Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8oXLxQD9qlSb0ducbqHngwCdF8s.roa
File:                     8oXLxQD9qlSb0ducbqHngwCdF8s.roa (raw, json)
Hash identifier:          zcEYBoaomcSS0Elp8v3Gh3QU8z2ZJsumfC7paYBRzVA=
Subject key identifier:   F2:85:CB:C5:00:FD:AA:54:9B:D1:DB:9C:6E:A1:E7:83:00:9D:17:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       B8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8oXLxQD9qlSb0ducbqHngwCdF8s.roa
Signing time:             Wed 29 Mar 2023 16:05:55 +0000
ROA not before:           Wed 29 Mar 2023 16:05:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.30.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F285CBC500FDAA549BD1DB9C6EA1E783009D17CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:94:46:d9:fd:38:9f:37:d8:58:dc:7e:51:
                    b3:1e:11:0b:f9:df:7b:ee:49:0e:36:06:f3:ad:8b:
                    a9:73:0d:46:40:46:d8:33:cf:94:5e:7c:e9:d7:5f:
                    c2:f1:52:66:03:c5:51:b1:e5:36:0e:2e:d8:b9:75:
                    cb:0a:fa:31:34:8a:10:b0:4c:2e:fb:8a:93:fc:f4:
                    a5:8b:16:96:a0:2a:e6:05:9e:b4:74:e0:cc:47:ea:
                    3c:b5:52:2f:7b:6f:29:1d:86:f2:ee:03:d1:63:37:
                    ac:dd:5a:be:ea:b8:f2:19:01:f7:b8:5d:d5:11:ff:
                    e5:8b:9b:5b:a3:6e:b6:b6:7f:7b:de:b4:ee:1a:6b:
                    2c:7b:5f:c0:9a:65:e3:1a:58:eb:85:0b:f5:3d:92:
                    15:ee:85:b6:4b:53:45:6f:98:54:1f:2a:bc:f3:5a:
                    02:82:67:11:b7:0d:84:9e:53:1b:8a:bb:a8:aa:33:
                    e8:ef:6b:6f:80:95:55:b9:5f:99:0f:29:6b:03:12:
                    5e:b7:67:2a:db:cb:94:f9:64:71:de:c3:8a:17:a6:
                    8b:7b:44:04:e4:06:35:33:4b:38:64:7e:43:af:a1:
                    13:ae:a5:82:e5:c2:60:43:f6:37:83:10:89:68:42:
                    78:ba:53:f0:76:71:cc:e1:51:25:a5:37:16:86:a1:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:CB:C5:00:FD:AA:54:9B:D1:DB:9C:6E:A1:E7:83:00:9D:17:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8oXLxQD9qlSb0ducbqHngwCdF8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:18:85:d4:48:c4:24:f2:f5:aa:29:35:d0:b2:3a:a5:08:a8:
         b4:fc:2f:56:00:63:9a:28:f8:aa:39:b9:40:b7:6e:6b:95:b6:
         65:00:08:96:7b:38:b2:03:0d:7b:d0:68:c5:f3:f3:fc:15:f8:
         b8:88:14:e6:f9:d1:a1:cb:59:32:32:45:55:e6:8d:e7:25:12:
         c5:36:a8:72:43:68:4e:12:e1:2e:b7:cc:f5:ed:46:43:4a:09:
         46:3c:6e:b6:35:36:5a:12:fe:eb:56:fb:df:b9:d2:a6:7b:89:
         84:cd:22:94:f1:11:d7:40:f1:4e:c4:2b:42:47:53:f1:ec:38:
         61:de:57:44:ac:0e:43:21:9f:46:17:36:15:1f:8e:a0:3d:99:
         07:18:f1:f5:ab:93:e6:17:e9:e7:18:fd:43:3d:0c:ef:ca:c9:
         b9:5e:53:29:27:22:4d:31:17:bc:38:cf:66:cd:de:8a:7d:93:
         42:97:bd:a7:54:b2:ea:77:d2:32:0a:0f:af:29:7a:92:fa:e3:
         d5:3e:6e:a1:a5:57:55:18:86:50:7e:b6:7f:fd:52:dc:84:1f:
         59:5e:fd:a5:2c:52:4e:ca:0d:11:96:dd:03:1c:55:0e:2d:40:
         ee:b9:68:cc:99:a3:27:e4:98:ac:66:33:0a:3f:60:a9:e5:5c:
         a7:d0:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org