Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7NAwutnPVhRpfS0ah2LfS-fFoYo.roa
File:                     7NAwutnPVhRpfS0ah2LfS-fFoYo.roa (raw, json)
Hash identifier:          XtvxDAtoBRL6TqBjeczD5xn8EXac0XOeA8wQVImW2ZI=
Subject key identifier:   EC:D0:30:BA:D9:CF:56:14:69:7D:2D:1A:87:62:DF:4B:E7:C5:A1:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0175
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7NAwutnPVhRpfS0ah2LfS-fFoYo.roa
Signing time:             Wed 24 May 2023 16:33:20 +0000
ROA not before:           Wed 24 May 2023 16:33:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.76.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ECD030BAD9CF5614697D2D1A8762DF4BE7C5A18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:20:8f:7b:5a:8f:e4:94:01:f1:7b:db:68:
                    f3:5b:c1:d9:82:3a:0b:8a:ab:9f:70:be:b8:26:14:
                    fe:30:cb:06:fe:ee:67:48:7c:38:a8:7f:61:56:27:
                    4e:77:0d:e8:72:39:a8:11:fd:e1:c8:3b:5b:4c:d9:
                    2e:b7:bb:38:09:06:1b:2d:a2:9f:7b:bd:dc:80:e7:
                    8f:ce:f3:be:0a:1f:8d:2f:5f:6c:75:54:4b:0d:f5:
                    cc:40:b6:d6:b2:ce:bb:62:43:f2:03:3f:30:11:e8:
                    a1:2a:e6:9d:cc:f8:b5:ef:5e:9d:7f:eb:64:c7:75:
                    24:b4:07:e1:c3:f9:3f:2d:3a:f8:e8:4c:45:fa:82:
                    bf:ce:d9:f6:fb:8d:c0:45:96:b9:09:6d:6c:d5:28:
                    a0:88:dd:27:87:58:59:0b:3d:9a:dd:67:56:7a:ce:
                    5f:41:6f:66:14:17:a9:01:e6:4b:fc:08:6a:b8:82:
                    c4:da:9f:0d:5e:ee:06:ab:35:ee:d4:6e:96:b5:3a:
                    69:e1:c1:8c:56:d1:eb:50:43:e1:ab:d3:0f:70:d1:
                    14:b3:ed:e6:50:b9:b3:28:88:22:51:a2:61:cd:13:
                    f1:88:0e:ab:89:36:1f:56:92:5b:e7:1c:2f:28:02:
                    5f:14:42:9d:94:93:14:4d:21:5b:36:6e:84:4d:15:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:30:BA:D9:CF:56:14:69:7D:2D:1A:87:62:DF:4B:E7:C5:A1:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7NAwutnPVhRpfS0ah2LfS-fFoYo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:78:9c:1a:65:fb:fb:15:68:7d:d5:c8:59:61:6f:cd:1d:82:
         bb:83:ab:f1:77:43:e0:79:0b:10:63:2e:33:02:3e:76:a3:ec:
         5f:45:ed:11:5b:62:d5:48:16:29:55:b1:e2:2c:d3:f8:d3:c0:
         dd:cc:37:f2:56:31:55:39:0c:98:73:78:96:55:c4:13:74:f3:
         1d:e9:cd:73:d3:ec:f4:7b:46:4e:bd:83:f3:bb:4c:1a:2f:14:
         f2:43:73:83:61:ea:fc:5f:99:0c:a6:f4:5d:a9:3c:6e:75:ba:
         ff:64:89:fe:a8:92:8d:d2:a3:b2:39:82:36:ab:1c:a6:b6:e3:
         69:8e:c8:2f:96:87:ce:15:fd:97:d3:f1:34:a7:be:a2:91:62:
         39:83:ca:e7:c5:d4:e4:75:df:6d:ee:54:45:85:93:f2:29:49:
         56:d4:af:bd:e2:a5:39:8a:3e:28:98:5d:bc:aa:90:3d:c5:b2:
         7c:2e:79:dc:a5:1f:25:fd:f8:ec:0a:84:4b:71:b3:21:c4:8f:
         82:5f:7a:c9:28:af:88:19:8b:48:e6:7c:2c:7f:a5:84:de:f0:
         46:43:50:74:a3:8e:ab:86:04:c6:c3:b0:9b:6f:a3:06:1d:ea:
         bd:a1:fd:c7:06:90:96:da:c2:c3:2d:bb:69:b6:d1:69:18:19:
         44:84:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org