Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4MCueXQy8p9kYFsovNIygnIX5XU.roa
File:                     4MCueXQy8p9kYFsovNIygnIX5XU.roa (raw, json)
Hash identifier:          sNzNPTf+2avahqfEitJDszHFb+yf4xugFOed/DyTFtI=
Subject key identifier:   E0:C0:AE:79:74:32:F2:9F:64:60:5B:28:BC:D2:32:82:72:17:E5:75
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       2C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4MCueXQy8p9kYFsovNIygnIX5XU.roa
Signing time:             Mon 27 Mar 2023 16:02:03 +0000
ROA not before:           Mon 27 Mar 2023 16:02:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E0C0AE797432F29F64605B28BCD232827217E575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:54:67:fe:ba:df:40:67:89:67:05:a1:02:
                    46:0b:ae:2d:c3:93:45:0d:86:93:25:71:62:f5:ec:
                    53:f6:44:74:2c:29:37:f1:6c:aa:a2:51:b5:58:98:
                    a4:d6:ce:59:52:fd:2b:0f:21:eb:f6:bd:eb:95:ee:
                    2c:f0:cf:81:a3:cf:69:f6:75:af:ce:ef:5c:08:d0:
                    91:ba:98:19:ac:f6:83:64:4b:8d:86:6b:6e:a0:30:
                    e0:2e:8b:f7:ec:c3:f1:93:ac:14:54:e6:15:7d:06:
                    8f:62:74:ce:7c:ab:4e:9d:43:85:c6:d4:09:4e:3e:
                    4d:73:c5:3b:fa:dc:51:77:f0:81:30:de:63:c8:71:
                    cf:4a:78:fa:74:62:5f:bf:8e:9a:56:e2:1e:52:be:
                    a2:e4:06:c5:8e:84:1e:14:52:9a:c9:36:ba:d2:0a:
                    07:3d:c6:43:bc:25:e0:85:3c:63:55:6c:d5:49:16:
                    9d:b3:b7:2e:bd:66:a7:5e:d0:d4:ea:ee:26:a5:99:
                    f4:40:90:20:6c:37:91:09:f2:f6:d7:03:58:e9:79:
                    b2:40:28:9c:05:91:ad:da:e6:27:fb:10:ff:01:36:
                    8f:f0:47:a2:52:d2:23:66:00:57:7a:1d:b8:2e:64:
                    08:45:79:03:88:66:75:96:85:dc:9e:97:58:b7:f1:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:AE:79:74:32:F2:9F:64:60:5B:28:BC:D2:32:82:72:17:E5:75
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4MCueXQy8p9kYFsovNIygnIX5XU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:c6:50:4d:7e:63:f5:76:c8:75:38:70:19:94:32:5e:9f:
         f0:fa:2f:c6:ad:90:7b:68:c2:af:f0:3a:d8:5e:85:3d:5f:0f:
         48:f4:d8:87:a1:47:25:02:0a:d4:b5:e2:f2:a6:90:7a:41:0c:
         fc:85:cd:e6:2a:4f:53:cf:cd:34:69:8e:6e:4b:01:ad:92:f4:
         49:ec:cb:ee:fe:f0:01:53:c0:f0:63:13:7a:1f:6c:78:f7:59:
         0c:04:f2:12:d6:e8:3b:5c:1d:d7:06:bd:88:fe:fa:31:c0:97:
         26:74:e8:bd:45:31:27:96:42:69:00:b6:c0:2a:a5:79:ae:28:
         ef:8d:66:c3:55:2d:8c:8b:cb:60:90:ae:0b:4b:db:1d:53:e3:
         f2:54:b9:7a:c7:6b:2f:55:17:8c:44:72:af:b8:22:23:0d:fa:
         30:2c:2f:42:9e:1e:4a:4e:5a:e6:a5:f7:c4:e7:07:a3:3d:e4:
         75:69:ce:a2:02:f3:3f:69:13:9c:30:ee:c7:74:bc:e3:cf:18:
         0f:83:75:86:1a:d1:1c:a0:62:34:5f:3f:76:4f:44:19:33:ef:
         aa:ec:b7:41:a8:6c:ef:59:cf:1c:aa:e2:f4:5e:39:c9:d0:14:
         99:a9:8d:a4:b1:96:4b:95:7a:cf:b8:db:e4:5c:68:53:7e:f0:
         d6:82:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org