Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3_oqPpdLur7eNjfcI0NE2adY9RE.roa
File:                     3_oqPpdLur7eNjfcI0NE2adY9RE.roa (raw, json)
Hash identifier:          PhUFgyHatqZquOqyRvfKMkl2q0bkHhni/U8dn39JS9Y=
Subject key identifier:   DF:FA:2A:3E:97:4B:BA:BE:DE:36:37:DC:23:43:44:D9:A7:58:F5:11
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01B4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3_oqPpdLur7eNjfcI0NE2adY9RE.roa
Signing time:             Wed 24 May 2023 16:37:06 +0000
ROA not before:           Wed 24 May 2023 16:37:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:37:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DFFA2A3E974BBABEDE3637DC234344D9A758F511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:5d:02:98:44:a2:73:96:75:7b:41:3d:89:
                    76:bf:25:90:3b:5b:c8:50:26:f2:03:85:da:21:9a:
                    d0:10:a5:b4:3e:4b:29:b6:e2:45:c2:85:94:2e:d7:
                    73:fc:c3:ac:7b:30:93:6f:69:11:4a:b4:0f:36:f7:
                    34:30:44:30:4b:2f:6d:71:ea:90:36:8c:e8:e9:8d:
                    e5:d7:24:b2:8d:56:c8:18:32:44:74:38:cb:a9:eb:
                    5b:f4:17:ef:f9:cb:c4:f8:70:f4:9d:4e:ff:61:35:
                    21:b2:c7:d9:8d:41:96:9f:cc:87:55:96:54:ee:03:
                    ff:c9:8b:af:44:6a:b4:08:dd:b5:97:95:e3:4c:06:
                    7d:84:44:cd:cb:fd:bd:be:86:ab:0e:fc:4c:64:0c:
                    c5:3b:c2:16:ad:4b:54:09:90:fa:1c:d0:77:22:d4:
                    79:50:ef:a0:9c:33:04:02:f1:03:47:c2:44:85:24:
                    de:d8:ea:5b:17:01:10:b1:b1:75:8d:bd:1f:de:6d:
                    1c:e1:1e:2e:91:a0:9d:11:c4:d1:66:f0:1d:eb:af:
                    bd:8c:e0:ef:43:9a:6c:75:cb:e0:c3:17:6a:88:70:
                    81:fd:f4:b0:e5:8e:c3:85:9f:a5:a2:4b:57:8c:6f:
                    9d:0a:2a:da:75:c6:d7:ff:f7:94:6a:6e:a9:20:8a:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:2A:3E:97:4B:BA:BE:DE:36:37:DC:23:43:44:D9:A7:58:F5:11
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3_oqPpdLur7eNjfcI0NE2adY9RE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:4a:e2:e5:76:c3:c3:f4:47:ce:46:fc:bf:26:a3:a0:38:
         1b:65:4a:20:f0:5d:bf:4b:9e:8e:ab:cc:4c:99:75:9e:09:a4:
         94:59:80:32:b5:ad:4a:38:a6:25:26:47:e0:85:aa:1e:f0:e8:
         07:84:98:c4:89:99:71:35:bb:e5:a0:b4:7b:5d:17:c3:98:e7:
         cd:89:c9:b8:45:e0:be:25:d7:52:6f:b1:97:73:1d:fc:10:9f:
         f8:40:1d:00:28:36:56:25:87:63:44:99:3e:0b:35:71:aa:e0:
         e6:de:cd:28:11:b0:7e:59:ee:bb:12:ca:8a:3b:e7:60:ec:e4:
         f6:0b:7e:61:bb:9e:2b:ed:5c:fb:16:dd:a0:d2:a3:88:d2:cd:
         43:3e:db:88:07:6f:b8:92:55:8c:27:9e:37:23:65:36:54:0f:
         b8:5f:56:e6:5a:48:9d:ce:ff:c2:91:ae:19:70:fb:3d:93:ad:
         c9:27:8f:21:1e:2d:a4:ad:3e:70:09:d2:f3:cb:5e:08:e9:01:
         78:29:cf:5b:42:0b:06:7d:ca:b7:01:c5:20:50:6b:4a:9b:29:
         80:5a:c2:5d:20:06:46:7a:23:b1:54:d4:8c:6f:c7:8a:77:ac:
         05:b0:37:c9:1c:6c:89:25:73:f4:6d:58:31:2b:a6:63:1e:13:
         6f:09:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org