Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/96oCfHQNqAFRnFF5Cxe44d-A6Wc.roa
File:                     96oCfHQNqAFRnFF5Cxe44d-A6Wc.roa (raw, json)
Hash identifier:          YPQuLt5w7mB92RyXGjcDO5pv5ADXvU+c+EKxw8hIkMw=
Subject key identifier:   F7:AA:02:7C:74:0D:A8:01:51:9C:51:79:0B:17:B8:E1:DF:80:E9:67
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       042F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/96oCfHQNqAFRnFF5Cxe44d-A6Wc.roa
Signing time:             Tue 06 Jun 2023 16:09:10 +0000
ROA not before:           Tue 06 Jun 2023 16:09:10 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.22.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:10 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F7AA027C740DA801519C51790B17B8E1DF80E967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:68:11:5f:60:3e:47:c4:4c:f3:56:22:e8:
                    16:7b:74:bf:a7:89:9b:75:62:a7:fd:66:a2:55:14:
                    59:24:11:91:0e:a8:f0:3b:c7:de:d3:13:89:94:21:
                    38:86:06:ea:c3:21:51:59:52:3b:37:45:ee:23:2a:
                    34:e8:d2:d1:86:82:b5:7e:ce:ac:a1:25:d5:6a:25:
                    ee:33:20:89:41:e8:31:c6:82:d0:0d:12:b1:a3:38:
                    42:81:0b:a6:a0:b9:e1:19:85:af:75:8d:1d:d1:9c:
                    15:19:c5:da:87:fb:d5:ad:74:fb:1d:19:6d:5e:0e:
                    85:a6:ea:e3:90:79:b6:eb:57:77:39:dd:44:33:12:
                    a1:a6:34:a4:49:2e:61:6e:ce:d4:0e:1a:8b:2f:e4:
                    44:8e:3a:1a:55:d7:9c:57:a8:d0:44:17:3c:54:47:
                    b5:ad:fa:5a:2b:0e:44:52:79:22:5b:1f:00:08:93:
                    38:0b:77:e9:f5:19:41:7d:50:0e:c7:59:98:f1:45:
                    d4:67:4b:bf:98:e8:13:30:1e:d4:d6:79:4c:c3:83:
                    e4:7c:df:dc:1d:e0:2d:02:a1:19:ae:90:e7:8f:a1:
                    8e:ae:32:af:47:42:e9:b1:9d:6e:97:cb:df:f3:f2:
                    0b:ef:7e:df:dc:18:71:ed:9c:ae:14:b5:38:9a:52:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:02:7C:74:0D:A8:01:51:9C:51:79:0B:17:B8:E1:DF:80:E9:67
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/96oCfHQNqAFRnFF5Cxe44d-A6Wc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:8e:fd:15:fd:e0:64:da:68:10:d5:28:46:e2:09:cc:08:b4:
         76:93:3e:08:8a:9b:a6:7b:9c:b1:62:7f:63:27:ce:c7:fe:e8:
         18:b2:71:7e:c1:4c:05:14:4b:36:28:5a:51:c4:53:19:0d:ea:
         8c:f7:b0:22:cb:3e:ed:e9:d5:d1:d5:d8:49:94:4f:31:b2:2b:
         da:08:e8:05:d9:e8:d6:21:03:af:97:62:69:23:e3:20:49:60:
         5d:b0:ca:b4:73:3f:10:e8:61:4c:27:dd:c6:a6:3b:bd:81:70:
         d1:5f:2c:d0:df:ee:90:b9:15:3d:d1:26:c3:d4:82:cf:fe:d0:
         e8:28:cf:e8:eb:bc:c2:fa:18:33:ff:8d:f5:0a:3a:87:ce:51:
         9d:d3:d6:29:c2:8d:09:b5:4c:fb:96:fa:4f:19:d0:ad:4a:bc:
         29:29:ef:07:ea:89:ea:ba:5c:19:f7:77:c3:42:9f:04:5c:e0:
         0c:e7:de:3d:4e:35:57:2e:0a:ce:59:4a:f4:7b:78:7e:d7:bd:
         39:d8:89:e9:4d:9c:f1:45:2c:47:02:67:78:0f:d5:37:f2:f3:
         b6:16:06:13:a3:2a:6b:c1:5a:b6:ce:61:0a:0b:ba:56:e9:06:
         c3:26:e3:1d:e2:24:b7:0a:29:b0:a9:c8:6e:c9:8f:6a:ae:b1:
         51:3a:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org