Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-40dja-ghBQyxNegcMEQgcdTMnw.roa
File:                     -40dja-ghBQyxNegcMEQgcdTMnw.roa (raw, json)
Hash identifier:          BiyCQdEHH9xW027RNN35OgGzNaMRNPbzNN3HptqbIzc=
Subject key identifier:   FB:8D:1D:8D:AF:A0:84:14:32:C4:D7:A0:70:C1:10:81:C7:53:32:7C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02BE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-40dja-ghBQyxNegcMEQgcdTMnw.roa
Signing time:             Tue 30 May 2023 17:17:35 +0000
ROA not before:           Tue 30 May 2023 17:17:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FB8D1D8DAFA0841432C4D7A070C11081C753327C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:e3:17:8d:46:0d:d1:ef:1f:c5:ab:5a:a2:
                    fd:5d:1a:17:b1:49:fd:a7:a8:09:19:11:65:77:c3:
                    c2:ea:11:0c:44:12:b8:37:3d:8d:67:88:43:35:e8:
                    ba:da:51:7b:0a:d4:3a:21:db:f5:35:7e:2a:6b:a2:
                    70:a9:df:d6:f1:4f:aa:05:c6:7f:f9:35:e9:60:3c:
                    0b:6b:b6:33:e5:9b:0d:b9:29:be:fa:9e:1a:9d:11:
                    09:ee:fd:5b:eb:98:79:b4:4b:37:e2:45:6d:ae:83:
                    bc:21:36:8c:e7:63:1e:33:c0:c8:d1:dc:4e:bd:fe:
                    c4:31:74:5b:0a:3b:e5:47:e2:48:b2:0e:bf:f3:7b:
                    8f:9c:0e:54:d2:b6:8c:68:2c:ed:0e:2c:42:e1:6e:
                    bf:77:92:2b:b5:d0:50:3f:74:a2:b0:f3:43:29:78:
                    7e:37:c4:17:dc:b3:27:7c:27:3b:b6:02:a9:48:85:
                    8e:2b:e1:85:c3:ec:ba:4f:c1:65:39:9f:1d:d2:96:
                    c0:be:39:50:4f:c4:05:03:d0:d0:a9:61:9f:3e:2f:
                    de:09:3c:eb:d3:84:22:c7:1d:bd:c7:ba:f9:c6:71:
                    1e:4a:84:59:fa:18:2d:a4:b3:c8:ad:16:eb:37:71:
                    5e:a8:b2:00:ea:e4:04:d7:5c:4a:e7:66:0f:1e:5b:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:1D:8D:AF:A0:84:14:32:C4:D7:A0:70:C1:10:81:C7:53:32:7C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-40dja-ghBQyxNegcMEQgcdTMnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:1d:16:83:74:dc:5a:cc:60:b0:01:63:28:77:5e:dd:d9:
         70:bb:b6:6a:12:a0:16:69:09:2d:d9:4d:f2:93:33:7a:d1:dd:
         4b:e8:04:07:08:04:55:c9:80:0a:b6:ef:b5:80:a6:ba:92:2a:
         d8:4d:07:88:38:72:30:ac:d0:fc:c8:c4:9a:b2:1e:38:9f:bb:
         ec:24:dd:3e:70:d8:9f:05:b7:28:aa:99:15:02:29:af:7f:e3:
         32:cd:61:e5:5b:d0:03:25:ea:31:68:16:fb:52:f3:6f:f7:ac:
         1c:6e:84:8a:ad:04:8c:66:7a:e1:16:ab:e7:46:5f:e1:b8:5e:
         4f:8f:a5:30:f2:b6:0e:c1:84:f7:1d:35:64:59:c6:0a:77:41:
         13:e6:96:d7:e2:97:7f:8c:88:67:54:99:25:53:c6:f5:a3:b1:
         ad:d3:cd:d4:01:76:98:85:98:39:8c:ec:78:ab:eb:49:89:f1:
         58:89:cc:dc:31:8f:05:24:e9:85:c9:34:97:e8:55:ae:6c:94:
         7c:1b:48:99:98:8b:69:69:49:99:b7:03:ac:dc:01:f3:0a:11:
         56:8e:b8:13:c7:e9:84:1f:76:c1:69:76:07:e6:78:20:06:68:
         f6:11:92:2c:3d:8c:e7:5e:f3:ca:75:2f:c8:ed:46:74:c2:1b:
         27:8f:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org