bf:18:17:b5:0f:
                    a2:fb:e1:47:4d:11:17:56:a0:ad:5a:05:c9:e8:cf:
                    da:b0:25:85:1f:eb:02:30:3f:62:20:06:65:d0:2e:
                    58:b7:a8:bc:2e:22:ed:0c:b8:75:dd:d7:29:50:e3:
                    9e:46:62:4b:d2:9c:1c:47:82:ec:4e:36:87:70:3f:
                    19:36:5c:4f:c2:7a:69:b2:cf:2e:00:cc:de:c3:26:
                    e9:f3:2a:74:68:be:15:61:95:35:08:64:e7:02:24:
                    0e:a9:7c:43:36:d9:73:05:96:74:07:47:59:a4:fb:
                    f1:2e:d9:4e:b0:77:bb:bf:1e:f0:87:51:61:c1:e8:
                    ad:89:b8:59:96:9d:a4:79:58:b4:c2:26:5a:13:b1:
                    dc:e3:3e:7e:30:44:d5:1c:bf:42:ad:61:d0:4a:58:
                    44:85:05:40:10:72:9d:a4:5a:c2:b2:5a:48:41:cf:
                    b9:a6:63:6b:1f:1a:1a:09:fe:c1:e1:2c:16:95:2f:
                    52:94:1c:8c:7f:b3:c6:c2:bd:d7:ab:e0:25:64:c1:
                    8a:df:f5:db:4a:9c:93:73:bb:25:ed:eb:87:6a:53:
                    8e:03:aa:d3:fe:a1:43:d8:38:6d:0c:01:5d:2f:5d:
                    f9:23:69:bf:19:08:5f:a2:fc:c0:a2:41:00:23:b4:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A1:87:1F:D1:07:A1:76:90:47:FD:6A:4B:49:29:E2:21:74:FD:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:ca:5b:bd:10:2b:20:39:73:63:a7:81:57:fe:bc:7e:1b:
         01:b2:02:71:eb:ec:06:ae:a8:cc:09:03:8f:8f:3c:5a:f4:bf:
         d4:7b:87:1e:53:c9:ea:36:4f:a4:87:f1:00:30:74:98:b1:cd:
         5b:b5:f7:69:0d:d0:35:d6:e6:33:cc:31:dd:15:16:d3:e5:d4:
         53:3d:1b:64:07:a0:9e:da:60:ea:de:e5:5a:82:59:fb:93:2e:
         89:b4:8c:f6:73:a5:68:fa:31:47:ad:71:e7:dd:c0:a6:b0:5e:
         55:1d:b0:61:c7:4d:68:3d:a4:c3:b3:b8:1e:c8:03:05:fa:bd:
         d3:e0:41:e0:15:09:67:18:81:48:6a:fc:ff:f6:67:b9:a2:6c:
         b8:32:69:7e:ce:1a:de:b4:d6:26:43:cd:d3:06:f8:4f:7d:72:
         9c:9c:8b:79:31:12:39:d5:b9:5c:cf:cb:53:77:1a:3e:59:c4:
         b9:31:35:76:03:29:70:8b:57:9e:b5:0f:4c:c6:7f:6d:15:3c:
         fd:cf:21:0f:03:aa:9b:0d:96:f1:5b:4b:4e:b1:f3:ea:4e:b9:
         ae:b2:5e:dd:d5:52:8d:2d:fc:94:29:48:bf:3d:fc:c5:12:42:
         72:a3:b4:37:40:19:25:7f:f7:03:a8:b7:77:89:fa:5c:e3:2a:
         63:6b:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:23 2025 by rpki-client