Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_e1t9tWbo9xoBw_IrNZbH5FtGW8.roa
File:                     _e1t9tWbo9xoBw_IrNZbH5FtGW8.roa (raw, json)
Hash identifier:          3ozl29hjEX8Dzf4nS1Djc0hpMNA1A64BofN7XcbsbDM=
Subject key identifier:   FD:ED:6D:F6:D5:9B:A3:DC:68:07:0F:C8:AC:D6:5B:1F:91:6D:19:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_e1t9tWbo9xoBw_IrNZbH5FtGW8.roa
Signing time:             Wed 24 May 2023 16:02:21 +0000
ROA not before:           Wed 24 May 2023 16:02:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.172.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:02:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FDED6DF6D59BA3DC68070FC8ACD65B1F916D196F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:76:dc:f2:c0:14:bd:43:84:47:14:c2:42:
                    21:7c:7c:15:f8:8a:0e:b9:38:a0:19:65:96:db:63:
                    e8:26:66:75:83:46:f3:52:b9:82:f8:09:c8:16:33:
                    21:6c:06:73:87:8c:51:6c:cc:78:41:02:aa:60:64:
                    42:50:9d:92:57:99:27:ab:86:96:6b:34:85:a5:62:
                    e1:e1:24:1a:3b:fb:fd:e6:7e:50:8b:e8:80:73:33:
                    1f:90:4e:5d:05:c4:f1:d3:41:00:8a:d7:0c:aa:38:
                    2c:95:e3:52:2e:2b:62:6c:d5:01:77:a2:da:c8:5e:
                    ba:aa:eb:f2:a2:37:26:71:73:21:e8:f8:54:19:48:
                    e9:73:2d:e8:25:b5:71:59:78:29:78:39:bf:45:29:
                    ec:cc:a6:b8:5f:1d:2a:b2:11:ce:0b:81:99:f5:05:
                    9c:61:21:8b:6c:11:10:e4:58:77:4d:79:1b:e8:d6:
                    2f:15:b6:98:9b:9f:99:70:50:f5:ea:6a:eb:64:a0:
                    4a:21:ad:9a:87:02:c2:2d:1f:7d:3a:83:da:88:d5:
                    2a:60:09:19:d8:ad:e0:a5:ba:56:b4:54:49:83:cb:
                    b9:5f:7f:30:1a:4e:47:d8:23:d3:29:80:9c:c0:35:
                    41:c8:d1:13:3e:fc:a8:ae:a9:ac:e2:8b:e5:95:1e:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:ED:6D:F6:D5:9B:A3:DC:68:07:0F:C8:AC:D6:5B:1F:91:6D:19:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_e1t9tWbo9xoBw_IrNZbH5FtGW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:46:e1:25:f3:01:0a:49:7d:bc:8e:62:f9:32:60:7e:19:a8:
         c9:2d:6d:07:a1:5a:28:f3:b8:80:21:37:65:d4:60:1f:e9:b8:
         db:6a:42:f4:09:33:61:21:60:b3:2c:5c:aa:8f:42:27:1e:69:
         df:58:02:aa:70:de:30:1d:f3:4d:ba:5b:47:c4:ec:df:d0:c8:
         7c:ed:64:0b:5b:ac:b7:e5:60:5b:82:1a:63:41:36:ae:6b:1e:
         31:c4:2e:9f:ac:95:48:30:5d:35:c9:37:ac:90:b1:e5:eb:51:
         42:0f:a4:41:b9:43:8f:1f:4f:7f:58:82:a5:c1:9f:24:d1:c5:
         87:6b:bc:28:9f:53:d4:e3:56:6f:e3:cd:4d:e3:4a:fa:09:24:
         fb:65:39:c8:94:5e:cb:09:be:0c:77:b5:2e:fe:56:f2:02:ec:
         b4:58:18:93:48:b9:74:04:f7:8a:9b:ae:24:18:b3:82:c4:0b:
         fa:52:ec:e9:92:1f:26:e3:7c:c1:3d:da:56:03:8f:50:60:3b:
         9f:ab:84:ed:ae:ab:97:37:f6:2a:9b:5a:b6:b4:1f:21:2a:73:
         a4:53:e2:f5:32:68:c1:0f:77:df:26:5b:64:f1:49:99:8d:dd:
         d4:02:69:75:b6:38:3d:6c:d7:85:9d:7b:4b:a7:80:48:dc:f7:
         55:86:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:56 2025 by rpki-client