Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ih4qVMqYfrx_SEHx-zTHX-tFDos.roa
File:                     ih4qVMqYfrx_SEHx-zTHX-tFDos.roa (raw, json)
Hash identifier:          nUB5gVpjDEPaPtUXye3gRI03lxOOknFeEG65IX6AFR0=
Subject key identifier:   8A:1E:2A:54:CA:98:7E:BC:7F:48:41:F1:FB:34:C7:5F:EB:45:0E:8B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03D5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ih4qVMqYfrx_SEHx-zTHX-tFDos.roa
Signing time:             Tue 06 Jun 2023 16:03:38 +0000
ROA not before:           Tue 06 Jun 2023 16:03:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.26.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8A1E2A54CA987EBC7F4841F1FB34C75FEB450E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:90:f1:36:db:e2:7b:8a:d5:b7:07:e1:70:
                    11:a1:01:4f:eb:21:32:a3:73:c2:45:62:1d:ba:25:
                    e9:8d:db:4b:6a:b9:94:67:85:2a:3f:78:88:18:b1:
                    7d:7b:2c:e8:e5:39:3d:2c:28:02:ef:b1:70:c3:cd:
                    a6:6a:6f:d4:89:a1:46:0e:04:d2:6b:35:0a:80:25:
                    69:60:d0:b8:a6:1a:84:49:38:a7:81:78:a5:60:fb:
                    92:66:71:43:fa:21:ff:5c:2c:13:4a:f7:15:4f:ae:
                    a6:3c:a6:54:7a:c9:65:ec:29:9f:3b:bb:af:0b:b4:
                    19:d1:d9:50:be:7a:31:cd:8f:54:7b:e4:b0:09:58:
                    7c:a5:02:27:49:3a:57:38:34:d0:2c:0f:39:97:7f:
                    e0:b3:02:05:f2:0a:85:1f:dc:fd:84:a9:c3:cb:f5:
                    3a:b0:48:63:49:98:d9:d6:d0:50:19:7b:3b:1b:ce:
                    e4:53:14:98:d0:12:ae:10:a2:69:ae:c4:77:1e:02:
                    e2:06:b6:cf:c6:32:85:6c:9e:5e:66:31:53:40:4f:
                    a5:7d:bc:26:cb:62:28:fc:e8:53:3e:a7:13:a4:f4:
                    b9:13:73:07:b5:fc:7a:27:bd:f8:82:cc:f9:f6:15:
                    46:0e:7f:04:86:65:b0:c7:1d:69:2d:6a:51:bf:96:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:2A:54:CA:98:7E:BC:7F:48:41:F1:FB:34:C7:5F:EB:45:0E:8B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ih4qVMqYfrx_SEHx-zTHX-tFDos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:f9:fc:fc:c7:02:c2:88:ab:6d:6f:04:4b:6c:7e:63:f7:
         8e:60:e5:ab:ba:34:59:0f:9f:79:94:34:be:57:56:27:91:5c:
         e8:b2:03:0a:27:44:11:91:21:cb:57:c6:77:e3:68:86:4f:0d:
         54:6c:cb:d0:1e:54:d7:6c:31:d0:bd:64:d9:69:e6:3d:b4:ec:
         3e:b0:a0:bd:d8:99:23:fa:49:fb:0e:de:2a:a6:ee:ef:84:1a:
         e1:23:18:e6:66:87:09:78:0e:86:aa:78:c4:c7:3e:ac:4e:ce:
         6d:b3:53:fa:85:b1:d8:70:4b:63:27:15:5f:9c:79:50:ec:16:
         34:eb:53:85:50:17:7a:27:59:72:c1:7f:c7:72:65:f8:3a:f7:
         a0:2d:e4:93:17:82:42:f5:84:c4:d7:1c:a7:6d:b7:66:b3:fc:
         68:de:9e:50:a8:e6:94:79:af:71:a1:cb:52:57:0a:51:71:e4:
         15:93:ce:74:14:51:1d:4d:a5:6b:72:f6:13:cf:fa:bc:97:93:
         f5:4c:e9:d7:2f:73:a7:ba:7c:d9:73:78:92:15:ab:5c:66:72:
         57:f2:99:cc:c7:2a:cb:2f:fd:15:a9:a3:39:49:af:7d:78:c7:
         07:ec:6a:42:fa:51:9f:5f:58:a7:f0:15:39:0b:93:7b:e7:45:
         07:06:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:47 2025 by rpki-client