Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MSQH3KpgeyIjaW79XUNPen4G5c.roa
File:                     6MSQH3KpgeyIjaW79XUNPen4G5c.roa (raw, json)
Hash identifier:          BREWWgGF5nd9XopOPZ+ugMkydxM8luHUqIEXQ82GJo8=
Subject key identifier:   E8:C4:90:1F:72:A9:81:EC:88:8D:A5:BB:F5:75:0D:3D:E9:F8:1B:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0240
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MSQH3KpgeyIjaW79XUNPen4G5c.roa
Signing time:             Tue 30 May 2023 16:32:23 +0000
ROA not before:           Tue 30 May 2023 16:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.74.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E8C4901F72A981EC888DA5BBF5750D3DE9F81B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:a5:02:c9:f7:99:6a:c7:2d:58:ad:af:f6:
                    67:83:0d:0a:2f:92:e0:51:70:8c:e3:bd:28:e6:cd:
                    3b:97:78:23:cf:90:2e:43:63:e0:20:0e:24:a4:7b:
                    51:31:db:38:d7:9e:19:6a:23:11:76:7a:73:04:7a:
                    c3:a0:a5:ed:08:8d:a2:c8:59:e6:5d:a5:64:fb:fd:
                    e2:2f:07:6f:60:9d:3b:8b:87:74:a8:e4:c6:5d:6c:
                    d0:50:3b:21:7f:21:53:87:cd:7e:58:22:70:92:54:
                    bb:99:6b:cb:7c:8e:ff:f3:21:1c:a1:b1:62:83:a7:
                    2e:c7:22:cf:ea:76:a9:5f:85:e5:f0:79:58:bf:1c:
                    ea:e8:30:d4:c3:d4:30:79:ba:d7:d1:41:7a:c2:f7:
                    46:7c:81:26:06:f4:15:da:02:81:a8:a9:52:08:b7:
                    96:e9:7f:61:66:79:9e:f9:f0:dd:5b:7e:6d:ed:d5:
                    2b:27:e0:22:17:96:5b:6f:7c:a8:19:d5:85:7f:4d:
                    98:2c:63:5a:4e:74:0d:97:bf:7a:e8:89:45:f1:5a:
                    1a:ad:c9:69:ce:c7:d9:a9:35:c3:09:ba:04:a7:aa:
                    a5:e1:2c:8c:8f:28:42:8b:4f:a9:19:19:73:c8:73:
                    fe:3b:b7:85:5d:0e:59:d5:c6:55:52:aa:71:90:48:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:90:1F:72:A9:81:EC:88:8D:A5:BB:F5:75:0D:3D:E9:F8:1B:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MSQH3KpgeyIjaW79XUNPen4G5c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:18:b5:b6:ce:21:db:74:82:0b:56:12:2e:4d:a2:e3:49:c4:
         27:b0:83:b3:9f:c7:5c:19:8a:a2:ac:31:11:86:81:88:87:44:
         b9:12:62:18:a6:63:c0:76:9a:fe:6b:8b:65:3e:18:a0:5c:b8:
         a0:0c:0d:30:17:0d:cf:25:24:ed:a6:03:a6:40:a2:32:a6:91:
         ef:e7:51:47:69:15:24:06:57:f6:bc:92:88:92:68:8d:d9:c0:
         45:10:38:5c:94:48:7d:dc:01:7f:61:e6:5a:aa:ba:fa:15:ca:
         aa:99:90:c7:cb:bb:93:8d:7e:42:2e:43:a8:22:0a:41:c1:e2:
         7f:f8:a0:bd:5c:9d:f7:b7:95:a1:c8:77:2c:fe:3a:20:0b:a6:
         e0:bf:4e:47:08:6e:70:ae:7a:22:c6:68:cf:09:5f:6f:f7:f1:
         d5:8f:d5:d6:c5:a2:d4:83:58:d9:5f:b2:ee:25:b3:bf:23:b0:
         dc:92:55:84:2a:e8:57:8e:5f:73:f0:82:b6:86:fa:05:bd:31:
         c3:0a:a2:17:60:4e:aa:83:89:3c:b6:57:5f:40:fe:f8:46:7c:
         de:c1:ba:a8:6e:81:40:ab:21:a7:a2:48:bf:19:c8:78:d0:46:
         b7:ef:3e:6e:70:26:8a:36:0f:82:52:00:4c:df:60:b4:10:06:
         e1:cf:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org