Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1k6dqM3pGvzSwnddkzHSZ1BHjI8.roa
File:                     1k6dqM3pGvzSwnddkzHSZ1BHjI8.roa (raw, json)
Hash identifier:          4UOvTBaWYNHM4Jn/W5WTO0WARadLvtVOPJDB0EObNHY=
Subject key identifier:   D6:4E:9D:A8:CD:E9:1A:FC:D2:C2:77:5D:93:31:D2:67:50:47:8C:8F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0241
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1k6dqM3pGvzSwnddkzHSZ1BHjI8.roa
Signing time:             Tue 30 May 2023 16:32:23 +0000
ROA not before:           Tue 30 May 2023 16:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D64E9DA8CDE91AFCD2C2775D9331D26750478C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:78:1e:86:0f:a5:b6:e4:6e:02:02:04:00:
                    4b:dc:ff:d3:11:ee:b3:9b:71:8e:41:a8:a0:14:cf:
                    2b:70:02:2b:8f:51:c7:54:d8:c3:b7:99:9b:86:b5:
                    07:c1:87:38:71:da:3d:27:1b:9b:fe:47:a2:22:3d:
                    68:91:82:c5:b7:2d:a5:45:31:7d:be:8b:ed:73:77:
                    da:4c:bf:7f:79:90:48:bb:73:d4:3f:05:d5:93:14:
                    26:a3:15:b2:6c:9b:c2:8b:8d:1c:93:db:44:f6:3f:
                    04:07:d4:e6:f4:81:4d:c1:1d:88:47:b3:45:c2:e6:
                    aa:08:29:a6:e7:4c:87:92:b0:4d:94:e1:f8:00:76:
                    6e:cf:c7:8c:90:c0:e2:03:5f:23:d7:61:46:ff:84:
                    3d:98:71:93:27:6a:16:77:50:ab:07:74:0d:01:1f:
                    d9:5d:4b:2b:49:a9:99:7c:d7:6d:b7:8a:3e:69:21:
                    81:7a:95:84:69:75:36:a6:71:01:16:48:5b:00:34:
                    6e:70:57:4f:98:ea:33:6a:c5:1c:0c:30:53:ff:50:
                    cd:12:61:53:45:52:d0:02:ba:a9:fa:0e:ab:d2:7f:
                    43:84:94:6c:5b:10:a4:4a:d0:24:4d:a1:3c:a4:8c:
                    88:88:6d:7d:a7:e5:ff:3e:98:04:b1:c7:c2:6b:ce:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4E:9D:A8:CD:E9:1A:FC:D2:C2:77:5D:93:31:D2:67:50:47:8C:8F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1k6dqM3pGvzSwnddkzHSZ1BHjI8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:95:03:8b:67:e6:6b:26:22:ac:17:7d:39:e8:cd:64:15:
         d9:e2:d1:92:92:ac:aa:45:ed:89:df:1a:f4:6d:05:e6:91:66:
         06:db:83:5b:7b:09:46:e2:97:16:84:a0:e2:fb:4c:1e:34:50:
         6b:86:88:6a:20:5f:d0:70:dd:a9:68:12:6a:ca:05:92:98:8e:
         30:c7:4d:ef:60:23:d9:30:92:bc:17:a4:a0:25:23:4a:04:37:
         7f:5b:c0:df:0d:12:83:45:6e:60:00:e6:d7:03:01:bb:c5:0d:
         f2:31:09:c2:ac:8c:b3:4f:43:70:2a:46:76:bd:81:04:e1:04:
         c4:02:d9:9b:07:e9:53:ac:d9:e0:1f:9a:f6:60:61:80:29:3d:
         fb:af:db:89:3c:d0:61:f7:12:2f:30:5d:4d:77:9a:b9:56:50:
         27:77:bf:00:e6:9f:00:ed:b9:8e:7a:39:aa:5b:9e:22:9b:43:
         64:ae:79:c4:46:5f:e6:04:a0:4a:2e:06:78:3f:18:20:61:e8:
         bc:a4:19:ad:1f:4b:31:8b:7f:39:b4:ca:b2:6c:c1:f0:42:e7:
         d0:b7:f9:84:45:16:d0:c7:f3:93:ca:3c:7b:62:53:b5:2b:00:
         fd:da:70:55:6b:4c:5d:b0:87:cb:cc:f2:4b:a0:d2:bd:a5:0d:
         2d:1e:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org