Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa
File:                     DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa (raw, json)
Hash identifier:          vjVGAoglabK4zjGoTznajiLgFk1AOCNqD3hI5uRFvnw=
Subject key identifier:   0C:90:98:2D:F0:41:96:F7:C9:DA:80:9B:56:8F:B3:EA:43:95:81:0D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       029D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa
Signing time:             Tue 30 May 2023 16:36:33 +0000
ROA not before:           Tue 30 May 2023 16:36:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0C90982DF04196F7C9DA809B568FB3EA4395810D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:b4:c0:59:79:b8:e8:51:f3:63:39:69:b3:
                    19:ab:9a:74:ff:03:d6:1b:4b:6a:54:84:cf:46:bd:
                    3e:6b:c4:28:fa:8c:2b:df:b4:d0:8b:1a:f2:5d:05:
                    2e:eb:46:c2:45:a5:77:78:aa:54:90:af:50:03:5b:
                    fa:f5:7e:10:58:8b:12:99:b8:d2:73:69:48:73:dd:
                    5e:28:05:ce:c3:e8:57:a4:59:43:11:3a:a0:06:6f:
                    0e:17:5c:cb:6a:dd:c7:34:d3:9d:fc:b6:08:19:79:
                    b9:25:10:d7:8b:84:b5:d7:28:e2:e9:21:22:55:b2:
                    dc:3b:01:94:c5:f3:f3:25:47:1d:bb:4d:c4:28:62:
                    75:ec:89:b6:a1:f0:2b:69:7d:fa:79:34:14:f6:7e:
                    f9:73:ee:19:9b:d9:79:bf:3a:9d:70:31:25:df:f4:
                    60:dc:e1:54:e4:eb:f1:ea:3d:12:61:6d:c5:6f:2d:
                    9b:5c:bf:24:99:60:21:59:04:f9:22:a8:b0:94:cd:
                    8e:9b:4d:f0:ab:71:90:23:ae:f9:c1:e7:df:71:55:
                    c2:33:e9:a1:83:a2:ca:e2:56:5d:15:d8:db:6d:28:
                    34:bc:cd:1f:8b:87:f5:87:dc:b9:df:6f:2e:a3:c8:
                    d0:2c:1f:01:41:4c:ce:c6:3e:41:9e:c3:d6:d2:65:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:90:98:2D:F0:41:96:F7:C9:DA:80:9B:56:8F:B3:EA:43:95:81:0D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:57:e7:da:69:4e:92:76:c4:77:a6:1b:3d:54:77:74:9d:
         a0:df:ce:d6:34:8f:81:c6:46:46:eb:1d:79:af:9c:29:3f:94:
         60:a9:8a:2e:07:4a:7b:ee:a3:d7:99:96:44:fa:bd:b3:66:6a:
         b0:76:d8:fb:02:b7:ce:22:85:c9:aa:e4:2a:e9:46:a4:20:35:
         34:f2:d1:e1:8f:98:a2:c7:22:68:9d:cf:f6:bd:b5:09:34:55:
         4c:f8:f3:ba:d5:15:8a:7d:1b:18:64:ca:6a:4d:96:68:a6:a2:
         f5:7f:b6:76:bd:4f:a3:fd:e1:61:f5:c7:04:03:69:6e:df:55:
         eb:36:78:17:0c:a7:65:9d:26:a8:61:6c:25:a7:43:3f:4a:2e:
         27:83:a4:40:d0:79:62:85:fc:7d:1c:98:45:be:77:ac:23:2b:
         11:b1:77:92:aa:20:cb:73:23:d3:51:36:a8:3a:f2:d8:4d:89:
         a2:bc:a4:cb:ec:34:98:3b:b9:6d:32:7d:62:13:6d:f6:82:02:
         dc:22:ec:09:08:39:76:0d:1b:be:d8:93:4a:7a:df:9a:43:fc:
         f9:83:3a:fc:e0:75:8a:92:e7:fd:7b:d2:9b:a7:3c:3e:76:61:
         4b:eb:dd:40:11:12:1b:0f:34:f8:8a:95:ec:60:51:1e:cc:ea:
         13:fa:fa:75
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjM2MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDBDOTA5ODJERjA0MTk2
RjdDOURBODA5QjU2OEZCM0VBNDM5NTgxMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQfLTAWXm46FHzYzlpsxmrmnT/A9YbS2pUhM9GvT5rxCj6jCvf
tNCLGvJdBS7rRsJFpXd4qlSQr1ADW/r1fhBYixKZuNJzaUhz3V4oBc7D6FekWUMR
OqAGbw4XXMtq3cc00538tggZebklENeLhLXXKOLpISJVstw7AZTF8/MlRx27TcQo
YnXsibah8Ctpffp5NBT2fvlz7hmb2Xm/Op1wMSXf9GDc4VTk6/HqPRJhbcVvLZtc
vySZYCFZBPkiqLCUzY6bTfCrcZAjrvnB599xVcIz6aGDosriVl0V2NttKDS8zR+L
h/WH3Lnfby6jyNAsHwFBTM7GPkGew9bSZcJ3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDJCYLfBBlvfJ2oCbVo+z6kOVgQ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0RKQ1lMZkJCbHZmSjJvQ2JWby16NmtPVmdRMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUBTKAwDQYJKoZIhvcNAQELBQADggEBAJW7V+faaU6SdsR3phs9VHd0naDf
ztY0j4HGRkbrHXmvnCk/lGCpii4HSnvuo9eZlkT6vbNmarB22PsCt84ihcmq5Crp
RqQgNTTy0eGPmKLHImidz/a9tQk0VUz487rVFYp9GxhkympNlmimovV/tna9T6P9
4WH1xwQDaW7fVes2eBcMp2WdJqhhbCWnQz9KLieDpEDQeWKF/H0cmEW+d6wjKxGx
d5KqIMtzI9NRNqg68thNiaK8pMvsNJg7uW0yfWITbfaCAtwi7AkIOXYNG77Yk0p6
35pD/PmDOvzgdYqS5/170punPD52YUvr3UAREhsPNPiKlexgUR7M6hP6+nU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org