Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zw_IcZaFylmEBn6oAFVJBoDbt7Q.roa
File:                     Zw_IcZaFylmEBn6oAFVJBoDbt7Q.roa (raw, json)
Hash identifier:          K8YeyaEnfydfoKAUWTdSo29heXSqIlEuvGeulTdnyPQ=
Subject key identifier:   67:0F:C8:71:96:85:CA:59:84:06:7E:A8:00:55:49:06:80:DB:B7:B4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0476
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zw_IcZaFylmEBn6oAFVJBoDbt7Q.roa
Signing time:             Thu 27 Jul 2023 16:44:08 +0000
ROA not before:           Thu 27 Jul 2023 16:44:08 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.74.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:08 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=670FC8719685CA5984067EA80055490680DBB7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:ba:72:47:1b:d4:cd:f9:73:05:f7:12:ee:
                    0f:fb:3d:8f:75:04:9a:53:33:aa:ff:4d:03:76:e6:
                    54:48:25:a3:cb:cc:c4:f0:c6:19:fe:10:b0:a9:d5:
                    d5:77:0b:24:20:04:5b:28:0c:81:8c:46:f3:2f:2e:
                    1b:a4:82:b8:dc:b7:a6:26:5e:bb:61:ea:cc:da:cc:
                    c1:cd:97:35:8e:5b:29:ff:03:85:9a:f4:96:dd:8f:
                    55:07:21:d6:01:f3:4e:ca:b8:86:d7:1f:88:26:53:
                    61:5f:4b:aa:e7:3a:2e:b1:03:78:2c:24:4e:db:ef:
                    4f:56:3e:ca:93:09:de:98:84:84:8b:88:32:bc:20:
                    e5:e7:6d:95:73:8e:ca:26:7b:b5:a8:d5:ee:55:2a:
                    7d:80:e1:cd:82:cd:7d:95:53:41:d6:2b:fe:30:d3:
                    66:dd:54:66:5c:bc:98:ac:58:df:00:a7:2d:33:cc:
                    32:cd:45:1c:1f:53:7e:1f:6f:df:0e:3a:aa:da:1a:
                    16:f1:6f:87:65:f5:6d:88:de:7c:20:57:af:78:86:
                    4b:e6:6e:a4:54:1c:60:93:74:df:40:09:db:65:81:
                    d4:a3:ee:a6:e3:d0:3e:5d:38:38:5f:15:71:02:a9:
                    07:84:58:c5:c4:c1:1b:20:2d:4d:1a:1d:09:d2:ab:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0F:C8:71:96:85:CA:59:84:06:7E:A8:00:55:49:06:80:DB:B7:B4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zw_IcZaFylmEBn6oAFVJBoDbt7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:38:4f:02:a8:60:d6:55:89:cc:99:13:9e:55:af:ac:5a:66:
         60:5f:ec:0e:74:75:9d:01:2e:61:8d:ab:54:45:45:8c:ab:48:
         10:34:9d:d8:47:69:09:a5:c1:f8:50:41:a0:f4:cf:57:39:c3:
         c0:8d:c2:25:9f:24:4c:c4:fd:9d:4c:a6:e7:65:7e:f3:50:85:
         9b:e4:1f:00:2f:9d:3b:a9:be:3d:0d:52:15:85:c1:a6:cf:b3:
         15:fb:32:1f:60:0b:4d:d8:94:3d:17:9d:9d:cf:4e:94:f0:10:
         a1:1a:9e:f3:ed:05:42:04:69:9d:8c:bf:8c:39:46:7e:9d:b1:
         c4:6d:4d:db:2f:56:3d:b0:ad:a5:c3:b7:a6:0c:7c:dc:47:43:
         09:98:45:90:e2:0d:f5:38:bf:39:ee:95:47:93:39:2b:51:55:
         0a:b1:9c:60:09:67:05:a2:1e:09:ce:b2:f5:8f:94:aa:82:47:
         0f:15:63:3a:c2:e1:0f:55:83:92:e3:69:bd:6c:d3:c9:d2:31:
         3f:77:bc:48:ac:d1:5e:e5:0c:41:4a:32:45:5f:8b:e9:0a:20:
         a5:a3:77:3e:52:8a:f4:7f:b5:e2:22:a0:ed:38:63:36:cf:aa:
         af:4e:89:54:49:3c:36:38:23:0b:16:85:e5:13:42:6a:91:e9:
         d6:e0:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:23 2025 by rpki-client