Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tIcnzPCV2JSiEz9w_GXFfoc2X6A.roa
File:                     tIcnzPCV2JSiEz9w_GXFfoc2X6A.roa (raw, json)
Hash identifier:          TuIbD/QCsOVic1P3mcK0evExHgoQWmKZ7ysdvQv4IhU=
Subject key identifier:   B4:87:27:CC:F0:95:D8:94:A2:13:3F:70:FC:65:C5:7E:87:36:5F:A0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0161
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tIcnzPCV2JSiEz9w_GXFfoc2X6A.roa
Signing time:             Wed 24 May 2023 16:31:24 +0000
ROA not before:           Wed 24 May 2023 16:31:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.90.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B48727CCF095D894A2133F70FC65C57E87365FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:3f:50:5e:b9:d7:0f:b2:62:6f:a3:cd:8d:
                    09:e5:11:48:d1:d3:ed:a5:3f:5a:bd:c1:67:d0:1f:
                    1b:a7:dc:c6:cd:5d:f5:a4:f9:b9:11:00:c5:77:4d:
                    59:de:86:71:2a:b2:d5:69:f2:2c:b0:df:d1:06:70:
                    a9:49:89:76:d5:5e:b5:b3:e3:24:63:b0:0a:e7:d6:
                    cf:b0:24:2b:40:72:92:52:98:01:9a:16:c0:42:02:
                    e6:63:6a:b4:1f:d5:4a:a4:cc:28:29:e0:0c:f9:63:
                    16:50:b6:3f:a4:4e:40:f3:d2:5a:c5:8f:52:1b:bd:
                    4a:8b:d3:d4:ae:fb:ae:2b:d0:31:62:b7:3f:bb:c1:
                    e8:6b:1c:4e:c0:53:c5:c5:3b:19:3e:f2:bd:de:ec:
                    b6:57:bd:0a:3f:1a:bb:e4:c9:68:20:5a:c5:fb:2d:
                    3e:9f:40:61:9c:62:5b:be:59:55:ca:07:63:02:97:
                    4a:90:8c:7d:3e:71:ef:c8:6d:6a:69:b4:c2:96:75:
                    bd:1d:85:94:8a:64:0f:e0:b3:17:24:44:1b:a6:fe:
                    02:73:df:ca:bb:54:90:93:46:cc:0d:ae:bf:eb:49:
                    17:e5:7e:9a:b1:47:a5:17:6c:6f:58:18:35:6f:7e:
                    ab:45:12:45:a9:3b:dd:0f:07:3d:b5:76:2f:07:47:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:27:CC:F0:95:D8:94:A2:13:3F:70:FC:65:C5:7E:87:36:5F:A0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tIcnzPCV2JSiEz9w_GXFfoc2X6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:a1:64:1e:03:65:86:8e:9e:7c:95:d4:ee:0b:1b:34:25:6b:
         80:03:a1:ad:90:c7:77:dd:03:78:69:0f:36:2e:2a:a5:0b:99:
         8b:ec:01:0e:a8:29:0a:b3:b1:0d:6e:a2:2f:db:a4:3b:8d:95:
         fa:65:b7:59:f7:f8:3f:33:ed:bf:e1:1c:25:61:17:c2:cc:9d:
         50:42:96:5f:e0:21:75:0f:e6:cf:f0:1f:e8:e8:52:2c:a4:52:
         e8:6f:d9:38:ab:78:1a:a1:92:58:54:57:8f:dd:9f:bc:78:6f:
         8a:cd:18:09:b5:a3:ba:3e:5a:ac:37:19:81:69:d1:d0:63:37:
         b3:77:a1:ed:aa:c6:e0:60:b3:03:03:87:ca:45:a2:dc:51:1e:
         30:8d:3f:57:ac:2f:b6:c1:99:d1:1f:32:8b:bb:37:a4:f8:a3:
         fd:d7:04:c2:de:77:b8:65:be:75:0d:f1:12:a2:80:e1:7d:d8:
         20:14:79:96:a8:97:0f:20:57:4d:be:6c:6b:93:00:ec:bf:35:
         3b:93:ce:a6:0e:64:fb:ef:d7:4a:cc:ba:8d:dc:99:6b:71:b2:
         5e:09:cc:e1:34:77:88:b5:95:7f:36:6f:76:a6:25:c5:71:a2:
         fb:ba:cf:25:d4:2b:0a:43:eb:9e:36:3f:ae:f0:4a:8a:1d:b7:
         37:91:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:06 2025 by rpki-client