Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZCdLFNgNjyDOozintGd-4QDZv9s.roa
File:                     ZCdLFNgNjyDOozintGd-4QDZv9s.roa (raw, json)
Hash identifier:          mAnIsxQwFPaeIJfM0tNjs+wMwf/dX4nKL6RmiUUsDIU=
Subject key identifier:   64:27:4B:14:D8:0D:8F:20:CE:A3:38:A7:B4:67:7E:E1:00:D9:BF:DB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       33
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZCdLFNgNjyDOozintGd-4QDZv9s.roa
Signing time:             Mon 27 Mar 2023 16:02:06 +0000
ROA not before:           Mon 27 Mar 2023 16:02:06 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.120.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:06 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=64274B14D80D8F20CEA338A7B4677EE100D9BFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:26:3b:c4:f4:91:d2:4c:0c:ba:0d:da:3f:
                    ed:40:68:ec:72:cc:84:17:5b:21:eb:64:25:38:81:
                    81:d6:eb:71:98:18:46:06:9a:a5:da:6d:bf:c3:db:
                    53:d6:6e:29:69:54:bb:81:a9:17:4c:95:13:a3:8a:
                    e6:c6:57:75:21:1f:0b:19:fc:4f:80:82:dc:c9:b9:
                    f0:e2:32:b0:3a:30:37:ba:e5:4e:80:97:a8:7f:71:
                    81:19:66:f5:7f:99:db:26:58:7e:42:7b:1a:d3:1a:
                    5b:9f:91:1a:c3:05:85:3b:95:e9:49:d3:9b:a6:24:
                    bd:9d:ec:0d:8b:f5:76:c7:dc:6b:d3:d8:ac:40:9d:
                    21:c2:75:ae:26:34:2b:7a:bd:8f:33:94:14:a2:a0:
                    38:69:12:00:a9:0f:6e:f9:51:f3:f3:14:9a:4d:ca:
                    b1:6b:8a:04:5a:74:13:15:b2:ed:ef:72:ad:d0:bf:
                    46:8b:70:9f:b4:26:c3:73:7b:a3:56:01:5e:8e:98:
                    5a:6d:4e:e3:0e:87:40:81:52:c3:32:65:a5:7a:eb:
                    c5:c9:37:7f:df:83:72:f2:7e:dd:d7:24:c1:1c:5f:
                    a8:cd:b8:35:d5:2a:dd:41:38:93:84:a0:88:3d:98:
                    39:91:35:d5:a4:ce:6a:f7:d2:b2:2d:73:86:b6:4e:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:27:4B:14:D8:0D:8F:20:CE:A3:38:A7:B4:67:7E:E1:00:D9:BF:DB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZCdLFNgNjyDOozintGd-4QDZv9s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:f4:69:a2:61:4c:4b:d7:d7:44:cf:3a:d5:a4:0b:8c:b7:
         e5:fe:78:98:3c:67:63:8f:e8:ff:73:71:3f:d2:5e:10:2d:c1:
         62:41:cc:2d:c6:29:14:8e:61:ae:57:00:83:2d:e5:72:6a:01:
         ba:8b:3b:18:6f:c1:22:e7:dd:28:40:95:71:17:51:6f:24:32:
         2e:2c:01:c9:18:5e:47:0e:af:3c:06:44:e8:68:04:ce:0a:52:
         90:d8:bb:1a:9b:88:e8:79:11:5e:ed:a5:3d:98:42:d3:64:50:
         d2:83:dc:14:29:ec:84:00:99:98:4b:7d:72:c2:00:fe:c7:2f:
         02:90:83:82:69:9a:24:1a:45:46:df:42:70:35:38:dd:73:f3:
         31:ca:9f:29:a9:41:c9:a0:83:dd:2b:f8:8e:59:3f:8a:fe:15:
         b5:c2:75:e2:f8:7e:76:cf:c9:c5:03:48:e7:d3:c8:4f:6e:9c:
         90:3b:a3:51:71:75:98:d2:5e:ce:bd:b5:88:73:42:72:3d:48:
         36:1d:a7:70:c7:f2:80:ca:4d:0c:6c:3c:b5:bd:b8:2b:80:af:
         19:f1:0c:8f:5b:83:cc:3a:71:bc:2e:c9:7b:78:59:55:61:b8:
         1c:43:30:7b:fc:cd:03:be:0f:72:dc:5b:81:42:ca:b5:30:f1:
         28:a4:65:ea
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDIwNloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNjQyNzRCMTREODBEOEYy
MENFQTMzOEE3QjQ2NzdFRTEwMEQ5QkZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANVHJjvE9JHSTAy6Ddo/7UBo7HLMhBdbIetkJTiBgdbrcZgYRgaa
pdptv8PbU9ZuKWlUu4GpF0yVE6OK5sZXdSEfCxn8T4CC3Mm58OIysDowN7rlToCX
qH9xgRlm9X+Z2yZYfkJ7GtMaW5+RGsMFhTuV6UnTm6YkvZ3sDYv1dsfca9PYrECd
IcJ1riY0K3q9jzOUFKKgOGkSAKkPbvlR8/MUmk3KsWuKBFp0ExWy7e9yrdC/Rotw
n7Qmw3N7o1YBXo6YWm1O4w6HQIFSwzJlpXrrxck3f9+DcvJ+3dckwRxfqM24NdUq
3UE4k4SgiD2YOZE11aTOavfSsi1zhrZOutcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRkJ0sU2A2PIM6jOKe0Z37hANm/2zAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvWkNkTEZOZ05qeURPb3ppbnRHZC00UURadjlzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAjFheDANBgkqhkiG9w0BAQsFAAOCAQEAUbb0aaJhTEvX10TPOtWkC4y35f54
mDxnY4/o/3NxP9JeEC3BYkHMLcYpFI5hrlcAgy3lcmoBuos7GG/BIufdKECVcRdR
byQyLiwByRheRw6vPAZE6GgEzgpSkNi7GpuI6HkRXu2lPZhC02RQ0oPcFCnshACZ
mEt9csIA/scvApCDgmmaJBpFRt9CcDU43XPzMcqfKalByaCD3Sv4jlk/iv4VtcJ1
4vh+ds/JxQNI59PIT26ckDujUXF1mNJezr21iHNCcj1INh2ncMfygMpNDGw8tb24
K4CvGfEMj1uDzDpxvC7Je3hZVWG4HEMwe/zNA74PctxbgULKtTDxKKRl6g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:29 2025 by rpki-client