Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5o43Zv0IcaZUaE-_C4ZW8T7S1hg.roa
File:                     5o43Zv0IcaZUaE-_C4ZW8T7S1hg.roa (raw, json)
Hash identifier:          zVvrueVwe3ZAowq2tVvPBA52LNxe0xzZdSjwSBl71Hw=
Subject key identifier:   E6:8E:37:66:FD:08:71:A6:54:68:4F:BF:0B:86:56:F1:3E:D2:D6:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       038E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5o43Zv0IcaZUaE-_C4ZW8T7S1hg.roa
Signing time:             Thu 01 Jun 2023 17:57:40 +0000
ROA not before:           Thu 01 Jun 2023 17:57:40 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:40 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E68E3766FD0871A654684FBF0B8656F13ED2D618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bb:b6:9b:9e:8d:3c:53:fa:36:3c:fb:f8:fc:
                    1c:a9:a1:68:ac:c1:9d:f2:86:a4:89:d1:22:86:b7:
                    07:eb:72:b7:f5:1d:d8:1e:ff:6e:7e:0c:52:e7:69:
                    ba:5d:51:76:83:bf:24:51:ea:75:a0:52:12:ee:c9:
                    d4:fb:24:5b:3d:f9:a3:5d:ad:12:98:3b:46:6c:61:
                    a9:c4:d3:8d:ff:80:c2:37:df:dc:67:78:9d:69:bb:
                    44:62:d0:bf:df:bb:f9:f6:e7:c5:1f:2f:8b:34:06:
                    97:6c:a2:17:bd:03:9e:74:f2:05:54:06:e0:39:8f:
                    ec:30:8b:5f:81:a1:c9:4d:b9:ff:94:e2:cb:dc:9a:
                    52:d2:ef:94:2d:91:56:42:cf:36:5a:fb:55:c3:27:
                    69:c7:02:0f:81:e7:72:ee:da:85:4f:02:be:2b:80:
                    fa:5d:41:99:23:b3:77:9d:b1:87:f0:64:b8:92:5e:
                    ac:3d:a2:94:1e:b0:04:c1:dc:1f:d7:1f:00:48:b2:
                    34:a9:7f:85:62:99:d9:be:7c:25:27:33:6d:e1:b0:
                    61:98:bf:cf:7c:ca:5e:7c:17:37:96:99:1f:30:6a:
                    44:13:e5:64:5a:a9:c7:80:1c:a8:04:b1:d2:e1:cf:
                    92:98:9e:97:ea:2a:8d:50:e5:80:ee:76:5d:0b:4a:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:37:66:FD:08:71:A6:54:68:4F:BF:0B:86:56:F1:3E:D2:D6:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5o43Zv0IcaZUaE-_C4ZW8T7S1hg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:b0:a4:6a:40:cf:69:12:00:1d:cf:ad:aa:55:7d:30:bc:
         a7:de:3a:89:72:81:4c:4d:65:3f:63:34:4d:c6:51:5f:29:1c:
         61:b3:14:e7:e3:9c:1a:65:17:13:f7:5b:1a:d4:ae:b2:e9:bd:
         f5:3a:25:3e:3e:69:56:22:be:03:d6:74:35:7d:58:5c:90:6a:
         87:6c:3a:db:d4:47:91:90:23:f2:1a:e3:c9:3e:0e:2f:54:5a:
         eb:96:e2:46:dc:b1:7f:49:0d:81:a0:0c:ac:60:de:1a:a1:39:
         3c:4c:ee:8f:6c:e5:b8:f9:db:3b:72:7c:49:e0:af:f1:ba:55:
         50:fc:7e:0f:ce:73:cd:b0:b8:de:fe:58:73:60:00:89:bf:b5:
         37:27:4b:39:b3:44:07:60:2f:d5:49:ad:8e:8a:79:73:3a:34:
         6b:d3:13:3d:5b:e2:ac:c7:7e:f9:cf:5e:a2:d0:ec:79:9c:9a:
         15:7a:13:a6:15:4f:fd:a6:0f:77:5a:a9:25:1f:f5:4c:35:e5:
         68:2e:b3:72:43:89:3b:28:25:d9:a1:9e:64:7f:97:ae:fb:ff:
         d9:9d:86:65:f3:3e:2f:51:3c:4b:44:a4:23:b8:72:a4:c9:6d:
         db:ca:be:c7:e1:dc:52:4f:b9:20:a1:8a:b0:64:d2:1f:c9:31:
         a7:20:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org