Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XV_ln4mfApx_zlNTvXnzLIwce5w.roa
File:                     XV_ln4mfApx_zlNTvXnzLIwce5w.roa (raw, json)
Hash identifier:          DjBF3F5bYuHmcbGB7h2uzCIW7/LI+a840X/7aoZvuLQ=
Subject key identifier:   5D:5F:E5:9F:89:9F:02:9C:7F:CE:53:53:BD:79:F3:2C:8C:1C:7B:9C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       017B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XV_ln4mfApx_zlNTvXnzLIwce5w.roa
Signing time:             Wed 24 May 2023 16:33:22 +0000
ROA not before:           Wed 24 May 2023 16:33:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.36.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5D5FE59F899F029C7FCE5353BD79F32C8C1C7B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:c6:32:35:c8:4c:99:4b:2d:3c:d4:aa:12:
                    17:71:82:34:01:cb:cd:ff:f2:08:b8:cd:29:3c:a4:
                    62:35:45:9a:cd:f7:e8:10:e8:07:f3:e3:97:ea:81:
                    3d:61:79:66:08:70:b3:31:7f:64:b5:44:0b:03:c7:
                    d4:ad:a6:9e:87:c9:1b:23:d0:0f:5b:e2:ec:c9:67:
                    20:24:d8:ac:c3:77:be:21:77:63:93:34:bc:6c:36:
                    4e:3f:6e:2b:c1:49:9c:99:c1:99:ca:24:12:63:93:
                    e4:a7:ea:d7:73:00:e2:74:f9:ac:82:34:6c:8b:31:
                    37:72:82:8e:37:2b:94:01:36:c5:1e:38:19:67:43:
                    4f:e9:a4:d9:60:f9:61:00:f0:72:43:ac:cc:19:a0:
                    9a:d3:65:8d:56:8d:02:94:0f:fe:fa:38:ee:39:d3:
                    f3:a2:a2:f2:9a:f3:2d:49:0c:17:67:90:2a:b5:b2:
                    84:77:b3:f6:74:4b:db:2f:e2:ed:87:c4:07:93:76:
                    0a:bc:a0:4d:9a:5c:a2:2e:90:49:86:ef:05:70:13:
                    b0:ad:de:7d:36:a2:2f:0d:4b:35:48:8f:12:c1:0e:
                    f9:2c:86:ec:92:30:9f:49:f3:77:7f:23:31:c2:70:
                    3d:1b:78:f7:64:4f:77:62:90:cd:eb:f0:43:93:c9:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5F:E5:9F:89:9F:02:9C:7F:CE:53:53:BD:79:F3:2C:8C:1C:7B:9C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XV_ln4mfApx_zlNTvXnzLIwce5w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:42:96:30:ff:d8:67:2c:b9:03:0d:bd:26:13:1f:13:15:
         c0:82:fc:0c:fa:b6:67:23:61:c8:da:b2:5d:fd:5d:25:96:96:
         58:12:79:29:16:25:41:c2:1d:13:38:2e:05:1f:f0:47:f4:18:
         ea:32:8b:83:df:08:64:f8:78:65:5d:8e:b7:e4:6d:f6:58:a6:
         23:84:7a:e2:42:46:47:23:e7:1c:a1:ce:36:ce:2b:60:8d:91:
         b2:58:0c:b8:b7:74:e0:b7:6b:d7:81:ac:28:05:81:66:5b:c5:
         2c:ce:c5:78:9a:6b:34:86:f0:ce:be:b7:87:63:d4:e3:b3:df:
         e4:14:02:55:32:64:86:a1:40:88:58:c7:55:0a:27:0d:1c:17:
         ea:a7:7a:e5:a0:dc:99:13:aa:af:48:98:f8:05:19:ac:6e:25:
         5f:7a:32:56:31:8c:78:8a:29:2f:6c:12:d8:3b:5e:1b:b4:05:
         43:bd:84:fd:22:ec:a8:5b:1d:87:8f:b3:df:ad:9d:ac:43:a4:
         a4:98:c3:10:2d:b9:70:dd:48:6c:eb:be:4b:55:53:dc:18:16:
         98:0f:ac:03:0b:84:a0:e4:d9:c2:ea:b9:f2:a7:cb:bc:a5:47:
         0c:39:7a:96:4d:c4:52:7e:e3:61:32:9f:01:fa:78:7a:90:63:
         34:4f:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:59 2025 by rpki-client