Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXVRV9DDiO6wFTYDiH1KuTsdshw.roa
File:                     AXVRV9DDiO6wFTYDiH1KuTsdshw.roa (raw, json)
Hash identifier:          Mg8RoKHJ0joNX+ZN0Njj1HdRLovZge0O17YwR+rzlrc=
Subject key identifier:   01:75:51:57:D0:C3:88:EE:B0:15:36:03:88:7D:4A:B9:3B:1D:B2:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXVRV9DDiO6wFTYDiH1KuTsdshw.roa
Signing time:             Tue 30 May 2023 16:29:22 +0000
ROA not before:           Tue 30 May 2023 16:29:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.56.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=01755157D0C388EEB0153603887D4AB93B1DB21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:43:0f:f2:ca:9e:90:8c:07:f0:d4:9b:2b:
                    41:5e:b2:07:bd:b7:25:04:d3:ae:08:00:d8:e6:2f:
                    b5:74:7e:44:97:ab:36:70:ab:15:51:c6:5f:f6:2a:
                    c7:ef:17:6c:59:04:70:59:12:20:01:de:f7:0d:9a:
                    76:ce:ca:95:8f:4d:da:15:92:e1:b7:cc:18:af:a7:
                    c1:b5:57:d6:35:50:fb:42:74:e1:ac:db:6d:46:c5:
                    d5:6c:72:18:31:44:9c:dd:57:00:07:5e:1c:5a:ab:
                    5e:48:71:b4:56:23:9f:dc:92:78:9f:d4:a7:ae:38:
                    a3:b2:e4:5b:99:dd:f9:02:95:f7:86:bf:bc:43:87:
                    65:20:17:5a:34:ea:82:d9:ce:1d:dc:09:f3:3b:00:
                    9a:5d:f7:94:53:8d:10:fb:e7:19:c4:87:0a:af:6a:
                    3f:57:8b:b1:01:5b:03:12:0e:98:06:0d:44:a4:2b:
                    89:b1:e5:06:87:b1:3c:35:90:a3:24:18:a2:d1:d6:
                    42:21:7f:9d:41:32:f4:a0:fe:11:97:1b:d5:72:f0:
                    85:9f:10:b9:44:2b:2e:14:70:0d:e7:4f:31:bd:b2:
                    14:b3:d9:f0:f9:8d:ec:ca:d5:44:67:0b:1a:ab:74:
                    2e:6c:b0:73:c0:55:c6:92:20:f3:d9:48:dd:e9:bc:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:51:57:D0:C3:88:EE:B0:15:36:03:88:7D:4A:B9:3B:1D:B2:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXVRV9DDiO6wFTYDiH1KuTsdshw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:c6:53:fc:68:8b:8f:f4:9a:99:e9:06:34:11:6c:49:41:f6:
         97:24:27:c4:e6:c2:31:93:6c:75:7b:02:44:19:84:ee:dd:34:
         a2:ea:5e:c3:98:f5:37:84:fe:3e:8c:aa:3a:69:b7:ce:75:96:
         c2:3a:d9:2b:95:47:e8:61:8d:e7:67:43:87:b5:fa:cf:64:05:
         b7:3a:b7:58:f5:33:a7:9f:e3:8d:c9:6b:0e:f3:18:9c:13:c3:
         16:1e:ff:14:81:c0:98:b3:42:2d:05:33:f7:42:94:c1:38:c7:
         8c:d2:4d:84:62:58:69:91:68:a2:d6:3e:c8:56:72:92:b2:67:
         f1:f3:fc:93:45:43:74:f2:38:bc:2f:f7:99:24:52:ef:2e:30:
         43:70:3d:a3:c4:c2:f3:9e:d2:15:84:c4:99:f3:1e:16:52:ca:
         7a:07:b7:50:f8:84:47:35:38:28:33:33:f7:61:3a:45:86:a4:
         99:8a:3c:5d:af:c3:69:84:83:f1:df:de:d0:dd:2d:fd:68:89:
         13:81:bf:ad:5d:5d:ff:72:26:2d:b5:d2:2c:53:d4:1d:00:f4:
         4c:3b:27:72:72:b4:49:07:da:28:3b:62:f8:0b:4f:79:81:47:
         46:13:60:16:b9:a4:ec:4c:7e:81:91:85:04:4b:eb:e3:2b:39:
         cb:19:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org