Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/As6u5s9ZoSfkmxiYwdmBy8bRZ6I.roa
File:                     As6u5s9ZoSfkmxiYwdmBy8bRZ6I.roa (raw, json)
Hash identifier:          TXfoutj3Q+uqL4wrYMWeC+kuwMOwnZrzusN8c4GK8Xk=
Subject key identifier:   02:CE:AE:E6:CF:59:A1:27:E4:9B:18:98:C1:D9:81:CB:C6:D1:67:A2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02EA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/As6u5s9ZoSfkmxiYwdmBy8bRZ6I.roa
Signing time:             Thu 01 Jun 2023 16:04:34 +0000
ROA not before:           Thu 01 Jun 2023 16:04:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=02CEAEE6CF59A127E49B1898C1D981CBC6D167A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:fb:05:22:62:fb:cf:8f:3b:00:1d:08:59:
                    67:89:6b:92:2e:b3:f1:60:8f:44:0a:79:df:e0:bb:
                    7d:f6:19:de:7e:7b:e7:23:31:d8:65:66:96:83:d0:
                    5d:7f:d4:ae:ac:d4:92:49:8a:af:8d:1b:8c:46:27:
                    16:4c:d9:1a:69:ea:54:9c:17:78:22:c2:2a:c0:1a:
                    9e:28:6c:6c:64:9b:df:03:2d:c3:47:0e:2a:b6:f2:
                    b6:64:3d:af:18:4f:aa:91:14:87:97:13:8a:90:d6:
                    51:68:d1:46:b2:61:77:60:97:aa:fb:62:e5:df:c0:
                    35:e5:2f:e5:66:2d:3f:6e:3d:b0:4f:25:8f:60:55:
                    44:da:b6:73:28:7c:6f:a4:24:2a:64:b9:97:69:23:
                    a3:e1:2b:6b:48:0b:42:ea:d1:85:74:ee:9c:5e:91:
                    42:43:64:c0:97:b6:20:dd:ab:1f:db:b0:7e:6d:5f:
                    9d:b1:69:99:49:17:04:fe:b5:92:8b:b7:ff:49:f1:
                    80:b4:54:cf:e8:b1:cd:86:0a:25:d0:84:fa:79:8c:
                    f3:f4:57:2d:92:38:ed:f8:98:c4:60:ed:e0:2f:14:
                    a6:8f:f4:d8:f9:df:c5:4b:f2:2c:c7:b1:5d:4c:cb:
                    61:b3:6a:4e:8a:c5:82:1b:26:0a:04:c0:ed:d5:f5:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CE:AE:E6:CF:59:A1:27:E4:9B:18:98:C1:D9:81:CB:C6:D1:67:A2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/As6u5s9ZoSfkmxiYwdmBy8bRZ6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:89:b8:af:ab:50:7c:37:b1:c5:7b:d3:8b:2e:0d:96:6c:c6:
         59:98:4d:d0:b9:7d:6f:6a:50:8b:5b:6f:19:f8:de:fb:2f:df:
         20:49:a7:01:77:2f:e8:32:06:ab:49:54:0d:e2:da:15:38:b5:
         b0:b6:1d:43:67:ca:29:52:70:14:b8:e5:a6:a7:c3:69:4d:34:
         07:a6:81:5f:0f:0a:31:56:06:73:7b:20:a7:11:0d:ea:2f:6f:
         05:c4:b3:f5:d6:6c:0b:83:65:7e:6f:36:a8:f6:dd:f0:b1:ba:
         e6:d1:95:78:65:a6:09:58:16:9a:fb:2f:f9:a0:25:e7:91:4e:
         bf:ed:a4:bb:4e:9d:bc:df:51:61:db:22:a6:10:ea:98:40:7f:
         2a:5c:e5:14:3c:3d:4c:31:25:39:65:24:d6:3a:4b:f1:b9:ba:
         ed:47:34:ac:6e:c8:e3:18:db:ef:26:d8:77:34:6a:a0:ef:02:
         cd:16:3f:e3:3a:7f:68:f2:33:b6:77:01:0a:25:b5:92:78:ee:
         b0:ab:65:b0:c9:6a:d5:5f:b4:b8:48:7a:56:93:d9:58:48:2c:
         62:09:67:da:09:72:c8:e9:70:74:02:c8:5c:36:01:f1:d7:1d:
         38:fe:96:64:eb:f4:eb:d6:33:03:9d:a8:64:6e:6d:c1:c6:5a:
         c0:c2:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org