Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BUn2JFeni1OWza1ntFlrVteVJ5E.roa
File:                     BUn2JFeni1OWza1ntFlrVteVJ5E.roa (raw, json)
Hash identifier:          CyNk75pHPcFAZq3AvQXXgKngJhSWGVdBckPuLzFHb3A=
Subject key identifier:   05:49:F6:24:57:A7:8B:53:96:CD:AD:67:B4:59:6B:56:D7:95:27:91
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01FD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BUn2JFeni1OWza1ntFlrVteVJ5E.roa
Signing time:             Tue 30 May 2023 16:29:24 +0000
ROA not before:           Tue 30 May 2023 16:29:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0549F62457A78B5396CDAD67B4596B56D7952791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c7:36:87:0b:9f:7f:90:b4:5b:3f:ed:75:d4:
                    86:bf:1a:06:0e:c5:b2:47:c9:1f:12:27:c8:97:ba:
                    84:61:ef:5d:b4:cb:5c:2b:ec:aa:7a:77:4d:da:91:
                    b8:97:08:82:97:19:5d:52:d5:88:16:a0:e7:bb:e1:
                    4a:d3:59:55:25:b1:a2:5b:20:3a:6e:69:c7:ae:fb:
                    fd:06:46:42:61:b8:4b:a0:2f:39:2f:22:b3:94:a2:
                    e4:ab:5e:17:90:d5:42:9f:7e:ea:1b:7d:f0:fc:82:
                    4f:70:75:40:06:ea:91:12:12:c1:87:98:f9:49:69:
                    2f:f1:db:39:ae:10:f5:59:5d:cc:ad:ce:26:b8:49:
                    43:a6:90:8d:1c:62:83:90:11:f1:00:f6:d5:e6:f4:
                    c8:45:f5:ab:8c:de:31:4b:92:79:30:d9:cc:8c:99:
                    d8:e3:29:90:e8:4b:d0:a3:0f:ab:5d:94:4b:27:14:
                    ac:b4:ac:82:3f:3a:e8:e6:37:83:a8:3c:8c:c2:91:
                    19:43:46:0e:46:d3:24:93:da:e8:5a:ab:b5:1d:a4:
                    a6:5a:37:ca:87:50:be:a5:51:64:a4:fc:d3:a7:20:
                    ad:7d:71:f2:bc:7c:e3:67:25:72:91:9e:2a:6c:79:
                    5a:3a:c8:f0:ca:8e:22:90:2d:4e:d2:59:c7:2b:27:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:F6:24:57:A7:8B:53:96:CD:AD:67:B4:59:6B:56:D7:95:27:91
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BUn2JFeni1OWza1ntFlrVteVJ5E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:44:c4:f9:69:9a:32:12:cb:e8:a3:bb:b3:0d:f8:2f:f6:
         a0:1c:b3:a5:d2:8d:9e:d4:b2:33:ad:76:27:74:e3:04:c4:90:
         84:8d:b9:04:8c:d7:e9:cc:b2:09:b4:65:0d:e9:68:89:b7:cf:
         52:5f:3e:68:25:35:1a:0b:21:eb:40:56:0f:3a:bc:20:80:1e:
         56:5c:13:6f:4a:79:b3:c7:cd:e8:9e:f4:5c:d0:32:f1:10:39:
         d3:a5:07:01:cb:eb:4f:a1:9e:09:94:b5:b6:1d:9b:2c:a6:87:
         4f:85:cf:f8:3c:31:ec:cb:07:c8:97:b2:ee:8a:7b:99:1c:7b:
         94:54:95:2a:e3:1b:fc:cb:c1:5c:b8:a7:e8:58:25:2d:70:70:
         e0:02:3d:54:f1:0d:f9:c3:35:8d:dd:db:87:c8:49:06:d5:de:
         7c:58:17:9a:bf:c1:dd:78:78:27:2d:0e:37:a7:2d:dc:9b:62:
         f9:5c:c1:99:67:7f:9d:f6:bb:2c:c2:9e:3f:c2:83:5b:9d:33:
         55:4c:98:8b:ec:2f:90:3d:a4:31:48:5d:fc:1d:0a:d6:c7:c8:
         aa:f5:d3:c5:b9:a1:bc:f8:13:82:a7:bd:bb:bc:3c:9d:e1:23:
         1b:14:3c:e2:3f:26:f9:ea:c6:15:e8:ac:55:20:cf:ff:5a:32:
         41:cc:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org