Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ffFTU-sTO2lW_XOcnwm543g8GTI.roa
File:                     ffFTU-sTO2lW_XOcnwm543g8GTI.roa (raw, json)
Hash identifier:          kzbvpO2HJ+bAEqo4FAzzNmeNU8R+5dHL1Qi3psRi0VM=
Subject key identifier:   7D:F1:53:53:EB:13:3B:69:56:FD:73:9C:9F:09:B9:E3:78:3C:19:32
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ffFTU-sTO2lW_XOcnwm543g8GTI.roa
Signing time:             Wed 24 May 2023 16:40:29 +0000
ROA not before:           Wed 24 May 2023 16:40:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.200.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7DF15353EB133B6956FD739C9F09B9E3783C1932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:95:b1:23:d5:64:2a:be:4a:f4:b2:ff:17:
                    9a:db:d3:07:3e:9f:a8:b3:b6:fc:88:ec:25:e6:fd:
                    fd:ce:2a:46:ef:c5:fd:af:01:af:19:35:c4:4f:a1:
                    f1:c4:3c:63:e8:78:a6:ee:dd:b9:c5:fc:1a:2f:f8:
                    72:67:98:9e:fa:c3:a9:36:21:01:32:bf:64:96:fa:
                    e0:91:8d:a0:42:c5:ef:cd:d9:1b:44:45:8c:cf:99:
                    14:a4:1b:aa:9e:c1:bd:46:89:80:3c:03:20:d4:8c:
                    50:dd:19:68:0b:c7:11:14:14:0c:20:90:81:12:34:
                    ad:28:50:81:3f:3e:46:42:40:6d:03:a6:a4:93:43:
                    c2:8f:7a:30:d4:39:00:a3:21:17:5f:1d:dc:74:04:
                    7c:82:f0:93:a1:7d:79:25:e6:93:96:fb:00:35:f8:
                    11:5b:63:ed:1e:a4:8e:b4:12:37:41:aa:16:a7:8e:
                    fa:13:a5:18:6b:57:91:63:fc:b6:35:61:ff:38:61:
                    d4:d5:53:a0:5d:b2:d0:cf:63:ca:6e:6d:f8:54:ba:
                    c9:5f:67:fc:5c:4f:b9:29:7e:c4:ba:95:89:2e:d6:
                    1f:b7:76:3d:3c:b0:23:a9:81:90:b4:34:c9:1d:67:
                    30:a5:66:55:90:3c:ee:1e:11:d9:6b:8d:b4:a5:1e:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F1:53:53:EB:13:3B:69:56:FD:73:9C:9F:09:B9:E3:78:3C:19:32
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ffFTU-sTO2lW_XOcnwm543g8GTI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:7e:3b:d0:75:98:05:99:3a:c5:8b:bc:3f:d1:2d:02:0c:0c:
         c3:fc:33:70:7b:c8:13:a6:95:9d:23:73:b6:52:c9:94:1b:6c:
         24:9a:80:5a:b7:f5:89:84:ff:be:43:ed:ef:0b:45:7b:49:ca:
         d0:4a:ae:ae:25:e9:7a:90:92:84:02:bb:1d:b2:b8:00:0d:c5:
         f6:19:04:a6:83:6f:16:c0:30:95:c8:af:31:9d:39:01:8f:56:
         a7:79:12:10:35:02:c5:8a:19:09:57:66:9d:eb:ac:24:20:3e:
         00:cf:09:8a:18:d0:cd:54:12:16:ef:7d:e9:c1:52:0e:85:34:
         28:7a:78:3e:67:e5:12:1f:bb:ad:17:ef:98:37:5b:35:08:fd:
         e9:c9:72:6f:23:d4:af:6e:f7:3e:c7:49:12:13:72:35:6e:b2:
         ac:17:cf:6a:4b:0c:45:c8:cc:e1:c0:28:4d:4f:86:0c:f5:86:
         8c:31:1f:30:fe:48:3f:7c:b2:14:40:cf:fc:13:19:3b:ea:da:
         e6:0c:cc:11:cc:07:c7:0e:71:a5:aa:e2:e8:b5:cf:f3:a4:d8:
         27:8f:b6:1d:c0:c8:9e:03:49:51:47:16:24:42:67:30:e4:3a:
         27:84:de:27:fc:d6:40:21:1f:88:d9:1b:21:c8:13:e0:5d:68:
         f0:b6:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:27 2025 by rpki-client