Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5y1yAJue-JC-kbcWy0Yk9BEdDq0.roa
File:                     5y1yAJue-JC-kbcWy0Yk9BEdDq0.roa (raw, json)
Hash identifier:          sPeZNcv3ZaNgflr5qun70d5BfnsUUQeMvFQ/nkqV70M=
Subject key identifier:   E7:2D:72:00:9B:9E:F8:90:BE:91:B7:16:CB:46:24:F4:11:1D:0E:AD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0399
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5y1yAJue-JC-kbcWy0Yk9BEdDq0.roa
Signing time:             Thu 01 Jun 2023 17:59:28 +0000
ROA not before:           Thu 01 Jun 2023 17:59:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:59:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E72D72009B9EF890BE91B716CB4624F4111D0EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:7b:43:9c:79:4a:d7:c7:4a:90:39:aa:8d:
                    f3:8a:89:3c:cb:6f:77:75:76:10:d8:4f:b2:5e:ea:
                    b2:87:49:16:5a:40:1e:08:a7:9a:22:68:91:09:46:
                    e1:4c:af:17:f6:f2:a8:ab:0b:f8:02:da:cb:5e:e1:
                    1d:b7:86:52:8b:51:56:43:e3:08:62:65:ed:c1:b3:
                    6a:70:ce:d8:b5:04:f3:fb:40:45:8d:5b:f2:ce:66:
                    41:59:46:60:fd:fd:9d:49:be:ef:80:de:65:e9:31:
                    c1:2b:2c:9d:f5:f4:7a:42:27:4a:01:6a:e2:fa:dd:
                    18:1e:86:7b:04:75:3c:fc:07:e8:79:9c:f1:26:89:
                    76:62:d6:39:80:de:9c:44:58:07:f2:8f:e8:8d:96:
                    2f:eb:96:ef:44:b7:29:2d:51:18:75:c7:29:69:74:
                    a6:69:28:de:47:1b:e6:1d:11:42:27:09:32:37:c6:
                    43:c2:cc:0b:87:15:d0:fa:eb:f5:6d:b0:19:3a:3f:
                    d3:54:f0:f0:df:c1:43:88:8d:5f:6d:cd:16:3f:c5:
                    a9:b1:1d:96:71:27:41:7a:20:c8:ab:83:3d:7f:40:
                    a7:22:54:97:a6:d8:25:1c:30:66:48:f5:9b:d4:e5:
                    d2:79:6d:0d:49:30:bf:4f:df:71:dc:91:ca:f6:fb:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:72:00:9B:9E:F8:90:BE:91:B7:16:CB:46:24:F4:11:1D:0E:AD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5y1yAJue-JC-kbcWy0Yk9BEdDq0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:c6:35:c7:72:19:2c:21:64:49:55:31:63:79:a8:c8:3e:
         71:78:31:01:ec:cf:f9:73:6a:3b:4a:f2:25:f3:72:2c:0c:53:
         39:6a:ee:db:18:e6:fc:01:1d:9d:19:71:2a:b7:80:8b:47:3c:
         47:b6:16:d1:09:f8:b3:55:81:9a:9b:eb:5b:35:ed:b0:30:a8:
         b6:a2:a8:2d:ca:12:84:f9:7b:27:1e:3e:b4:90:ca:31:08:4d:
         b0:dd:34:4d:4e:17:06:76:b1:2b:f7:57:cb:b3:46:16:58:7e:
         84:9e:e2:11:96:fd:6b:3f:6d:97:d7:17:d4:13:de:24:89:5e:
         ac:72:d1:99:58:b4:35:51:cc:c7:d4:6d:45:98:dd:ed:e1:e9:
         2b:c2:d9:52:01:1e:ee:63:11:9a:da:78:a2:33:2e:cb:9c:8e:
         22:7e:19:ac:93:c2:f2:58:31:21:8f:6c:8e:41:ec:06:fe:cf:
         db:7b:4e:de:41:45:6b:cc:ee:90:91:13:37:2d:7c:2d:17:88:
         9e:3c:c1:e6:58:ee:a3:b1:ef:33:3c:9e:81:06:1c:2f:49:dc:
         3a:38:78:0a:ef:06:68:82:04:a5:e9:e1:b8:67:92:3c:24:99:
         c4:49:96:cb:99:99:7f:2e:f2:2d:dd:6a:f7:ed:05:b3:d8:4c:
         0c:26:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org