Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xWN4uGYBjYrNHnvB5ddjgVAljmE.roa
File:                     xWN4uGYBjYrNHnvB5ddjgVAljmE.roa (raw, json)
Hash identifier:          xu/1sc1TxhjaRxgrx0SBKNZNA/V6cObEVnDAuoumsD8=
Subject key identifier:   C5:63:78:B8:66:01:8D:8A:CD:1E:7B:C1:E5:D7:63:81:50:25:8E:61
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       5B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xWN4uGYBjYrNHnvB5ddjgVAljmE.roa
Signing time:             Mon 27 Mar 2023 16:04:31 +0000
ROA not before:           Mon 27 Mar 2023 16:04:31 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.224.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:31 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C56378B866018D8ACD1E7BC1E5D7638150258E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:38:97:25:3b:c8:a2:3f:61:32:10:8f:85:
                    37:15:7c:f8:1d:0e:ba:e8:d5:dc:6c:c2:f1:e8:f7:
                    47:d2:3b:19:0a:0f:00:7b:98:61:b1:73:20:35:33:
                    bf:de:6e:7b:66:08:02:c6:4b:68:56:84:ca:ce:a9:
                    32:f7:41:37:5d:fc:a0:a7:f5:50:62:6b:90:cb:08:
                    b8:cb:63:5c:d0:4a:b4:54:f3:f3:40:67:8c:6c:04:
                    93:3f:d0:77:e3:5c:fa:9a:10:24:6b:23:ca:cc:e9:
                    aa:f6:d2:12:df:92:20:e5:75:df:39:56:14:d9:32:
                    2b:90:82:7f:d4:68:e1:78:de:75:10:a3:a7:7f:a4:
                    e3:bd:52:85:27:4e:ac:79:40:3a:db:4b:c2:a9:54:
                    8e:32:bb:55:be:bf:9c:40:8c:21:08:fb:84:37:e1:
                    61:07:db:d8:f5:90:1f:2d:ba:9c:31:20:cd:43:f9:
                    9d:c0:65:81:32:95:a6:bf:1b:92:c2:89:61:5d:59:
                    33:b0:e5:35:23:06:fb:7b:71:96:ca:48:3c:7c:36:
                    4f:6d:67:ce:a6:b0:ac:2a:1d:5b:72:64:84:b6:b8:
                    84:c4:8f:01:d0:6e:86:b3:9b:1e:b5:d6:a0:bb:fc:
                    25:73:c0:61:04:70:8a:3b:50:44:15:9b:e0:4b:af:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:78:B8:66:01:8D:8A:CD:1E:7B:C1:E5:D7:63:81:50:25:8E:61
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xWN4uGYBjYrNHnvB5ddjgVAljmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:f4:86:1a:1c:3f:bc:ae:fd:8b:45:14:85:85:fe:10:a8:88:
         08:ec:b1:cd:aa:40:c2:52:1b:f9:ec:be:06:27:9a:14:c9:6e:
         2b:5f:7d:11:1c:ae:51:2d:cc:e9:fd:34:b3:26:b6:73:cf:59:
         c5:c1:1e:d5:22:08:b8:36:bb:65:7e:c3:4a:e9:16:a3:c1:2c:
         50:cf:7d:27:39:86:3d:32:d2:84:e6:c4:82:11:fc:35:50:3e:
         db:c7:4b:e8:73:5a:e3:bf:a3:5f:0a:49:c1:c5:6f:08:c1:89:
         c8:4d:b7:ad:38:93:3b:d9:79:0b:46:0f:24:ae:8a:02:cf:38:
         c9:35:6e:b1:0e:ff:bf:50:5c:ab:7e:e0:ab:2a:3c:6f:3d:c7:
         97:0e:dc:db:76:2e:c2:c0:bb:85:72:00:77:7e:5e:4c:c0:23:
         3e:d8:cd:51:9f:72:07:db:1f:4a:8f:b6:85:1b:2c:e1:e9:f8:
         45:b4:0d:a7:cf:fe:58:f5:ea:d9:58:0b:98:d6:fb:95:fb:0d:
         be:83:cd:32:48:70:64:f8:e1:66:0c:84:9a:76:1e:75:a9:e0:
         49:e6:50:04:fb:a2:ae:7c:0a:42:bd:8b:71:71:b4:a1:70:b1:
         67:a2:fa:ba:62:65:6b:19:f7:fb:67:ac:ad:75:c4:3d:1c:83:
         bc:ec:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:04 2025 by rpki-client