Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa
File:                     AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa (raw, json)
Hash identifier:          0U3P9TqwYSOwscYVWAMAw42PP3v2f3ek+47SMJj2lCM=
Subject key identifier:   01:8E:83:FB:A9:E6:39:CB:B8:18:0F:70:12:04:D0:1E:86:50:AE:44
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa
Signing time:             Tue 06 Jun 2023 16:03:41 +0000
ROA not before:           Tue 06 Jun 2023 16:03:41 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:41 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=018E83FBA9E639CBB8180F701204D01E8650AE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:5f:5a:58:96:04:6f:7c:7c:74:19:fd:60:
                    b0:8c:26:b2:e8:98:f7:70:47:d4:6c:e3:7e:09:3a:
                    d0:05:33:bf:27:c5:05:49:b5:4d:e0:35:61:a5:4e:
                    8c:43:0d:c2:0c:5a:9d:9f:fc:54:17:a8:ef:7c:3d:
                    88:f6:19:85:bd:55:93:a6:b0:94:74:d5:0c:0a:03:
                    20:bd:a2:a5:fd:ef:49:d2:4c:41:3b:e3:89:97:5c:
                    4a:25:0c:ec:04:f5:b8:ca:a6:a5:c2:a5:a3:11:b5:
                    5e:00:ee:65:35:5b:03:fb:bf:a0:12:ae:dd:82:99:
                    c0:98:07:56:2c:c8:e2:5a:4e:75:90:b4:58:4d:c3:
                    9d:ae:65:42:37:cf:ad:68:c0:63:4b:10:84:d3:1b:
                    d2:03:c2:4c:bd:c0:a5:ab:26:8c:e0:b9:bc:b8:bd:
                    cc:80:47:e9:ab:26:6e:9c:22:45:5d:bd:b9:73:00:
                    a6:b3:da:fc:49:38:59:20:c9:cd:86:94:99:f2:52:
                    18:af:69:24:b9:ec:d5:e2:d3:ea:1d:5b:e9:9a:7f:
                    3f:e5:28:68:eb:f3:59:8d:8e:c2:8e:30:1d:45:c9:
                    36:38:78:56:ca:17:83:b3:7b:4e:c7:67:56:35:ed:
                    98:34:80:e8:30:17:e0:a7:90:3e:53:41:47:19:b8:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:83:FB:A9:E6:39:CB:B8:18:0F:70:12:04:D0:1E:86:50:AE:44
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY6D-6nmOcu4GA9wEgTQHoZQrkQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:95:ac:95:e4:c7:ad:fc:fc:31:9d:3c:28:6e:de:01:5a:
         43:06:8f:f7:db:b0:a5:03:a8:37:0a:7b:c9:03:15:b3:73:af:
         22:46:47:4c:4b:7b:ef:85:ad:d8:e2:8e:4a:34:43:e3:27:44:
         06:72:9c:dd:7c:c9:72:74:9a:0a:75:d0:bc:92:dd:51:b3:65:
         46:cd:23:ff:da:99:42:b2:d0:ca:aa:12:7d:70:59:2f:1b:02:
         c4:7f:2e:de:ff:57:e9:7b:c2:31:2e:38:e1:7a:e0:01:5f:f8:
         f0:a0:b2:5f:f8:9a:55:e9:63:2c:25:d1:e6:14:5a:e3:a7:eb:
         0d:b8:81:54:76:4f:26:0e:2b:8e:dd:55:4a:62:82:39:11:97:
         fd:b1:44:90:ac:e3:06:39:f2:17:9a:d7:d2:18:11:b3:8a:0f:
         b8:ae:15:ea:9d:c7:5b:c6:28:d5:9d:eb:c9:97:26:db:e3:51:
         93:3d:14:6c:0c:c6:a8:e6:ab:6b:0d:f6:96:cf:df:f2:cd:c3:
         bc:40:d2:f4:2d:c8:ca:94:fc:db:dc:8c:d0:22:b4:40:88:93:
         1d:fa:3b:b8:f1:e5:88:1d:1f:f5:79:e3:74:96:cc:9a:33:9e:
         c0:73:ab:4b:cd:e5:be:4d:a3:16:ec:4e:61:bb:58:cc:08:9f:
         88:20:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org