Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6pVPXxNUP8XwC9jivII0W58X0aE.roa
File:                     6pVPXxNUP8XwC9jivII0W58X0aE.roa (raw, json)
Hash identifier:          DFlWpZE+ffqob7a/ZdMuXLzAN4Yg1BvON4p467l+Njo=
Subject key identifier:   EA:95:4F:5F:13:54:3F:C5:F0:0B:D8:E2:BC:82:34:5B:9F:17:D1:A1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       26
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6pVPXxNUP8XwC9jivII0W58X0aE.roa
Signing time:             Mon 27 Mar 2023 16:02:01 +0000
ROA not before:           Mon 27 Mar 2023 16:02:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EA954F5F13543FC5F00BD8E2BC82345B9F17D1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:62:50:2a:b9:44:45:88:ce:5a:fc:bd:46:
                    b7:c3:27:e0:b1:6b:ae:98:7f:58:06:b8:99:0c:da:
                    c8:65:0b:c5:e8:e5:1c:93:61:a3:39:0e:a1:ba:15:
                    d6:67:fb:8a:ea:94:2f:d6:ff:ec:c8:5e:40:b7:2a:
                    46:f0:7b:5b:aa:3b:8a:46:ef:a3:aa:05:37:c1:dc:
                    ab:01:44:e0:90:c1:8a:09:a3:c1:e6:20:3c:31:ea:
                    37:67:cd:17:22:08:6b:29:d9:6f:d5:a2:06:39:a6:
                    26:2c:68:9c:8d:d1:a0:38:77:a9:df:a8:a3:87:1e:
                    15:7a:22:c1:8e:d7:83:04:b0:5d:68:d9:00:3e:10:
                    7e:ff:5e:fa:ca:a6:67:b6:2f:b3:04:cb:ce:93:d6:
                    be:d0:dc:89:a5:42:0a:b0:60:7d:59:28:63:32:11:
                    44:1c:55:9a:eb:c3:43:92:b0:73:d3:1f:0e:3d:44:
                    fd:44:ab:a6:f5:3a:a9:2d:34:c6:11:b3:0a:68:d7:
                    7c:09:64:83:80:cc:3d:64:32:95:d3:4a:9c:27:bd:
                    03:6e:89:59:90:de:20:ff:32:be:d2:1e:3e:b7:54:
                    8f:6d:15:21:7f:40:71:f2:10:f5:ce:72:ec:20:c2:
                    f2:57:89:e0:60:7a:9c:a6:be:15:2b:29:79:9e:c7:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:4F:5F:13:54:3F:C5:F0:0B:D8:E2:BC:82:34:5B:9F:17:D1:A1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6pVPXxNUP8XwC9jivII0W58X0aE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:62:30:4d:10:5b:8c:b5:cc:df:8b:9c:de:21:85:6c:5f:49:
         df:0b:43:8f:28:78:be:05:1a:ee:d3:e8:66:9b:0a:92:92:f6:
         6c:70:59:d3:ee:b8:4c:83:7b:38:af:e9:1d:09:d1:5c:a1:d7:
         b5:6a:3d:9d:3d:d3:58:72:f5:ef:b5:eb:5a:32:5b:c7:bb:aa:
         01:5a:92:81:53:94:f8:6b:20:05:56:6f:2f:df:96:11:1a:4e:
         97:6e:b9:aa:d9:b2:5b:22:6a:02:2a:dc:a7:66:fc:c8:ab:ff:
         4e:d5:74:ac:e7:e9:0f:11:0f:9d:6e:42:7b:df:8d:0c:9e:b2:
         9f:a4:eb:82:60:a0:c2:68:d0:cd:7e:7c:0f:b3:c6:d8:f7:f8:
         13:b1:6b:7e:c0:be:d7:88:28:dc:36:ab:97:e2:49:c8:53:26:
         94:9f:fd:cc:2a:37:17:8e:50:d2:1e:db:a9:83:30:e0:24:7d:
         b1:06:1e:34:5e:99:a9:75:c1:6b:4f:94:bc:ae:d8:66:fc:94:
         10:c2:3e:a8:31:81:6c:28:47:6f:42:9c:bf:71:7f:7c:42:d9:
         69:c3:dc:75:3e:1e:30:98:fc:e8:26:fc:2f:fc:89:0f:70:12:
         32:52:1a:d2:43:c8:4c:51:07:f3:93:4c:2e:63:05:8c:c5:32:
         52:c8:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org