Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2YUpO_phBYJvaihvyUaPqj4NPs.roa
File:                     n2YUpO_phBYJvaihvyUaPqj4NPs.roa (raw, json)
Hash identifier:          9am2Fw0CpsEdyyOa++QWkME8dhwR2kyzB2oDSFHLNgQ=
Subject key identifier:   9F:66:14:A4:EF:E9:84:16:09:BD:A8:A1:BF:25:1A:3E:A8:F8:34:FB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05AC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2YUpO_phBYJvaihvyUaPqj4NPs.roa
Signing time:             Thu 27 Jul 2023 17:00:21 +0000
ROA not before:           Thu 27 Jul 2023 17:00:21 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.159.208.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:21 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9F6614A4EFE9841609BDA8A1BF251A3EA8F834FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:69:80:e7:29:35:48:e7:f1:99:d2:5c:ee:
                    a7:41:06:4c:43:2d:5e:34:76:0d:1d:e6:66:97:04:
                    b9:76:cc:90:0b:76:d9:28:45:3d:d6:f9:f0:d1:59:
                    00:b6:da:8a:06:b9:55:ce:76:a2:8b:72:7b:e6:3d:
                    e8:52:b3:ba:e6:6d:78:be:2f:72:49:c5:55:33:5f:
                    f8:5b:76:72:48:46:b0:eb:3c:af:a2:e4:d0:b9:2f:
                    83:ca:03:59:ef:7b:8a:05:ba:de:73:62:2b:25:79:
                    ca:3d:c3:89:37:00:79:ba:24:47:11:93:88:11:bb:
                    f8:67:13:15:3b:f8:c1:67:05:3c:fc:cd:01:9b:5e:
                    98:db:79:99:64:24:29:68:e5:4c:fd:18:d0:98:aa:
                    b6:81:3b:71:f3:7b:b3:57:b2:9a:b7:06:1e:c7:b8:
                    0b:a4:e9:e8:64:39:06:8f:7c:28:0a:fd:de:52:41:
                    75:1e:95:8d:3f:40:95:5c:e4:f5:3b:d0:24:b4:a7:
                    33:d6:81:02:69:58:a8:14:1c:31:a1:24:6c:94:94:
                    b6:8d:dc:f0:f3:d6:1b:39:a1:5a:26:e2:b6:27:af:
                    8c:4d:bc:99:7c:1e:95:f4:8c:fa:77:ce:42:2b:c3:
                    e1:8d:c3:35:92:d2:9e:03:0e:93:95:54:74:80:a9:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:14:A4:EF:E9:84:16:09:BD:A8:A1:BF:25:1A:3E:A8:F8:34:FB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n2YUpO_phBYJvaihvyUaPqj4NPs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:60:4d:b7:8e:84:43:79:57:63:36:7d:f2:ec:e4:10:a6:
         d9:42:83:c1:60:3f:cd:9e:9e:28:cd:de:83:b3:37:8e:40:09:
         97:d8:41:bd:52:88:29:14:df:6d:cf:f3:67:b4:69:8f:b1:30:
         ec:b0:a4:5b:5c:e0:5c:ee:e8:d8:ad:78:9f:b7:9c:4c:d5:e5:
         72:fa:33:5e:51:d0:f5:14:fb:11:32:c9:7b:3f:3e:5b:48:3c:
         1a:d0:ea:bb:58:42:d2:6a:c9:26:75:3d:28:20:dc:ad:a8:dc:
         8d:98:b4:17:00:0b:7e:3d:1a:3d:cf:04:80:41:65:34:50:4f:
         7e:f0:11:b7:a6:3f:6f:14:d4:5a:9d:c3:10:5f:c6:9b:ad:1c:
         af:63:11:9a:79:7f:a7:56:96:2c:d9:c2:d9:dc:65:e4:7e:a5:
         2e:f8:11:b8:86:2f:2e:07:7e:f3:97:e5:53:be:aa:9b:90:9a:
         ef:2f:be:00:8b:4c:e3:20:c5:be:a0:0e:52:a9:ac:93:a0:3b:
         c0:84:1c:49:7e:f8:16:ef:4a:b3:d6:a7:91:c7:75:9a:c8:16:
         e2:73:24:67:c3:f7:0e:d5:ef:e1:2c:51:71:d9:f7:bc:6d:f6:
         06:ff:75:c8:05:6c:fc:40:65:f7:44:cf:a8:9a:2f:3c:6f:69:
         60:2f:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:56 2025 by rpki-client