Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4YVOKDF8g6eqWF_4yC5-8aa6xLo.roa
File:                     4YVOKDF8g6eqWF_4yC5-8aa6xLo.roa (raw, json)
Hash identifier:          /9mkwST+TPKN4itwSSZtYEmvWgkZlt2zLtwvXJ5GFB4=
Subject key identifier:   E1:85:4E:28:31:7C:83:A7:AA:58:5F:F8:C8:2E:7E:F1:A6:BA:C4:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       017F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4YVOKDF8g6eqWF_4yC5-8aa6xLo.roa
Signing time:             Wed 24 May 2023 16:33:24 +0000
ROA not before:           Wed 24 May 2023 16:33:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E1854E28317C83A7AA585FF8C82E7EF1A6BAC4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:ac:46:f5:88:b8:2f:17:ea:e2:2a:d7:e3:
                    09:08:31:a8:81:08:32:ea:ce:31:77:55:e6:66:ff:
                    55:0c:6a:4f:ef:27:9b:d3:75:75:f0:f7:12:b8:14:
                    c5:d3:b7:cb:18:49:c4:33:9f:78:77:8a:e0:b9:e3:
                    bd:b4:9b:88:31:94:a7:72:e5:07:b7:47:7a:e1:42:
                    69:62:fb:01:08:93:db:8f:e6:8f:56:ef:0a:d9:eb:
                    a8:59:17:60:ce:dd:d3:3a:93:df:69:d6:66:78:03:
                    05:29:eb:7a:e0:ba:93:89:8c:2c:4e:c2:f3:42:e0:
                    d1:bd:dc:ba:dc:23:62:f6:5a:e2:ce:e6:2a:28:a9:
                    89:d6:c4:d5:7f:b9:99:6b:4b:17:bf:80:c2:3f:1e:
                    b2:e3:c6:e6:2d:63:09:76:54:af:3c:1f:9e:2e:fa:
                    df:92:0f:d2:68:f8:e8:92:d2:ee:30:4c:5c:b3:70:
                    37:37:64:d2:5b:da:01:24:c5:7e:48:b1:f0:ba:d0:
                    23:e6:94:c6:95:f9:d0:86:b7:b3:32:69:3b:da:e4:
                    2f:2e:ee:e3:55:b1:16:ff:87:35:f6:8c:1c:23:e1:
                    ed:c6:02:69:ba:8a:0d:ad:88:38:75:42:ad:41:98:
                    38:46:4b:2d:0d:d0:07:5d:f9:08:80:9f:80:f6:ac:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:4E:28:31:7C:83:A7:AA:58:5F:F8:C8:2E:7E:F1:A6:BA:C4:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4YVOKDF8g6eqWF_4yC5-8aa6xLo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:85:76:02:e3:2b:68:79:d8:23:14:8d:c4:c0:31:c9:99:2b:
         b0:e1:25:ae:d3:f8:9e:ca:a9:77:fd:ca:6f:60:50:3b:ce:22:
         39:34:14:3b:82:a9:a8:e1:4c:75:59:0b:a2:ef:5f:1e:7a:ec:
         2c:17:84:c3:88:e4:5a:c2:7e:7d:e6:0d:a7:5c:15:84:34:6d:
         97:fb:42:a3:eb:21:06:84:3c:be:65:2a:84:af:3e:0e:ff:e9:
         f3:a2:5c:cc:b9:f9:79:c6:f5:33:8d:90:93:b5:18:38:69:be:
         77:e2:81:6a:96:73:b7:a9:7a:e0:b4:7b:53:d0:a8:64:0d:2b:
         48:7e:0f:23:fb:b7:c6:ce:55:4c:23:be:e0:6f:7e:5d:6e:c8:
         4c:69:e6:59:79:14:1a:c4:8e:e6:41:15:7e:d8:c3:2a:b3:93:
         59:e4:08:10:ce:12:e3:8d:15:44:f9:0d:f6:4d:0f:e4:f3:7d:
         e6:22:65:ec:eb:d0:e2:8a:b2:63:d8:f3:42:25:bd:58:1f:00:
         09:f0:08:d0:e6:34:c7:87:cf:df:c2:81:2c:2b:73:f2:49:59:
         e1:c5:34:ad:ed:dc:8b:7e:1b:69:1f:26:fa:d9:67:de:d6:5c:
         16:95:59:28:43:2d:9e:94:a0:3c:2d:74:2c:96:e6:96:95:63:
         dd:e6:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org