Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vZq0lcMueObV_hM54uCgweFzVNA.roa
File:                     vZq0lcMueObV_hM54uCgweFzVNA.roa (raw, json)
Hash identifier:          SSrgVUVApXrNDOCVAEeKPFwUL84gs6JLFMLSI1wCSFA=
Subject key identifier:   BD:9A:B4:95:C3:2E:78:E6:D5:FE:13:39:E2:E0:A0:C1:E1:73:54:D0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vZq0lcMueObV_hM54uCgweFzVNA.roa
Signing time:             Thu 27 Jul 2023 16:50:04 +0000
ROA not before:           Thu 27 Jul 2023 16:50:04 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.76.176.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:50:04 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BD9AB495C32E78E6D5FE1339E2E0A0C1E17354D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:99:e3:db:54:d2:9e:89:2c:eb:5e:4e:13:
                    fd:4c:f6:43:45:b5:41:cc:3b:8d:91:61:10:e9:f8:
                    ee:45:1e:8e:26:50:5b:73:ce:e2:48:77:68:30:60:
                    d9:73:7c:84:0c:31:3f:f4:35:23:6d:5d:5d:63:cf:
                    5f:8b:09:b3:9b:3a:cb:3c:06:aa:94:60:6f:6e:14:
                    cf:19:42:9c:2b:18:26:ee:f4:e9:c9:ad:2b:00:a0:
                    61:55:02:c8:08:e2:d0:e0:2c:c9:69:ca:ed:58:f1:
                    be:6e:4e:96:66:6c:99:16:be:14:a5:a2:8d:25:fa:
                    ee:6c:d7:7f:a7:30:18:0e:e2:4c:37:69:65:26:f3:
                    ad:cb:e5:90:42:72:9e:84:72:fe:44:2c:15:65:8f:
                    c6:e8:fc:a7:aa:1d:2e:8b:25:63:db:eb:17:fb:cc:
                    4a:37:e0:08:06:82:92:ef:5b:0c:12:ec:ec:3c:d7:
                    01:9f:00:56:e0:e4:53:52:bb:48:4e:35:d0:3d:ff:
                    30:16:9a:ab:ac:d0:73:96:cd:15:d4:e0:4c:79:ff:
                    1d:4d:e5:a8:ca:a8:e0:dd:f0:9e:12:ae:a7:6d:82:
                    a2:08:d9:f1:24:b0:56:b7:b2:b2:69:57:58:2c:3f:
                    15:30:e5:52:71:d4:cf:0d:de:c9:1f:d8:30:0d:13:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:B4:95:C3:2E:78:E6:D5:FE:13:39:E2:E0:A0:C1:E1:73:54:D0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vZq0lcMueObV_hM54uCgweFzVNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:0e:96:1e:fe:bc:05:a0:50:75:f3:2e:ea:2f:5c:d5:b2:cb:
         16:fb:be:8a:57:cb:71:8c:d6:86:b3:ef:b9:89:4f:1f:e5:be:
         89:d2:33:3f:7d:57:a7:59:84:43:de:94:d8:7c:11:ce:ac:ed:
         c3:6b:ce:5c:c8:0b:e4:92:12:21:16:ea:06:2a:84:8b:a5:b7:
         e7:32:2b:f3:5c:42:ee:03:b0:c8:a0:63:57:03:f1:04:62:71:
         82:4f:a8:b9:21:70:68:c1:a6:49:fc:a9:b7:7e:11:fe:1b:ad:
         ee:f1:b8:76:1e:58:23:22:7a:d6:f6:50:2e:d0:7b:99:0b:69:
         e6:46:40:a2:e6:9f:0d:73:ff:dc:62:9e:32:fa:31:fc:a5:88:
         71:cd:db:67:a8:a8:42:3f:f0:ad:62:1f:b5:e9:da:10:4d:02:
         84:fb:5d:56:97:f5:b9:70:01:25:04:48:16:0e:c8:5e:4d:7d:
         4e:a7:ef:84:fe:d0:e4:43:72:3f:35:c7:e1:d4:ff:23:35:75:
         fa:0c:ec:f8:f7:90:6b:3e:4d:e3:84:f7:bb:e1:f9:11:7c:83:
         de:5a:21:e7:ad:53:a5:9a:06:3a:c7:d0:41:25:64:59:fb:49:
         43:5d:9a:c3:51:34:7c:8b:f6:0a:33:03:6f:55:e3:65:38:51:
         d2:aa:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:12 2025 by rpki-client