Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUivVF0r_Mvb3PYQhGwuk3ka1zU.roa
File:                     jUivVF0r_Mvb3PYQhGwuk3ka1zU.roa (raw, json)
Hash identifier:          IPCuOAnNBc96TCSq8yhb/2c1W4UxxkMoFllKYz7J1Gk=
Subject key identifier:   8D:48:AF:54:5D:2B:FC:CB:DB:DC:F6:10:84:6C:2E:93:79:1A:D7:35
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0539
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUivVF0r_Mvb3PYQhGwuk3ka1zU.roa
Signing time:             Thu 27 Jul 2023 16:54:16 +0000
ROA not before:           Thu 27 Jul 2023 16:54:16 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.231.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:16 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=8D48AF545D2BFCCBDBDCF610846C2E93791AD735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:4b:0b:77:42:36:ec:ba:ce:a7:c9:98:70:
                    36:1d:65:5e:f9:5f:8f:7e:13:c6:66:06:18:ef:de:
                    3e:22:2f:42:7d:42:42:68:03:7b:ed:bb:85:90:ef:
                    4a:fa:1c:22:06:70:47:79:96:6a:41:81:eb:21:3e:
                    f1:a4:46:9c:29:b9:2a:e2:5c:00:cf:2d:a3:95:76:
                    6d:23:a1:72:38:b8:a6:32:6f:2f:6e:69:a2:24:22:
                    db:46:b8:97:c4:e9:82:60:49:1e:88:d7:b8:8a:c7:
                    a0:73:1a:55:c2:01:4b:15:f4:75:49:92:1e:53:53:
                    2e:49:7a:05:42:b1:20:8e:b5:6a:dd:5b:59:79:3b:
                    b9:78:5a:0c:8b:91:d3:f0:54:ca:a5:37:8a:d5:82:
                    04:65:62:e2:8a:3b:ee:d7:af:4a:15:44:8b:30:77:
                    68:15:69:f4:17:09:3d:9c:f6:cc:17:40:2c:52:4d:
                    58:a9:63:5e:78:b2:cf:d7:c9:17:7f:f1:ce:ef:1e:
                    5b:d0:4f:12:20:e6:fb:ba:02:cc:c2:7f:6a:70:97:
                    59:83:79:75:3c:5d:a8:36:02:51:cb:45:04:8d:b8:
                    bc:9a:27:32:e4:4f:a4:18:3f:b5:cb:b2:d3:f7:62:
                    49:d7:01:12:27:21:eb:93:0a:7a:af:47:b7:27:b3:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:AF:54:5D:2B:FC:CB:DB:DC:F6:10:84:6C:2E:93:79:1A:D7:35
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jUivVF0r_Mvb3PYQhGwuk3ka1zU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:fb:c1:87:22:23:5e:b9:f5:99:db:24:94:5f:1d:41:b2:
         d4:76:79:38:8f:42:e3:c2:f1:d0:fa:17:04:8f:b7:e6:48:1a:
         a4:02:2e:61:eb:17:69:82:40:dd:5e:da:04:07:48:51:7d:ff:
         e3:bc:3c:c9:60:95:f1:25:60:ec:5c:a7:1b:64:27:50:9e:19:
         55:e5:25:fe:61:ff:79:fe:14:a6:15:75:0e:11:46:ee:1b:56:
         04:db:65:c8:fb:c8:72:c2:3f:99:da:1a:92:e7:33:3e:c2:97:
         83:90:a7:31:a6:24:55:ed:a7:27:dd:a8:65:4d:61:fc:4e:8d:
         5c:27:5e:01:d9:93:6e:73:ba:52:dc:34:b3:cd:14:cd:7b:62:
         96:b3:13:e6:8a:a7:0b:2a:2f:86:8e:60:9d:89:d4:d4:0f:81:
         85:bd:09:57:bf:c1:cc:9d:13:8a:31:ba:51:3e:2a:57:96:e7:
         6d:f7:a0:9a:12:d4:e1:4b:1f:29:fb:26:66:20:a7:0c:71:26:
         97:70:52:b0:bd:3b:d9:67:98:da:05:0c:2b:06:c9:e0:45:25:
         ff:7e:64:0c:a9:f1:0b:53:ee:dd:1e:d6:07:fb:d5:e3:79:0e:
         c5:e2:ac:d5:6b:62:d4:58:c1:81:4c:ba:9c:1c:fe:63:1b:a8:
         7d:34:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:29 2025 by rpki-client