Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a9Seg4_zRddK17CCpxRrdtHwHPM.roa
File:                     a9Seg4_zRddK17CCpxRrdtHwHPM.roa (raw, json)
Hash identifier:          v/4h/rJJMrwkxqMeTyNq2ebEwnE9ZyNimOxVpMt+/Rs=
Subject key identifier:   6B:D4:9E:83:8F:F3:45:D7:4A:D7:B0:82:A7:14:6B:76:D1:F0:1C:F3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a9Seg4_zRddK17CCpxRrdtHwHPM.roa
Signing time:             Wed 24 May 2023 16:40:34 +0000
ROA not before:           Wed 24 May 2023 16:40:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.28.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6BD49E838FF345D74AD7B082A7146B76D1F01CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:ac:0d:1c:19:cd:01:29:55:52:ec:93:9c:
                    d7:35:16:cd:0b:ac:98:35:39:e4:d7:6e:15:c9:e2:
                    e6:2b:ce:a2:ab:92:02:98:51:a0:6a:bb:27:85:30:
                    08:41:ed:88:41:d3:33:b9:7a:f1:52:81:ae:c8:df:
                    1a:6b:3a:f5:38:7a:85:44:6d:df:c6:7a:9b:3c:e8:
                    e8:8e:74:40:0d:d4:36:74:d7:8f:cf:9d:41:41:cf:
                    70:60:03:19:83:08:fb:10:5a:63:05:b5:17:e6:e8:
                    17:5d:34:16:26:f6:e5:99:66:29:ba:67:ac:5d:fa:
                    1e:d1:b8:9e:f0:ba:c5:ee:4e:fa:97:45:6b:22:13:
                    18:fd:b7:95:63:ec:5b:12:17:84:74:43:c6:38:c8:
                    2d:83:2b:7f:0d:14:cb:28:88:fb:55:c6:3d:40:75:
                    ea:25:95:74:ef:e7:e5:a4:f6:cb:da:6a:e3:82:f8:
                    15:28:87:35:5e:19:8c:05:87:8a:de:63:a2:fe:55:
                    3c:26:2b:63:09:12:d5:93:52:30:e7:3f:b3:70:46:
                    3a:06:45:db:30:07:c1:98:4c:a5:0a:04:f3:ee:53:
                    32:05:05:95:db:14:3e:80:bc:e9:01:8b:5d:27:a7:
                    1a:7e:14:5b:29:d8:cd:19:22:4d:b6:aa:63:f4:86:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D4:9E:83:8F:F3:45:D7:4A:D7:B0:82:A7:14:6B:76:D1:F0:1C:F3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a9Seg4_zRddK17CCpxRrdtHwHPM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:07:84:2e:88:39:42:fc:5e:a4:c9:9d:ae:1f:f3:66:36:e2:
         b9:b9:57:22:46:1b:6b:df:d9:48:0b:74:d0:4f:6f:89:9d:fc:
         3f:bb:d0:d1:02:3b:49:02:4e:35:f7:8b:e0:32:97:f8:c7:4e:
         12:25:13:97:ed:1e:5c:11:8d:a7:0e:25:0c:bd:c5:cb:54:8a:
         64:7c:4b:9e:02:d5:4c:32:65:91:e5:af:5c:0d:e8:3e:2f:11:
         09:64:c7:78:81:c0:58:ef:57:76:5f:bf:9a:4d:cc:77:ce:80:
         05:06:35:fe:a0:65:bb:c7:f5:70:93:89:55:60:84:16:66:0f:
         40:2e:a1:b9:89:63:7c:d2:7e:0a:b4:cb:ea:d6:86:62:3d:06:
         1a:16:c9:db:f3:b6:c9:5b:74:13:65:fa:53:8e:b1:6a:0c:70:
         a1:74:d3:c9:c6:38:5c:6b:83:58:b6:63:ff:f4:ce:9a:2a:63:
         f1:a9:f5:13:57:42:97:ba:a4:6d:10:3c:9a:3b:9f:3e:fa:f9:
         f2:8d:b0:ce:9c:f8:bd:80:fd:ce:ff:67:ac:4c:7d:e4:19:b1:
         31:a6:b4:ea:67:7f:a4:d6:33:5c:de:50:90:a8:c4:04:aa:6a:
         3d:6b:84:8c:9d:25:09:06:a0:d7:98:84:80:b0:83:7f:8c:26:
         69:40:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:20 2025 by rpki-client