Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CWSAspourXriHn8xnVJB-xZoWnw.roa
File:                     CWSAspourXriHn8xnVJB-xZoWnw.roa (raw, json)
Hash identifier:          +Alc9jq6BcPBwOgHgMi9fCaHS8zbvZ9G2odukH99zKU=
Subject key identifier:   09:64:80:B2:9A:2E:AD:7A:E2:1E:7F:31:9D:52:41:FB:16:68:5A:7C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       019D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CWSAspourXriHn8xnVJB-xZoWnw.roa
Signing time:             Wed 24 May 2023 16:35:15 +0000
ROA not before:           Wed 24 May 2023 16:35:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.16.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:35:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=096480B29A2EAD7AE21E7F319D5241FB16685A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:61:5f:54:90:e9:cb:65:e7:33:a3:a4:c3:97:
                    9b:3f:17:29:bf:a5:ac:37:2a:cd:19:94:72:ae:aa:
                    b5:96:99:13:a3:e8:c7:2c:06:4f:b8:87:5d:bf:10:
                    37:de:71:76:79:22:cb:44:b7:e9:e2:77:3d:d7:06:
                    0d:4c:96:92:ce:9a:e9:3e:c3:52:66:cb:58:a0:3b:
                    64:fb:b7:be:03:b5:aa:fe:11:1f:36:0f:90:72:31:
                    39:7d:26:0e:69:38:db:57:65:1e:20:36:c8:1a:1f:
                    2b:2c:97:d5:1d:41:ef:2e:80:8a:03:b7:08:7e:c6:
                    9f:d3:6d:72:b2:5e:36:01:96:c9:11:8f:e6:5d:78:
                    20:e1:0e:79:b2:11:04:60:fb:8c:ec:0e:2a:20:fc:
                    e0:57:40:88:72:21:c4:10:59:9a:a1:4b:56:26:18:
                    74:63:e5:1b:f8:90:c0:1f:58:59:c0:1b:19:36:af:
                    72:a2:51:7a:c4:7f:dd:49:25:5f:c7:d0:b0:51:76:
                    8f:be:16:75:4c:7a:be:72:b7:0e:82:e0:73:f4:82:
                    60:96:e0:49:b9:dc:ed:35:7e:4b:0c:3d:8e:ea:fd:
                    94:85:62:e6:19:05:35:02:7e:42:94:75:6a:eb:11:
                    d3:a6:ae:99:88:28:09:95:10:5f:9d:4d:d2:2c:79:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:64:80:B2:9A:2E:AD:7A:E2:1E:7F:31:9D:52:41:FB:16:68:5A:7C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CWSAspourXriHn8xnVJB-xZoWnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:46:c5:f2:46:0f:17:ce:a5:c2:96:82:0b:fe:8e:6e:8b:83:
         1a:30:f8:90:07:0c:c9:11:18:64:54:c2:27:01:9e:26:a2:0f:
         8b:ad:31:fc:66:22:62:4c:cf:24:ea:00:bb:0f:68:55:be:ab:
         00:d3:f2:34:fb:71:4d:2c:81:2d:93:b3:06:90:ee:31:14:5b:
         6a:16:6a:8c:0e:e6:c9:81:8b:80:62:4f:f9:69:99:e4:2e:46:
         70:e9:de:9b:be:f0:d4:3e:fa:ae:d3:3c:d9:3d:ec:7f:0e:b6:
         df:22:ae:8a:ff:56:77:0a:4c:8b:4e:0f:dc:61:32:ff:46:10:
         3d:43:b3:27:7f:af:88:84:e3:35:40:19:a9:ca:4a:5f:75:64:
         1c:ed:c5:bd:80:81:8f:2d:50:87:dd:96:79:77:02:ae:67:5f:
         da:e1:ad:cb:cf:7a:a1:a3:e2:24:46:b8:1b:d8:a8:64:c5:d9:
         30:fe:bb:14:f2:a2:6f:9f:b0:76:94:e3:c7:20:fc:3c:6d:50:
         8a:8f:cc:cb:ba:97:64:e8:84:36:30:08:a5:b9:bc:ee:6b:c2:
         39:04:21:4a:2d:a4:e9:dd:98:8b:b2:5e:4b:90:89:70:2f:52:
         53:57:f4:13:91:ba:d4:99:91:74:89:f8:ff:e4:ab:b6:0c:43:
         a2:56:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org