Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6PRdmKyzdRXV_mRT4ax-4Fzffro.roa
File:                     6PRdmKyzdRXV_mRT4ax-4Fzffro.roa (raw, json)
Hash identifier:          26bbdaSTVO4F5cwlvMBEwqkqBkAeErq/+zNwitijh5w=
Subject key identifier:   E8:F4:5D:98:AC:B3:75:15:D5:FE:64:53:E1:AC:7E:E0:5C:DF:7E:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6PRdmKyzdRXV_mRT4ax-4Fzffro.roa
Signing time:             Wed 24 May 2023 16:40:30 +0000
ROA not before:           Wed 24 May 2023 16:40:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.66.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E8F45D98ACB37515D5FE6453E1AC7EE05CDF7EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:cb:02:a7:fc:15:91:9d:80:5e:c8:16:4c:
                    7c:b3:98:5c:a8:69:20:5f:d8:59:f6:7c:f1:61:d0:
                    dd:bb:93:6b:a5:27:8e:78:7c:e2:8a:ab:71:27:f5:
                    0d:42:00:dc:f0:1c:e1:c5:d6:4b:a0:2a:5c:ac:63:
                    1d:fb:e6:89:4a:74:d9:94:74:12:f1:9b:15:b1:d2:
                    0e:95:61:3d:7b:9f:62:d4:a3:9c:74:78:48:32:5e:
                    74:67:88:cc:36:0d:af:d5:00:0a:6a:c3:11:fb:24:
                    b7:9c:4e:98:c8:e5:24:08:be:b1:31:46:e2:34:5c:
                    57:a9:19:62:23:14:b0:79:18:b7:50:01:04:b0:b5:
                    78:95:9e:a9:e2:2c:7d:3b:7b:69:3e:1b:86:63:e5:
                    7b:eb:db:ce:a4:38:c0:e9:ba:4c:29:f4:f5:ae:ae:
                    9e:04:bd:db:69:01:2d:ed:e4:59:8a:01:d8:31:25:
                    83:0a:ed:5d:52:0f:a8:9c:e7:01:20:ad:a8:67:47:
                    e9:ac:69:38:7a:e2:7b:ca:4f:3c:d7:c8:55:ae:8e:
                    a1:bd:3c:01:4d:3c:d4:de:b1:42:d2:dd:2c:d2:67:
                    b9:6f:3b:9a:31:ce:f8:21:e6:0c:7c:2c:8a:15:7e:
                    17:42:21:bf:a5:e7:fb:8e:30:f9:39:bd:35:60:d8:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:5D:98:AC:B3:75:15:D5:FE:64:53:E1:AC:7E:E0:5C:DF:7E:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6PRdmKyzdRXV_mRT4ax-4Fzffro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:39:a1:46:d2:ea:d4:8f:ad:99:91:14:e7:4c:56:5b:9d:
         bc:ae:31:21:b5:e4:e0:2e:4f:95:1f:f3:b1:0e:26:80:6e:fb:
         39:8d:a6:6b:37:81:ce:44:60:b7:35:0f:f6:5b:ce:dd:7d:e2:
         2a:32:01:68:17:cb:00:04:5b:02:05:8e:cd:17:73:0d:c1:ac:
         d1:15:e2:00:16:8c:53:12:ae:b8:33:29:68:b3:f6:18:5b:8b:
         d8:c0:2d:3e:4d:20:1e:fd:fb:82:92:4f:b6:6d:e9:58:c0:6c:
         6b:9f:66:e5:7c:50:b7:c4:ac:e1:9c:64:ce:ec:c8:b0:b8:e4:
         3c:95:3c:3b:8f:f9:d9:77:40:63:db:18:11:a5:f3:09:81:e1:
         09:74:69:5e:83:9d:74:42:a3:3b:cd:93:62:04:ec:0c:2c:e0:
         ab:19:ad:ff:9d:03:64:20:b9:cc:0f:87:c0:20:58:fa:0f:6b:
         4c:a5:db:b5:ec:74:b2:9c:7f:68:8c:f6:44:f7:ab:43:00:bc:
         e1:91:6e:bf:cb:dc:5d:63:d3:04:76:ee:53:03:b6:bb:9f:b6:
         5d:62:88:f3:f4:b3:e9:a4:20:37:60:a1:10:20:d3:53:c9:31:
         a8:09:a0:18:ff:f6:ca:1c:34:bd:8d:40:38:e4:c6:11:23:27:
         3d:e6:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org