Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eEF7QfmvJwVSfsr2LCJ9aqzuLQg.roa
File:                     eEF7QfmvJwVSfsr2LCJ9aqzuLQg.roa (raw, json)
Hash identifier:          zI1hySeLH5X4hkIqUbmiTMUwur9+hy2j/S571/RlWC8=
Subject key identifier:   78:41:7B:41:F9:AF:27:05:52:7E:CA:F6:2C:22:7D:6A:AC:EE:2D:08
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0479
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eEF7QfmvJwVSfsr2LCJ9aqzuLQg.roa
Signing time:             Thu 27 Jul 2023 16:44:09 +0000
ROA not before:           Thu 27 Jul 2023 16:44:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.164.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=78417B41F9AF2705527ECAF62C227D6AACEE2D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:48:87:41:a5:2e:98:17:a7:b5:70:b3:8f:
                    a1:a8:05:8f:65:22:15:79:b6:96:97:4b:99:c9:ad:
                    7d:89:ad:2a:e7:01:75:25:eb:7d:c1:9b:8a:22:43:
                    54:5c:7f:7c:aa:ed:e5:3b:b0:35:48:2f:9c:86:09:
                    ad:50:ff:3d:2a:31:28:b8:3b:d8:b7:27:36:e9:16:
                    13:be:23:2a:f2:1a:3f:13:80:53:e0:97:36:3c:5c:
                    0b:1f:55:71:b3:27:8d:c9:89:60:02:78:3a:d3:68:
                    a4:f0:ad:dc:55:61:8e:b2:12:a5:e5:4d:c2:d4:85:
                    3e:bb:1f:6b:d4:71:00:f2:97:14:e3:43:7a:e4:0c:
                    e5:0a:de:8d:58:e5:f1:3b:31:4c:c9:b9:e1:86:fc:
                    5d:75:07:a7:8c:9a:4d:df:27:da:94:38:a2:db:59:
                    a5:f3:ab:52:9a:d8:b2:d7:04:89:84:7e:58:67:de:
                    4e:57:c9:79:93:60:17:4d:1c:20:09:af:b6:85:a9:
                    2b:4d:5d:42:c1:19:2f:2f:f0:0e:1e:be:ec:e3:47:
                    f2:85:b2:5a:68:47:6e:3e:08:1d:bf:2b:fb:14:74:
                    80:4c:bf:86:d7:3d:92:e0:9e:30:a4:84:0b:6f:8c:
                    bb:81:30:1f:5a:26:da:f0:00:fd:a8:97:53:3e:16:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:41:7B:41:F9:AF:27:05:52:7E:CA:F6:2C:22:7D:6A:AC:EE:2D:08
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eEF7QfmvJwVSfsr2LCJ9aqzuLQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:73:7a:98:6c:c9:5b:61:b7:40:75:e0:28:56:4c:0a:ba:01:
         50:e3:8a:a8:ec:f8:6b:8c:ba:10:d3:5d:53:61:7a:8a:ea:d0:
         ce:10:d7:33:af:d1:a4:4b:f7:88:98:85:a3:7d:48:47:58:1c:
         4b:b0:18:bd:14:ff:12:49:94:28:51:99:4f:9a:3e:71:07:de:
         7e:4a:0c:c6:d2:a8:c4:d1:2f:ae:6d:70:9b:e7:8f:31:59:60:
         b6:da:17:a8:12:1d:fb:21:b9:55:46:8c:13:52:8c:77:c2:6f:
         dc:26:26:a5:fa:b8:83:f5:30:e6:23:17:cc:8c:5b:8c:fa:d2:
         51:89:6a:5a:17:15:99:42:e3:e3:53:0e:bc:9f:67:82:78:a7:
         22:f1:62:1e:7f:a5:26:31:6b:34:51:b1:99:02:b5:f6:fd:01:
         2b:da:c1:d7:83:74:38:4d:ef:ff:83:d7:12:36:ea:82:d6:fc:
         e7:06:cb:2b:2b:54:55:b6:6c:ce:da:1c:b9:95:17:cd:93:d4:
         8a:f1:2e:18:29:ea:e0:40:9f:0e:8f:00:2f:3c:35:59:48:65:
         76:d7:22:ca:88:f4:25:64:93:e6:5d:0b:9d:60:94:88:eb:b4:
         5d:6c:50:87:32:c4:7d:bc:d4:39:88:28:83:69:0a:36:82:b9:
         fe:e0:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:41 2025 by rpki-client