Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dBDVu7W60-JhO18nmr8E-S5AMG4.roa
File:                     dBDVu7W60-JhO18nmr8E-S5AMG4.roa (raw, json)
Hash identifier:          qNohRBa8AE0N/tNG5JK2OiH1S640wapRxZBkdTu1f48=
Subject key identifier:   74:10:D5:BB:B5:BA:D3:E2:61:3B:5F:27:9A:BF:04:F9:2E:40:30:6E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03E4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dBDVu7W60-JhO18nmr8E-S5AMG4.roa
Signing time:             Tue 06 Jun 2023 16:03:42 +0000
ROA not before:           Tue 06 Jun 2023 16:03:42 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.46.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:42 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7410D5BBB5BAD3E2613B5F279ABF04F92E40306E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:d8:5a:1c:87:73:86:ad:c8:2d:ad:0e:d3:
                    a8:81:8d:f1:11:1e:72:a0:fe:b2:86:81:f1:a6:34:
                    34:be:ae:4f:28:b6:c3:c8:1e:fd:3f:d8:86:7e:03:
                    01:ae:75:74:52:bb:11:f9:cc:21:6e:38:1b:79:b3:
                    46:ac:c6:97:c6:f3:af:9a:6c:bc:36:8b:99:15:1d:
                    11:e4:93:b1:74:e7:a5:72:08:a5:be:38:8c:b3:bc:
                    0d:50:14:14:ee:c7:af:79:27:ed:7a:c8:b2:95:23:
                    8b:65:91:a2:a1:51:a9:d6:9d:ed:84:fb:27:8a:35:
                    2e:27:31:91:d9:79:b8:a2:17:e2:8b:7e:b2:ee:64:
                    d4:85:8e:92:bf:c1:7a:5d:59:d8:9c:fa:c4:96:3e:
                    19:d7:8a:a1:cd:3b:83:d3:90:cc:44:c7:ba:c7:c5:
                    66:64:38:81:bc:e5:4d:71:c4:e2:5f:aa:50:0e:3e:
                    26:de:22:78:ec:6c:3c:e4:6b:e6:9d:1c:36:59:42:
                    7e:fa:ea:01:21:e6:af:5c:b9:99:88:3c:f2:92:67:
                    f8:8c:d0:8b:65:20:d1:6a:2c:37:b5:ae:40:d6:dc:
                    d5:e2:cc:f7:55:8b:d3:8b:c5:65:f2:0d:16:9f:bc:
                    a8:43:62:00:8d:ac:84:71:aa:63:52:60:75:d8:8e:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:10:D5:BB:B5:BA:D3:E2:61:3B:5F:27:9A:BF:04:F9:2E:40:30:6E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dBDVu7W60-JhO18nmr8E-S5AMG4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:bc:01:e3:97:40:56:f8:2f:8f:30:d3:2a:0f:d1:d9:d0:ee:
         05:59:44:75:7e:1f:db:82:43:04:f7:3c:7a:b5:dc:e7:7a:ac:
         7b:23:3e:c5:d2:07:1e:55:7b:ed:b3:84:2d:2f:1a:0b:6c:99:
         11:60:4a:b7:74:46:d7:27:42:3b:e5:87:f3:6b:da:78:38:a0:
         27:09:7c:0e:22:94:dd:06:6f:b2:0e:ae:bd:db:df:ce:a1:6e:
         07:03:48:0d:74:90:2a:52:b9:80:ab:b9:f9:6d:04:bc:eb:6e:
         8e:be:e0:a8:7f:7d:a8:52:74:57:d9:2e:c7:60:63:f2:ca:d8:
         e4:92:ba:af:58:23:f7:d1:5f:af:3a:f5:e1:9a:25:08:0a:ac:
         1f:50:85:1a:72:1d:7c:e2:b8:41:6f:d5:8b:d2:d1:ac:7f:82:
         37:63:92:89:a4:ee:8e:a1:cb:29:8f:4a:6e:5f:96:d4:e8:9d:
         98:eb:1b:81:52:9f:e0:0f:93:11:b6:f7:69:84:f2:98:a3:72:
         bf:48:3c:9b:e3:c4:30:22:68:d4:3f:2a:cf:69:9b:40:8a:fa:
         da:f3:31:00:d7:04:15:f7:2a:7e:be:75:9c:7e:8a:db:88:09:
         9a:40:9a:00:b0:85:f7:0d:21:44:03:ad:27:1b:8c:00:99:5e:
         5f:37:87:42
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjAzNDJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc0MTBENUJCQjVCQUQz
RTI2MTNCNUYyNzlBQkYwNEY5MkU0MDMwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPethaHIdzhq3ILa0O06iBjfERHnKg/rKGgfGmNDS+rk8otsPI
Hv0/2IZ+AwGudXRSuxH5zCFuOBt5s0asxpfG86+abLw2i5kVHRHkk7F056VyCKW+
OIyzvA1QFBTux695J+16yLKVI4tlkaKhUanWne2E+yeKNS4nMZHZebiiF+KLfrLu
ZNSFjpK/wXpdWdic+sSWPhnXiqHNO4PTkMxEx7rHxWZkOIG85U1xxOJfqlAOPibe
InjsbDzka+adHDZZQn766gEh5q9cuZmIPPKSZ/iM0ItlINFqLDe1rkDW3NXizPdV
i9OLxWXyDRafvKhDYgCNrIRxqmNSYHXYjlKPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdBDVu7W60+JhO18nmr8E+S5AMG4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2RCRFZ1N1c2MC1KaE8xOG5tcjhFLVM1QU1HNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxaC4wDQYJKoZIhvcNAQELBQADggEBANW8AeOXQFb4L48w0yoP0dnQ7gVZ
RHV+H9uCQwT3PHq13Od6rHsjPsXSBx5Ve+2zhC0vGgtsmRFgSrd0RtcnQjvlh/Nr
2ng4oCcJfA4ilN0Gb7IOrr3b386hbgcDSA10kCpSuYCrufltBLzrbo6+4Kh/fahS
dFfZLsdgY/LK2OSSuq9YI/fRX6869eGaJQgKrB9QhRpyHXziuEFv1YvS0ax/gjdj
komk7o6hyymPSm5fltTonZjrG4FSn+APkxG292mE8pijcr9IPJvjxDAiaNQ/Ks9p
m0CK+trzMQDXBBX3Kn6+dZx+ituICZpAmgCwhfcNIUQDrScbjACZXl83h0I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:44 2025 by rpki-client