Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/odGg-s5MJobv2IlqLfCuodPKfac.roa
File:                     odGg-s5MJobv2IlqLfCuodPKfac.roa (raw, json)
Hash identifier:          uLaunYscMLr01FK/X12H7idKyEtwA5idvZ0c97k4ylk=
Subject key identifier:   A1:D1:A0:FA:CE:4C:26:86:EF:D8:89:6A:2D:F0:AE:A1:D3:CA:7D:A7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       033C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/odGg-s5MJobv2IlqLfCuodPKfac.roa
Signing time:             Thu 01 Jun 2023 16:07:35 +0000
ROA not before:           Thu 01 Jun 2023 16:07:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.76.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:07:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A1D1A0FACE4C2686EFD8896A2DF0AEA1D3CA7DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:44:ef:8f:24:1c:3f:98:46:56:7f:3b:50:
                    9a:8f:13:ce:19:34:6a:bb:d2:10:03:a0:ad:7f:0a:
                    83:be:79:b8:22:c5:45:f9:a2:86:a9:46:12:b9:07:
                    b7:93:93:e5:a8:29:c5:e3:33:f0:c1:44:c1:c9:74:
                    8f:e1:6d:7f:9a:fb:dd:96:f5:62:bc:e6:1e:e8:ee:
                    b8:22:cb:c4:60:5d:7a:bc:f4:9c:49:ab:96:bf:a1:
                    36:67:dd:8d:07:50:b9:57:35:cd:93:4d:3e:a5:f7:
                    7a:12:90:12:08:20:f9:69:c7:93:b7:a6:19:3e:a9:
                    b3:35:08:e9:9a:ed:f9:18:1f:d5:6c:af:5d:51:56:
                    e3:ed:eb:f9:55:30:1b:cd:c6:f0:ea:c1:11:a0:7a:
                    59:9d:a4:23:37:67:6c:5a:9a:3e:8b:07:cd:49:2c:
                    b9:8f:d3:e6:92:ea:d3:02:2b:e1:a6:bb:8d:7a:cf:
                    a4:29:45:5a:cf:76:36:64:00:89:87:12:18:67:3f:
                    8c:ed:d6:de:a5:b7:52:0d:98:c9:72:38:84:a0:aa:
                    fe:3e:30:3e:cc:f9:cd:39:39:1f:0e:3b:09:4a:d9:
                    58:de:3e:1c:32:d2:c5:d6:7c:af:29:01:f9:36:bc:
                    3d:c4:cf:95:4b:6d:e4:a5:27:f6:83:96:10:4a:ca:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:A0:FA:CE:4C:26:86:EF:D8:89:6A:2D:F0:AE:A1:D3:CA:7D:A7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/odGg-s5MJobv2IlqLfCuodPKfac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:50:b1:af:c0:66:4c:5b:29:be:a5:48:8b:56:38:d1:d5:35:
         e2:dc:0e:5e:ff:09:b0:c4:89:d1:7c:ed:2f:f9:f2:95:36:9b:
         f4:73:04:88:8f:60:e7:2b:04:85:c8:21:19:ce:1d:e5:10:20:
         04:63:53:8a:42:52:0e:2b:50:05:93:4a:ce:9a:10:5b:32:20:
         7b:33:05:01:72:fc:86:d7:b5:21:ca:f2:c2:e9:99:d4:a2:8c:
         b2:8b:12:3d:18:8d:e9:c5:4d:59:3e:66:5d:85:06:30:88:d3:
         5a:47:47:9b:4c:af:f1:15:92:a3:11:77:73:eb:31:c8:13:e0:
         23:68:af:9d:06:08:c1:ba:71:cd:4c:20:a4:6d:44:aa:a5:24:
         bc:23:1d:f3:30:9c:66:55:8f:1c:72:c2:11:da:26:6d:35:b8:
         ab:2b:5a:29:b7:09:f1:1c:93:cf:3d:54:69:27:82:f6:c1:ba:
         e9:5c:88:a4:f4:5a:9f:2e:aa:ee:dd:3c:28:0f:2c:1e:30:53:
         37:0c:44:00:f1:f2:df:1b:38:7c:35:34:1a:8f:73:d7:cc:9c:
         72:ab:3b:f8:13:56:95:50:19:9f:0a:af:1a:82:6d:2d:5d:46:
         8b:a2:7a:cf:d4:58:4b:73:1b:05:55:79:a9:79:0a:20:5a:43:
         42:d6:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:41 2025 by rpki-client