Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2PCbd70_n4zeMBfY6-p7ju3AVZ0.roa
File:                     2PCbd70_n4zeMBfY6-p7ju3AVZ0.roa (raw, json)
Hash identifier:          N9+WcpP/XcNI76+KbhtQzRKMagT297i2WTLDjDD6ELA=
Subject key identifier:   D8:F0:9B:77:BD:3F:9F:8C:DE:30:17:D8:EB:EA:7B:8E:ED:C0:55:9D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0285
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2PCbd70_n4zeMBfY6-p7ju3AVZ0.roa
Signing time:             Tue 30 May 2023 16:36:23 +0000
ROA not before:           Tue 30 May 2023 16:36:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D8F09B77BD3F9F8CDE3017D8EBEA7B8EEDC0559D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:38:0a:66:1e:86:27:0c:9d:c2:08:5d:9a:
                    22:fb:75:83:1c:ab:76:ca:cf:52:34:4e:86:17:fd:
                    72:cd:c4:44:55:ff:59:26:2d:2a:02:e8:2b:56:21:
                    d7:54:69:30:78:b3:68:a9:85:4d:41:dc:a1:b3:c2:
                    07:57:2f:e2:ec:48:8b:c7:cd:af:93:24:5f:ca:bd:
                    c4:07:83:09:35:fb:fd:89:be:84:7f:cc:41:73:d9:
                    4d:41:9d:4c:27:92:90:3d:56:87:a9:ff:a1:43:f8:
                    f3:27:c3:7c:4b:50:fc:70:0b:4d:b2:cf:c5:45:62:
                    dd:a6:fb:f1:68:35:3c:fd:d7:1c:59:1a:1f:73:a7:
                    15:f1:76:3e:49:2b:b7:0d:a2:25:d2:fe:d3:59:b6:
                    7f:28:d1:aa:e5:f2:d6:06:a6:2a:1e:1a:ba:d3:18:
                    ff:a8:f9:7a:3e:9f:5f:0d:74:f7:4d:f4:17:89:0e:
                    5f:6e:73:b5:bb:3b:7e:09:fe:cf:ce:a7:ec:ae:ae:
                    57:21:7b:d1:f4:46:7b:7f:bb:95:62:d5:ef:d5:77:
                    1c:56:06:f5:e2:a9:cc:83:96:c7:d5:e4:1e:05:ad:
                    31:89:8c:4f:38:e8:4c:b9:42:2a:2a:ee:c6:8b:16:
                    8d:bd:8b:a7:8b:85:fd:2b:ad:e4:89:24:e4:50:67:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F0:9B:77:BD:3F:9F:8C:DE:30:17:D8:EB:EA:7B:8E:ED:C0:55:9D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2PCbd70_n4zeMBfY6-p7ju3AVZ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:2d:ff:22:31:73:e4:10:2a:ec:8d:05:8a:42:9d:fe:b5:72:
         f6:ff:60:b4:67:93:5a:f4:f4:7d:33:55:14:28:a3:f3:28:21:
         82:22:5f:93:ab:33:c8:83:0a:66:49:9c:6e:40:7a:93:a2:f8:
         81:af:af:28:d2:7d:b5:ff:05:9b:2e:68:f0:2f:af:4b:e5:4f:
         0d:5d:b2:75:b3:5d:83:8c:b0:4e:88:8c:5b:82:f6:7b:86:8f:
         ee:b7:43:f6:80:cf:b6:1e:46:12:0e:f4:a7:73:be:c3:02:3b:
         38:69:e2:f5:0a:9d:f2:53:30:bd:de:70:8c:1a:86:6b:d9:d5:
         22:3c:c4:32:da:c0:9f:94:32:36:a9:42:3e:fb:70:1e:42:5b:
         a5:18:dc:a2:35:ef:51:a6:4b:20:7a:e2:03:6c:52:82:db:5b:
         f6:45:f6:e4:12:f5:fd:77:2b:8a:4c:37:c1:0e:db:a4:47:e0:
         8f:24:bd:4e:6f:87:bd:ba:8a:ac:0d:ed:c8:6d:31:8f:1b:93:
         fa:76:e3:ee:1c:13:59:cc:9b:91:c3:74:a5:ee:a3:e0:7f:5d:
         7c:9d:d4:5f:74:83:05:15:f4:a5:66:23:13:16:33:41:91:53:
         2a:0d:9a:94:2f:cd:b0:64:fc:4b:f9:92:c5:59:77:25:6e:ac:
         e4:de:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org