Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MEEXlDkFfvl1v91LETVhZ_f1e4.roa
File:                     1MEEXlDkFfvl1v91LETVhZ_f1e4.roa (raw, json)
Hash identifier:          SCyoBeeIdOWjzMXnLekdNYkmDAw1C4NiuLfdnfKcXjU=
Subject key identifier:   D4:C1:04:5E:50:E4:15:FB:E5:D6:FF:75:2C:44:D5:85:9F:DF:D5:EE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MEEXlDkFfvl1v91LETVhZ_f1e4.roa
Signing time:             Wed 24 May 2023 16:03:12 +0000
ROA not before:           Wed 24 May 2023 16:03:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:03:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D4C1045E50E415FBE5D6FF752C44D5859FDFD5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:2c:9e:e6:9d:df:e3:0a:70:25:a7:ea:2a:
                    64:a5:61:cf:a4:09:ac:33:57:4d:e8:01:1f:a4:9c:
                    57:92:78:73:cd:7d:57:fb:88:16:78:d8:f3:39:e5:
                    38:76:59:77:f6:dc:75:a8:98:3e:32:b0:5a:28:80:
                    c2:b9:6c:ab:bb:fb:d3:36:35:db:e9:33:71:9d:d5:
                    2b:20:04:35:8f:27:d5:2d:0b:98:1c:c8:8d:6e:36:
                    76:b8:41:29:68:88:d4:2c:98:85:08:b7:4c:1c:59:
                    95:30:9a:a7:bc:c0:d5:36:96:03:8c:9d:27:56:19:
                    81:d0:d6:b4:36:1f:8d:d6:02:56:ff:c7:a1:c3:b1:
                    1f:31:ee:59:c0:be:b7:50:55:55:08:c9:78:ed:41:
                    97:9a:bc:64:73:14:25:bc:a4:2f:6f:b9:9a:2f:de:
                    c0:c2:0d:ed:fe:f6:0f:42:7a:00:eb:0b:51:a1:21:
                    e8:11:5e:79:e8:ab:f1:13:3c:88:26:cb:74:24:f3:
                    1f:58:41:c3:26:80:56:13:6b:0b:db:fe:93:67:23:
                    58:2c:55:e6:9e:f3:2a:2f:e5:60:1c:17:21:26:91:
                    c3:ca:41:1d:ef:52:2f:6f:44:1b:1a:91:17:18:30:
                    1a:98:c8:b4:20:a8:60:07:92:95:f8:3c:41:db:76:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C1:04:5E:50:E4:15:FB:E5:D6:FF:75:2C:44:D5:85:9F:DF:D5:EE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MEEXlDkFfvl1v91LETVhZ_f1e4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:d4:1c:22:b4:b8:67:01:2f:b1:a1:08:0d:aa:20:e9:83:
         7d:6a:8d:2f:6e:6b:0b:fa:b5:68:50:d0:08:f9:e7:d3:a5:fe:
         ef:1a:e9:d6:d3:5a:7e:79:e4:a2:fa:80:37:fc:d2:d4:54:08:
         db:ab:b2:79:d7:15:e4:7f:03:c5:7c:2a:d7:e6:c5:20:da:96:
         16:bd:3b:db:e7:b8:7b:a3:22:67:d0:87:08:e4:c7:a0:c4:02:
         7c:8a:05:25:5a:14:f9:d3:85:ea:d4:53:4c:de:6c:de:0c:6a:
         dd:52:03:c7:55:98:39:c1:a0:2d:8c:f6:03:84:40:78:67:62:
         e3:bc:07:a3:3b:46:9a:1e:50:34:02:6d:87:40:cb:2a:f3:96:
         a8:41:30:85:89:e1:73:da:41:e2:ac:66:eb:08:10:73:e8:5b:
         d5:c4:bf:f3:e3:b8:21:cb:c0:46:ff:bf:70:07:2d:ea:d0:35:
         95:5f:3e:42:87:87:ef:3c:bd:b7:f6:a1:8f:2d:03:7b:a4:7c:
         bd:ec:f1:1b:97:c9:eb:a7:4b:21:a0:2d:b2:e2:02:c6:b8:58:
         b6:bf:c8:4e:69:f3:8d:b6:e6:37:98:7c:14:a7:cd:15:e4:14:
         ee:3f:81:8d:a5:1b:b5:b3:07:3e:0b:0c:f4:78:e4:67:c4:2c:
         4f:e9:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org