Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Any6Vfu1pcn9PU7tgfaYppNXVI8.roa
File:                     Any6Vfu1pcn9PU7tgfaYppNXVI8.roa (raw, json)
Hash identifier:          G4EFYhL4Vw6jQXF3yh9KxE0du4GIQ6PMbCP+9KfHRgY=
Subject key identifier:   02:7C:BA:55:FB:B5:A5:C9:FD:3D:4E:ED:81:F6:98:A6:93:57:54:8F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       78
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Any6Vfu1pcn9PU7tgfaYppNXVI8.roa
Signing time:             Mon 27 Mar 2023 16:11:59 +0000
ROA not before:           Mon 27 Mar 2023 16:11:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.0.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:11:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=027CBA55FBB5A5C9FD3D4EED81F698A69357548F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:04:c9:aa:9f:fe:87:42:65:27:91:f3:40:
                    64:9c:a7:74:b9:80:bf:9a:87:44:9a:24:ab:2b:5e:
                    1b:7f:b4:be:cd:64:d2:0f:fc:5c:0a:6d:02:1c:cc:
                    62:b2:2f:f4:3e:26:bd:2b:e7:c9:e9:71:5e:90:94:
                    92:8c:a5:57:34:6a:11:77:cd:0e:0f:b8:f5:ee:e6:
                    f4:fe:18:40:ef:80:a8:69:25:32:3d:99:e5:35:d3:
                    d7:73:10:05:bb:4a:15:93:e4:89:5f:04:fc:8c:77:
                    8e:19:cd:40:06:0e:35:88:f2:e7:5c:a8:4b:f9:36:
                    63:1f:cd:52:2c:8c:e9:56:77:f5:7d:ed:0d:36:0f:
                    4f:18:e5:11:89:2c:7e:5d:42:95:e8:15:75:c4:b9:
                    e7:50:22:2a:6e:4c:b4:09:ce:01:44:f7:3e:b0:b5:
                    bf:e8:c1:e6:a4:59:57:a7:07:f9:97:fc:93:ee:7c:
                    5a:18:c5:3a:21:0b:c2:ce:dc:73:d8:0f:7a:c8:4b:
                    5b:df:bf:a5:35:6b:82:13:5e:f8:3f:68:e3:57:9c:
                    58:16:65:3a:bd:5e:b4:e8:86:bb:63:0f:be:65:0d:
                    93:db:48:93:e7:d6:ef:69:41:fb:c2:10:d8:6c:f3:
                    e8:2d:3f:7a:93:07:d9:d3:0a:94:d7:81:67:c2:17:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:BA:55:FB:B5:A5:C9:FD:3D:4E:ED:81:F6:98:A6:93:57:54:8F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Any6Vfu1pcn9PU7tgfaYppNXVI8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:cb:75:a4:99:50:c6:69:19:1c:fc:69:d2:16:6f:3c:9a:80:
         1f:fe:35:8e:2e:1c:ec:e8:7b:76:d1:ed:f4:a5:6d:dd:4e:80:
         1c:96:47:86:e5:c5:e4:23:ed:9a:f6:f7:a4:5f:60:32:e9:a8:
         2d:94:0d:b7:97:f3:da:d5:8c:a0:47:10:35:91:2b:fd:74:03:
         ac:57:c2:21:24:3d:d8:52:d5:f9:b6:a5:61:a5:60:53:06:cc:
         7c:ba:81:46:27:23:e1:47:61:80:e2:14:74:14:66:a8:33:95:
         4d:09:43:a5:56:3d:ac:42:69:ba:2c:c5:bc:e2:22:56:b5:2f:
         11:86:2c:67:21:92:ee:bc:fa:0e:bd:2e:25:8b:49:85:08:96:
         e2:1d:87:3a:fa:b3:54:db:90:32:00:cb:f5:80:f0:af:a4:af:
         56:59:94:d3:85:4f:77:f3:1b:53:79:35:09:83:3e:1b:fb:38:
         a5:6e:d5:32:7b:f1:e5:76:e9:69:95:c2:92:7b:4c:37:11:6a:
         77:aa:61:4f:92:88:36:0d:e0:6c:cc:9f:3b:d2:f6:8b:b5:b6:
         c1:50:35:3c:4c:93:24:28:ee:d7:5f:20:67:59:7e:80:4b:76:
         ba:a5:1a:6d:8c:da:4c:13:06:3c:81:0d:00:10:9e:9a:f6:35:
         21:66:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org