Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9zgDACFm77VDQOAKW4yGscUv-j8.roa
File:                     9zgDACFm77VDQOAKW4yGscUv-j8.roa (raw, json)
Hash identifier:          IAdgjQhYxHje1dDmfEhU9SwgsgISdBzUaQuMo9tyjzo=
Subject key identifier:   F7:38:03:00:21:66:EF:B5:43:40:E0:0A:5B:8C:86:B1:C5:2F:FA:3F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9zgDACFm77VDQOAKW4yGscUv-j8.roa
Signing time:             Tue 30 May 2023 16:29:23 +0000
ROA not before:           Tue 30 May 2023 16:29:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F73803002166EFB54340E00A5B8C86B1C52FFA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:b7:24:6f:a6:14:22:03:50:73:05:ef:b7:
                    77:c0:93:85:3a:84:0e:50:93:d5:ad:12:90:50:83:
                    9e:87:9a:a2:07:ae:14:d6:dc:66:bd:bb:7b:2b:1f:
                    57:a0:fc:1a:79:90:cc:23:89:4a:6d:28:c1:98:27:
                    01:32:30:f0:08:d5:08:39:a0:df:e6:2e:ed:b9:ff:
                    4b:29:5d:25:ad:79:0e:c2:82:33:b1:ba:c5:be:9b:
                    8e:06:1f:8b:cb:6d:4e:22:75:32:42:78:5f:3e:c2:
                    48:fb:36:c0:a0:3a:ab:15:2e:2a:29:76:79:02:9a:
                    9d:53:b3:83:98:ea:d3:4c:de:70:d5:85:7c:ef:f6:
                    cd:a0:94:4d:d8:35:9e:09:44:99:63:93:de:db:ec:
                    37:cc:39:99:80:6f:a7:4c:3e:f5:bb:08:60:ad:95:
                    9a:4c:59:69:21:03:b2:09:14:72:3a:15:77:37:6a:
                    36:bc:af:52:a8:f3:10:da:bb:7f:66:5e:4e:51:aa:
                    7e:5e:79:f9:70:8b:39:dc:e9:4e:15:01:3a:6a:28:
                    b6:fa:4b:80:64:00:9b:95:ed:70:9c:f0:dd:4f:0a:
                    dc:cb:92:17:24:ea:4c:9a:15:67:8f:d5:e4:98:a8:
                    55:6e:d8:dc:c8:cc:c6:52:94:e4:b4:87:90:50:fc:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:03:00:21:66:EF:B5:43:40:E0:0A:5B:8C:86:B1:C5:2F:FA:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9zgDACFm77VDQOAKW4yGscUv-j8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:58:be:67:b0:50:23:7d:92:a9:09:93:99:d2:f5:ea:88:
         d1:86:a0:46:5d:6e:e8:63:dc:99:35:dd:4a:80:23:ce:1d:18:
         85:56:49:01:e3:0f:6e:76:bc:41:99:a5:8e:c9:18:7a:86:90:
         db:04:67:fe:3f:f7:81:ac:37:a1:9c:c2:ac:4b:20:72:56:c8:
         2e:59:b7:38:4b:72:a2:1f:ea:1f:6f:a8:c0:0e:59:a2:db:23:
         a7:35:fd:8d:5b:df:dc:1a:88:22:87:8c:3b:fd:1f:0d:d1:8d:
         2f:8b:28:ed:4e:8e:c1:dd:bb:28:73:80:63:d0:d8:aa:2a:ae:
         63:73:3d:83:5a:a8:91:8a:1b:2f:cd:78:49:d6:4a:f5:4b:9b:
         be:dd:63:da:c6:88:63:03:37:7b:51:5e:07:12:6d:1a:2d:78:
         7d:bd:64:ec:0e:02:5c:9f:b8:cc:99:8f:f4:39:91:74:c0:52:
         88:a3:1e:17:df:de:29:78:36:9b:ca:11:5d:7a:dd:e1:2c:e2:
         b7:bf:69:21:9a:34:95:8f:67:e1:9c:7f:99:65:01:71:0d:24:
         ee:b6:35:ef:e9:e1:ee:45:ad:c7:5e:36:87:a9:ab:d2:e3:b0:
         2a:4c:e7:f7:c2:10:41:69:e0:be:9e:98:44:0e:2f:62:ff:53:
         51:09:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org