Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EygCNy3LXlsEktEww6BtsTA2o7Y.roa
File:                     EygCNy3LXlsEktEww6BtsTA2o7Y.roa (raw, json)
Hash identifier:          No2tXILiBQ+HppmS94qTsPYMg0dyiXd1cPBLi5NCIXI=
Subject key identifier:   13:28:02:37:2D:CB:5E:5B:04:92:D1:30:C3:A0:6D:B1:30:36:A3:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02B3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EygCNy3LXlsEktEww6BtsTA2o7Y.roa
Signing time:             Tue 30 May 2023 17:17:30 +0000
ROA not before:           Tue 30 May 2023 17:17:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.96.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=132802372DCB5E5B0492D130C3A06DB13036A3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:40:06:86:ca:c6:9a:c7:7a:fd:11:72:da:
                    53:ef:5e:d7:25:4e:64:33:03:8e:ba:65:c8:a8:61:
                    18:6f:ad:4a:55:b0:7d:74:88:1b:25:d7:1b:28:cd:
                    49:64:44:f0:4b:fe:17:b0:10:ed:44:78:02:d6:5d:
                    9a:5f:d2:c9:2d:d7:15:b5:93:dc:31:ce:1a:ff:7f:
                    97:83:87:c0:64:6d:9b:82:7b:57:1c:2e:13:7f:2e:
                    18:7a:8b:d1:96:20:7d:fa:f2:a5:d4:4a:ad:5c:17:
                    65:dc:42:4f:5b:b2:0d:ae:38:65:43:95:58:c9:be:
                    1c:9d:e7:ab:7c:6c:d5:7a:c1:b8:ee:56:ba:43:b2:
                    b7:59:94:8e:b2:35:d2:33:15:09:6c:86:14:b4:da:
                    9b:e9:81:e7:dd:ce:d9:23:f4:16:5c:64:21:ea:bc:
                    4d:4b:80:5c:f9:b7:45:31:d6:32:20:fa:20:54:ac:
                    cf:5a:f6:ad:38:e5:fb:50:d8:d6:54:8e:6f:f1:24:
                    c1:00:4e:16:d1:c1:92:d0:43:d9:e8:94:6b:be:38:
                    a2:7c:fb:d1:e9:23:ba:45:4f:41:d2:b9:53:33:a5:
                    05:34:34:c7:e2:8e:7c:8b:91:04:f5:39:45:f6:37:
                    f0:ea:1b:21:85:27:6d:3a:91:ef:b7:ea:c8:c7:f6:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:02:37:2D:CB:5E:5B:04:92:D1:30:C3:A0:6D:B1:30:36:A3:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EygCNy3LXlsEktEww6BtsTA2o7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:e4:be:17:d6:9b:67:2f:08:7f:33:af:34:69:b2:a8:21:bf:
         b4:06:69:ef:a9:d5:49:33:c3:e7:5b:ec:02:6a:07:b7:22:1e:
         de:14:f9:1b:ef:cc:0d:34:9c:39:e0:4e:b1:81:48:47:d9:36:
         cf:7f:42:57:51:b5:b3:12:86:e3:30:dc:73:d1:cc:4d:bc:1c:
         62:8c:83:80:37:6c:07:e3:9c:45:3c:b7:66:cc:6c:7a:14:b0:
         a5:e0:6a:12:de:6c:a0:63:a5:cf:b5:4d:00:f4:81:43:85:a2:
         99:6c:c0:a7:a6:c7:7a:7a:2f:4a:1c:68:1a:47:38:ee:41:e3:
         33:ba:34:73:a7:54:cd:46:9f:7d:25:19:47:f3:5e:9c:5b:a2:
         28:f4:99:4e:54:be:45:a9:85:6a:c0:b1:6a:c3:64:78:62:30:
         b5:d3:ce:ff:57:88:c8:70:98:05:26:5b:43:f5:b0:5d:8f:15:
         a8:58:9c:98:5d:f5:4c:f7:01:a1:b7:63:bd:45:a6:83:94:b3:
         4f:c5:d5:b4:65:d2:02:0f:61:e1:17:36:86:f5:31:ca:4f:d2:
         2e:30:5d:9e:5e:7e:f0:09:0c:9d:cc:02:91:c2:1b:57:0b:b9:
         50:e9:30:e8:92:d2:8a:15:96:82:f4:72:ec:52:59:90:3c:98:
         04:c8:c6:56
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICArMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NzE3MzBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDEzMjgwMjM3MkRDQjVF
NUIwNDkyRDEzMEMzQTA2REIxMzAzNkEzQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgaUAGhsrGmsd6/RFy2lPvXtclTmQzA466ZcioYRhvrUpVsH10
iBsl1xsozUlkRPBL/hewEO1EeALWXZpf0skt1xW1k9wxzhr/f5eDh8BkbZuCe1cc
LhN/Lhh6i9GWIH368qXUSq1cF2XcQk9bsg2uOGVDlVjJvhyd56t8bNV6wbjuVrpD
srdZlI6yNdIzFQlshhS02pvpgefdztkj9BZcZCHqvE1LgFz5t0Ux1jIg+iBUrM9a
9q045ftQ2NZUjm/xJMEAThbRwZLQQ9nolGu+OKJ8+9HpI7pFT0HSuVMzpQU0NMfi
jnyLkQT1OUX2N/DqGyGFJ206ke+36sjH9qi5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEygCNy3LXlsEktEww6BtsTA2o7YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0V5Z0NOeTNMWGxzRWt0RXd3NkJ0c1RBMm83WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxamAwDQYJKoZIhvcNAQELBQADggEBAJ3kvhfWm2cvCH8zrzRpsqghv7QG
ae+p1Ukzw+db7AJqB7ciHt4U+RvvzA00nDngTrGBSEfZNs9/QldRtbMShuMw3HPR
zE28HGKMg4A3bAfjnEU8t2bMbHoUsKXgahLebKBjpc+1TQD0gUOFoplswKemx3p6
L0ocaBpHOO5B4zO6NHOnVM1Gn30lGUfzXpxboij0mU5UvkWphWrAsWrDZHhiMLXT
zv9XiMhwmAUmW0P1sF2PFahYnJhd9Uz3AaG3Y71FpoOUs0/F1bRl0gIPYeEXNob1
McpP0i4wXZ5efvAJDJ3MApHCG1cLuVDpMOiS0ooVloL0cuxSWZA8mATIxlY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org