Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t4PC0Ajy2H-pLpXQwch4-CSdcAM.roa
File:                     t4PC0Ajy2H-pLpXQwch4-CSdcAM.roa (raw, json)
Hash identifier:          jpjEjWBZIH8VP+FlnutDb0+oe02f4S21bJlMmZbA2v4=
Subject key identifier:   B7:83:C2:D0:08:F2:D8:7F:A9:2E:95:D0:C1:C8:78:F8:24:9D:70:03
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       052D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t4PC0Ajy2H-pLpXQwch4-CSdcAM.roa
Signing time:             Thu 27 Jul 2023 16:54:12 +0000
ROA not before:           Thu 27 Jul 2023 16:54:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.74.198.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B783C2D008F2D87FA92E95D0C1C878F8249D7003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:d2:ca:2f:ea:00:3c:46:01:22:4a:71:80:
                    33:b2:e5:2c:1f:e9:b2:db:6e:15:d0:df:94:20:48:
                    4e:7a:8b:cd:cf:a3:e7:5b:02:48:fd:27:28:1a:5e:
                    57:49:ce:49:84:ac:f9:9b:19:fe:1c:a0:a7:32:ac:
                    99:d8:d9:2d:53:fc:51:7b:16:6e:f6:29:bb:25:90:
                    2c:24:f5:57:0c:df:d6:e6:d5:2c:6c:63:85:6c:2b:
                    ae:b0:95:f4:97:ba:7f:c6:74:3e:4f:ca:11:08:4b:
                    49:e1:6f:e6:e0:96:b5:06:7d:ea:f2:40:63:65:35:
                    53:50:83:0f:ce:d0:a4:90:27:03:55:b8:43:41:d2:
                    c9:94:03:ae:07:6f:e7:11:8c:94:61:50:07:33:3f:
                    47:01:b6:70:31:09:3c:b2:b5:8f:a7:61:d7:7e:76:
                    69:09:57:73:34:2c:e2:32:e1:de:09:5a:0d:6d:81:
                    bf:d3:05:84:8e:18:87:d8:e7:47:ab:b1:24:42:d7:
                    33:a4:84:88:25:c8:e2:ae:b0:b1:70:cc:8e:e4:75:
                    82:60:27:74:cc:c0:45:94:38:27:bb:a0:e9:db:eb:
                    77:52:ba:d4:02:fd:8e:e6:17:d3:1b:74:2a:97:48:
                    1e:c3:41:df:7c:d7:0f:f2:6a:99:cf:5e:3f:1d:e4:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:C2:D0:08:F2:D8:7F:A9:2E:95:D0:C1:C8:78:F8:24:9D:70:03
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t4PC0Ajy2H-pLpXQwch4-CSdcAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:3f:02:68:5c:88:0f:58:01:43:f6:eb:d7:9a:76:ad:c4:
         a0:ed:b5:82:43:49:3f:ac:65:21:c7:b8:74:ae:ec:f2:a4:04:
         a0:0a:6d:ef:2e:5e:8e:df:e0:80:12:30:ec:6a:8d:b2:04:31:
         19:fc:86:b2:af:3f:85:03:7f:bb:47:53:95:3a:7d:50:d9:c8:
         8e:ac:49:5c:28:fd:8e:b7:d4:ab:2d:85:6e:e3:c2:7d:9d:32:
         aa:39:ef:4c:c7:b8:e9:b6:65:9d:ae:ee:d8:9d:dc:20:5c:74:
         d4:0f:19:b1:45:bb:1f:eb:8d:c0:3a:07:bb:5b:5e:ac:85:be:
         57:89:6f:3e:55:a8:9e:ec:09:33:20:59:e8:5d:24:85:6e:81:
         6d:92:f3:fd:6d:7f:f1:0a:41:23:1e:b3:0a:11:da:e0:01:8d:
         52:f2:9e:e6:c6:ab:7f:1e:aa:a5:70:1d:7c:3f:1c:3a:cc:1c:
         bd:36:5a:97:71:2f:13:b6:72:04:d4:97:32:3a:50:ba:57:b6:
         75:d1:5d:bf:58:0e:d1:e3:61:09:f2:f4:d9:05:27:49:7c:a1:
         cf:c4:b3:1c:8e:0b:82:73:fb:1f:97:ca:dc:70:72:8a:7f:ad:
         46:22:48:f5:29:6f:d8:f5:be:b4:97:9d:99:bd:b2:c4:8a:ba:
         5a:39:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:31 2025 by rpki-client