Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9zcOk4J34CbECPDnI1BaBWPufN4.roa
File:                     9zcOk4J34CbECPDnI1BaBWPufN4.roa (raw, json)
Hash identifier:          dvVhK/IilF2cxn+AqMSIxj8kOnc1Lq5d9TULspRTA/A=
Subject key identifier:   F7:37:0E:93:82:77:E0:26:C4:08:F0:E7:23:50:5A:05:63:EE:7C:DE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0409
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9zcOk4J34CbECPDnI1BaBWPufN4.roa
Signing time:             Tue 06 Jun 2023 16:05:52 +0000
ROA not before:           Tue 06 Jun 2023 16:05:52 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:52 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F7370E938277E026C408F0E723505A0563EE7CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:70:8c:83:87:0d:57:0c:d7:30:88:d6:bb:
                    9f:95:74:5b:86:e4:5b:4e:fe:a8:06:a2:17:66:92:
                    62:ec:7f:96:d6:b0:f9:03:b4:20:d3:45:50:65:da:
                    ed:8e:8e:ef:5c:1a:93:10:4d:7d:9a:3e:fa:6a:7f:
                    41:ac:f6:dc:63:1d:38:3d:54:90:8a:5c:45:0d:61:
                    24:7b:89:4d:2f:11:55:18:b9:f7:95:ee:be:c0:44:
                    ef:30:c6:98:33:c5:f4:81:fc:5e:3c:23:bb:42:bc:
                    48:b8:2f:e0:3f:57:7b:9f:bf:84:68:ab:ab:4b:46:
                    a7:57:76:b2:6f:62:34:33:5a:d3:f1:12:24:5a:59:
                    f1:cf:a4:b8:bd:1a:25:d4:02:45:72:d7:39:65:83:
                    74:5c:92:4b:ed:ef:07:27:23:43:41:44:41:e3:9b:
                    dd:9f:cc:70:7b:2e:bc:f6:31:b4:63:83:5e:77:3c:
                    df:89:27:7e:8e:5a:d2:6c:16:64:41:dd:77:3e:44:
                    2f:c8:1a:90:78:b7:1d:1f:a0:36:dc:2e:41:de:ff:
                    42:ce:96:70:25:1f:9b:5e:8c:2f:a6:26:dc:41:66:
                    83:46:9b:79:e4:bf:2c:fb:19:61:e4:00:1b:4a:b6:
                    27:31:a7:cb:7a:8f:fb:f6:29:35:a7:5a:46:2a:49:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:37:0E:93:82:77:E0:26:C4:08:F0:E7:23:50:5A:05:63:EE:7C:DE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9zcOk4J34CbECPDnI1BaBWPufN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:07:5f:cb:9e:89:2a:0d:47:11:4a:ac:b0:40:63:52:63:1e:
         f1:22:9d:43:88:38:c7:d5:cc:b1:7b:bd:12:a3:ca:0f:b6:6e:
         f3:50:01:d9:46:5d:a5:7c:03:8b:cc:56:b0:51:5a:a1:7d:15:
         9b:56:ca:fc:9d:cc:56:2e:0a:6d:b5:e2:c2:dd:fb:a4:aa:43:
         b9:9f:e7:9c:2f:64:e7:42:3b:05:e6:df:4d:24:25:1a:5b:b5:
         87:44:5b:54:50:8d:99:35:57:06:4c:d9:56:36:ae:c9:73:fe:
         5f:e8:c4:be:27:43:a9:f0:84:02:3f:29:18:d8:03:a2:32:fb:
         75:ce:32:40:44:df:80:f4:a2:91:9b:a1:28:8a:96:98:58:5d:
         77:68:ec:68:98:c9:16:41:7b:20:5b:cd:5a:33:84:ac:b2:41:
         84:ed:f7:b5:40:59:33:8e:fd:4f:2b:34:f6:af:24:b8:92:1f:
         0b:97:98:1d:3d:ce:42:6f:a8:bf:e4:37:e0:d4:bd:79:ad:7f:
         54:bd:9c:33:c9:5a:95:63:dc:4b:c2:50:4c:35:ca:97:91:70:
         90:79:eb:df:47:4c:26:d1:54:49:af:04:aa:1b:68:67:fb:74:
         06:1e:19:1c:a2:88:f1:3a:af:10:2a:03:13:d4:c7:d5:e5:23:
         01:56:c2:e8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjA1NTJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEY3MzcwRTkzODI3N0Uw
MjZDNDA4RjBFNzIzNTA1QTA1NjNFRTdDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUwXCMg4cNVwzXMIjWu5+VdFuG5FtO/qgGohdmkmLsf5bWsPkD
tCDTRVBl2u2Oju9cGpMQTX2aPvpqf0Gs9txjHTg9VJCKXEUNYSR7iU0vEVUYufeV
7r7ARO8wxpgzxfSB/F48I7tCvEi4L+A/V3ufv4Roq6tLRqdXdrJvYjQzWtPxEiRa
WfHPpLi9GiXUAkVy1zllg3Rckkvt7wcnI0NBREHjm92fzHB7Lrz2MbRjg153PN+J
J36OWtJsFmRB3Xc+RC/IGpB4tx0foDbcLkHe/0LOlnAlH5tejC+mJtxBZoNGm3nk
vyz7GWHkABtKticxp8t6j/v2KTWnWkYqSSZDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9zcOk4J34CbECPDnI1BaBWPufN4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Lzl6Y09rNEozNENiRUNQRG5JMUJhQldQdWZONC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxaGAwDQYJKoZIhvcNAQELBQADggEBAD8HX8ueiSoNRxFKrLBAY1JjHvEi
nUOIOMfVzLF7vRKjyg+2bvNQAdlGXaV8A4vMVrBRWqF9FZtWyvydzFYuCm214sLd
+6SqQ7mf55wvZOdCOwXm300kJRpbtYdEW1RQjZk1VwZM2VY2rslz/l/oxL4nQ6nw
hAI/KRjYA6Iy+3XOMkBE34D0opGboSiKlphYXXdo7GiYyRZBeyBbzVozhKyyQYTt
97VAWTOO/U8rNPavJLiSHwuXmB09zkJvqL/kN+DUvXmtf1S9nDPJWpVj3EvCUEw1
ypeRcJB5699HTCbRVEmvBKobaGf7dAYeGRyiiPE6rxAqAxPUx9XlIwFWwug=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org