Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5pLvmxq6RtfUn9shRDRTkPB0rSY.roa
File:                     5pLvmxq6RtfUn9shRDRTkPB0rSY.roa (raw, json)
Hash identifier:          OErJEvbia6TGN3R8P0sSkW8k/eNjTJkmjm7x5S0Ecjs=
Subject key identifier:   E6:92:EF:9B:1A:BA:46:D7:D4:9F:DB:21:44:34:53:90:F0:74:AD:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5pLvmxq6RtfUn9shRDRTkPB0rSY.roa
Signing time:             Tue 30 May 2023 17:17:36 +0000
ROA not before:           Tue 30 May 2023 17:17:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.80.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E692EF9B1ABA46D7D49FDB2144345390F074AD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:1c:a0:90:e5:57:e9:aa:8b:30:01:c2:e2:
                    d8:42:f1:77:8f:95:85:39:06:22:68:e0:9b:31:fb:
                    30:4b:92:bb:2a:de:cb:05:26:d7:a1:6e:b7:49:9a:
                    cb:67:7c:e2:c5:62:e5:f7:e5:19:87:81:44:c9:cd:
                    13:68:3c:a6:81:90:be:33:fd:2b:43:72:f7:a8:17:
                    ea:85:ff:17:a3:65:9b:ab:4d:42:8f:5e:70:78:ad:
                    1f:5d:59:7e:fb:e8:6e:27:4c:4d:87:f8:14:83:48:
                    dc:f7:b8:7c:77:93:73:9d:82:43:f2:74:69:f6:cc:
                    d9:7f:d0:11:2a:3f:77:87:77:38:45:47:69:3b:aa:
                    29:ed:1d:03:24:e4:08:9d:ed:65:46:43:e8:02:68:
                    de:75:ff:bb:43:61:5d:fc:c5:03:3e:e0:92:f5:86:
                    65:54:72:ac:86:18:b5:9f:d0:9c:7b:51:0e:5a:ab:
                    1e:71:b8:94:35:9e:c9:68:e6:30:3f:d7:d9:bc:6f:
                    df:e1:2a:90:5e:01:dc:f9:e4:cc:72:f3:aa:fb:ee:
                    7e:df:9f:d7:52:96:59:72:77:d6:c8:be:2c:e9:86:
                    85:99:96:26:5f:a1:c2:af:24:c2:3e:2f:e8:be:39:
                    c9:26:18:00:de:7a:ed:8e:2e:5b:b9:11:95:4b:f5:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:92:EF:9B:1A:BA:46:D7:D4:9F:DB:21:44:34:53:90:F0:74:AD:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5pLvmxq6RtfUn9shRDRTkPB0rSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:28:92:e3:8d:05:fd:fc:2c:13:17:e0:e5:81:fc:fb:26:
         83:6a:5b:17:db:6c:1a:c0:6b:7f:0f:39:76:ff:17:47:a4:cd:
         48:fe:5a:e8:b7:b4:cc:69:8e:18:88:8a:b3:f7:94:9f:28:d1:
         a3:cd:50:21:e1:1c:34:63:15:84:c4:d1:ff:c8:ac:5a:c1:0c:
         bf:f5:b8:81:61:f7:fe:8d:e2:dd:ed:0a:90:71:e2:39:08:cf:
         5a:33:07:6c:43:37:26:48:c6:61:f5:6c:45:63:f1:bb:1b:5d:
         8d:6a:f0:2b:a7:98:9a:a9:85:86:9f:16:60:dd:8e:fd:6b:d3:
         f2:fe:56:7d:b4:24:55:fb:7c:4b:db:58:5f:af:8f:06:54:5c:
         0d:34:0b:1a:e4:b9:18:93:5d:7f:1c:c0:f3:a8:66:54:ff:e1:
         45:af:44:68:6d:74:0b:73:46:5a:04:03:3e:aa:fd:2f:33:6b:
         ea:c8:11:74:00:a8:b5:db:e6:87:e9:85:ce:2a:25:e1:28:4d:
         13:9b:a6:47:66:fe:8b:1f:a8:79:ae:9e:c7:69:af:5b:83:c2:
         b0:f4:b3:d6:55:81:46:45:c9:97:c8:de:31:9a:96:1a:fd:0c:
         b5:76:f4:bc:ec:ec:23:8b:7b:57:88:1c:a9:29:57:61:26:3c:
         cf:bb:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org