Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0Y0Q0RRk1d87lm_vXsC6uIkV9_o.roa
File:                     0Y0Q0RRk1d87lm_vXsC6uIkV9_o.roa (raw, json)
Hash identifier:          mPKLvG1O6pYgRU8nv0a/FsI97vi3H5xJzteZ6oAkU0k=
Subject key identifier:   D1:8D:10:D1:14:64:D5:DF:3B:96:6F:EF:5E:C0:BA:B8:89:15:F7:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       56
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0Y0Q0RRk1d87lm_vXsC6uIkV9_o.roa
Signing time:             Mon 27 Mar 2023 16:04:28 +0000
ROA not before:           Mon 27 Mar 2023 16:04:28 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:28 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=D18D10D11464D5DF3B966FEF5EC0BAB88915F7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:25:5e:fb:e6:af:bd:9c:4d:33:7b:d8:d1:
                    43:24:62:4f:f0:3d:9f:fa:4c:86:96:85:c2:5d:f0:
                    52:d2:f2:d9:03:43:66:be:03:7e:60:8f:b5:eb:6a:
                    ef:84:69:82:29:09:f4:39:c7:2d:41:54:79:e5:4a:
                    38:5d:57:c8:39:d7:15:93:1f:c9:56:f2:94:7c:2c:
                    b3:d8:05:9c:3a:b9:99:c7:67:ed:95:0c:85:4e:d6:
                    e3:19:56:8f:88:58:90:7a:ca:78:e0:18:19:a2:b7:
                    8a:20:5b:c7:51:3b:c8:c1:ea:e5:d9:64:f3:3c:a7:
                    04:c2:7e:52:e0:dd:95:02:1e:16:7b:5d:af:78:c6:
                    ea:da:27:67:94:b8:17:b9:29:33:a8:19:5b:53:4d:
                    4d:4a:a6:4b:9a:c4:a1:76:0e:5b:aa:99:83:8c:12:
                    8b:71:58:11:e0:b9:c5:78:41:4a:a7:94:72:fc:05:
                    c7:8c:b5:16:f4:0e:79:05:a6:c0:d4:ab:b1:6e:44:
                    a8:b9:33:6d:5e:c2:98:86:a7:fc:56:59:b8:37:ce:
                    55:96:0d:51:9e:ae:f0:52:d6:2d:f5:81:60:d8:ed:
                    a1:ab:04:3d:b4:b6:83:ca:af:be:54:0a:04:55:f7:
                    e4:7e:71:71:33:4b:21:e8:75:3c:ab:00:89:7e:dc:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:10:D1:14:64:D5:DF:3B:96:6F:EF:5E:C0:BA:B8:89:15:F7:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0Y0Q0RRk1d87lm_vXsC6uIkV9_o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:e1:0d:c9:1a:96:cf:67:2b:38:f4:e0:f0:28:4d:84:10:
         91:02:5f:f3:bb:88:bd:3e:e4:5d:89:b8:ce:1d:ed:72:87:6c:
         c2:11:27:c6:c4:2d:e4:c5:27:76:31:c7:4c:c1:fc:2c:db:99:
         2b:a0:8d:f4:2d:86:9c:82:40:e8:32:66:d5:3c:06:79:bc:59:
         b6:6c:cb:3c:21:e2:a0:ef:32:8a:46:e6:be:ae:b6:a0:a0:c3:
         5a:fc:82:48:b0:3e:78:9b:dd:50:77:ea:6a:4e:04:32:28:40:
         d0:8a:18:9d:a6:67:8d:ef:71:14:67:2d:f7:34:dd:6b:1c:3d:
         8c:2f:c6:eb:68:eb:eb:1d:7c:53:6b:3c:fa:af:81:ea:7d:0d:
         a4:a1:d9:4a:c9:fa:8b:de:bd:66:6b:d0:9d:ad:e7:8b:fe:87:
         32:56:bd:55:eb:d7:f4:73:c7:21:07:a0:73:37:44:a5:a6:98:
         60:47:23:5f:ed:09:43:08:45:f6:45:7d:4c:e2:53:69:a1:ea:
         c0:d9:0e:53:f5:99:a9:70:3c:5c:dc:69:81:1a:a8:c2:e6:12:
         57:11:26:59:52:d1:c2:6a:dd:1e:9b:04:80:41:66:57:d3:c0:
         4a:07:4e:cd:22:0b:cf:71:c1:63:41:7a:5f:ac:bd:c8:31:c6:
         f3:c2:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org