Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJel_qFVXe1mvk1tH58VekhgzXE.roa
File:                     cJel_qFVXe1mvk1tH58VekhgzXE.roa (raw, json)
Hash identifier:          wj06awVxIQYylhJQDFybxVrb9J0L9SvEusTP0G1xSFE=
Subject key identifier:   70:97:A5:FE:A1:55:5D:ED:66:BE:4D:6D:1F:9F:15:7A:48:60:CD:71
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04A0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJel_qFVXe1mvk1tH58VekhgzXE.roa
Signing time:             Thu 27 Jul 2023 16:46:11 +0000
ROA not before:           Thu 27 Jul 2023 16:46:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.74.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7097A5FEA1555DED66BE4D6D1F9F157A4860CD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:c9:f9:c4:d3:d5:a7:b1:c0:a1:7b:24:f4:
                    70:e2:b3:37:18:90:66:17:43:33:16:96:e5:6c:1d:
                    09:c0:ea:49:5b:47:f3:9b:50:93:44:c2:66:94:d9:
                    c6:3e:ad:87:82:4d:73:45:d0:e8:5e:6b:66:2c:0b:
                    12:f5:fa:0d:37:2b:74:30:89:a4:54:dc:ea:d2:05:
                    bf:b5:a7:5b:e0:30:06:17:da:c7:85:cf:ab:3d:a9:
                    1f:0d:34:9e:2f:f6:f0:b5:a2:1e:ea:48:56:89:62:
                    6c:89:1a:2c:61:be:98:a7:f9:cb:25:9e:7a:ee:b8:
                    81:87:f9:e8:a2:ab:ba:ad:bf:85:fd:06:f2:35:93:
                    c6:b3:6a:fb:8b:39:63:b5:d9:7f:82:1d:33:af:b9:
                    20:1d:26:35:be:9a:8a:11:23:1c:da:5b:0c:0d:64:
                    73:8a:16:12:2b:b0:32:e8:3d:a3:fd:c0:94:0e:c5:
                    57:ee:dd:38:41:b4:5a:ed:51:97:c8:1f:95:02:89:
                    bc:dc:6a:ba:65:8d:f6:a1:cf:71:1e:a9:81:bf:eb:
                    15:17:42:2a:fc:48:c8:ae:59:48:29:41:67:97:e1:
                    71:0f:24:29:e3:33:03:46:8b:9c:64:29:a8:50:d9:
                    bc:c1:73:c4:43:9f:4c:eb:72:b0:73:c9:d0:f2:48:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:A5:FE:A1:55:5D:ED:66:BE:4D:6D:1F:9F:15:7A:48:60:CD:71
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJel_qFVXe1mvk1tH58VekhgzXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:64:a5:9e:9b:39:8e:f9:25:5c:bc:7c:ca:de:a1:77:82:9e:
         28:ce:13:0b:3d:de:6c:00:97:90:21:84:76:60:4e:29:b3:c3:
         8a:cf:b2:d1:49:5b:00:f4:92:88:79:07:e5:69:0e:26:ea:ad:
         c2:dd:38:e4:12:89:7c:df:54:ac:8d:62:ff:36:ab:f3:50:73:
         0c:12:d2:b6:52:22:ea:12:ea:53:d5:63:b0:f5:9c:e2:89:cb:
         3c:89:49:bf:25:35:bc:11:12:1c:20:f5:ad:b1:d4:03:4e:cd:
         16:4f:08:71:f1:62:3e:b6:8a:13:8f:a7:69:e9:32:f8:a3:7c:
         6f:dc:fe:82:0f:50:2d:ed:c6:55:cf:28:cf:ce:2a:7b:a8:75:
         40:0c:87:d6:d3:31:ae:14:6d:90:d6:68:b4:79:e5:90:17:a1:
         df:e1:6c:b1:af:f9:63:ff:bf:fc:cb:c5:d0:36:6d:4d:60:db:
         b3:54:24:07:6b:55:1f:72:49:7b:38:8c:f5:50:4f:38:a7:47:
         bf:79:0a:4a:e3:7b:eb:c7:70:06:50:d7:f8:88:6a:19:37:01:
         82:66:9c:86:70:7f:e6:60:a5:6a:f6:c7:0b:20:9c:9b:ba:1d:
         db:31:63:bf:e5:d9:e7:09:0f:bd:c8:dd:1f:fd:b9:37:34:bb:
         60:e3:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:09 2025 by rpki-client