Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMjKQ258eNWFWNgCpeTPUjEcru0.roa
File:                     DMjKQ258eNWFWNgCpeTPUjEcru0.roa (raw, json)
Hash identifier:          uqZByHxQgpJTgJdedOz1s4Irirf9XaLC8LNIWUW6v7k=
Subject key identifier:   0C:C8:CA:43:6E:7C:78:D5:85:58:D8:02:A5:E4:CF:52:31:1C:AE:ED
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       022B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMjKQ258eNWFWNgCpeTPUjEcru0.roa
Signing time:             Tue 30 May 2023 16:30:34 +0000
ROA not before:           Tue 30 May 2023 16:30:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0CC8CA436E7C78D58558D802A5E4CF52311CAEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:f8:52:fd:19:b7:70:ed:c5:81:ce:76:89:
                    06:53:2c:8d:a0:ef:4a:b6:0b:d1:5e:ad:d4:3c:71:
                    d1:38:21:60:49:43:8c:88:24:47:93:42:21:62:72:
                    12:4a:2f:fd:76:c6:1f:1b:12:7c:d6:b5:17:91:33:
                    a6:e4:c9:71:fa:4c:9c:fc:b3:31:c9:c3:7f:89:6a:
                    2e:4c:d6:0d:62:c5:69:88:eb:b9:c2:d2:2e:2d:b7:
                    10:12:6c:8e:12:2b:d5:9d:1b:3c:fc:61:b4:d1:19:
                    e6:25:93:ab:a3:70:17:f3:73:53:c1:09:67:04:bd:
                    76:5d:86:1b:2b:7a:0e:20:e1:25:71:ee:aa:bd:6b:
                    ef:1c:06:9f:ef:a6:03:c7:f8:c1:5d:a6:21:c2:0c:
                    be:85:1d:49:d7:7d:d2:58:50:b5:9e:a3:08:97:94:
                    24:11:7d:e5:6f:33:bf:cd:6a:97:8f:21:ae:32:41:
                    43:a2:58:73:4e:26:89:93:08:77:fe:43:f9:7e:40:
                    5d:c0:fc:7c:0c:54:75:5e:a8:c4:7a:23:74:f0:46:
                    c3:9d:ef:3b:26:79:d6:63:55:1e:b2:0b:00:34:ae:
                    c7:a5:0a:05:8f:a1:0f:0d:d3:a1:7e:bf:3b:a1:21:
                    4c:4c:3b:95:01:2e:34:65:bf:22:87:d7:8b:14:4e:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C8:CA:43:6E:7C:78:D5:85:58:D8:02:A5:E4:CF:52:31:1C:AE:ED
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMjKQ258eNWFWNgCpeTPUjEcru0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:af:4a:ec:9c:77:d5:ac:0f:a7:77:aa:bc:9f:46:ad:38:20:
         9b:a8:8f:73:95:04:ef:a5:79:55:28:a0:cd:d8:9a:6c:2a:3d:
         a6:01:ae:8e:c3:a9:8f:af:a3:e8:67:2d:65:12:cb:05:73:cb:
         d1:e9:cc:ec:d6:dd:0e:98:54:ee:6d:c7:9f:2f:77:13:50:59:
         ad:bb:ce:bb:77:69:58:44:61:1a:de:4b:58:59:ca:cb:07:fa:
         e1:6f:c5:b6:67:70:b3:cc:12:2e:46:2e:51:f0:d6:49:5a:48:
         5c:06:b3:cd:c1:f2:a3:2c:b4:43:e9:ee:3d:4c:c0:76:d1:85:
         2f:71:37:8e:20:2b:3d:c3:bc:5c:ed:b6:74:54:0d:ca:28:b2:
         39:48:21:02:49:b5:b3:57:ff:3b:6e:da:5c:da:64:a8:ea:5e:
         f6:3b:09:3f:57:79:36:41:d6:ff:c7:bf:84:88:1d:dc:c5:32:
         75:52:fc:74:e1:eb:6e:b9:e2:bd:9a:01:c4:0c:d5:86:2a:36:
         38:fb:e7:f5:e2:03:e3:44:57:a5:8a:0b:b4:03:f8:d6:3a:c0:
         22:7e:eb:8a:cd:40:40:a5:aa:0c:e9:48:16:06:1f:79:41:77:
         8f:41:95:51:f3:60:ea:49:35:59:a9:24:42:42:ed:95:93:01:
         76:06:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org