Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FDx8_rkWkVfNw3834bIFRGaZtKs.roa
File:                     FDx8_rkWkVfNw3834bIFRGaZtKs.roa (raw, json)
Hash identifier:          KYxBKvo+NExrTvZ01NEkbdPhoNiiUkj8uBDaQgTP/2g=
Subject key identifier:   14:3C:7C:FE:B9:16:91:57:CD:C3:7F:37:E1:B2:05:44:66:99:B4:AB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       55
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FDx8_rkWkVfNw3834bIFRGaZtKs.roa
Signing time:             Mon 27 Mar 2023 16:04:28 +0000
ROA not before:           Mon 27 Mar 2023 16:04:28 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:28 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=143C7CFEB9169157CDC37F37E1B205446699B4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:7a:f9:bc:b6:ee:52:ca:db:27:a3:d8:d3:
                    18:70:32:14:eb:57:bf:83:a7:2c:b1:f8:f4:64:eb:
                    f9:56:ba:77:45:3b:55:7e:75:24:ca:c8:f0:c8:24:
                    33:4a:1c:66:34:ec:05:e9:3b:fb:dc:9b:a3:98:04:
                    9a:d8:20:90:f4:ff:ce:79:96:94:28:11:c0:4c:51:
                    f2:54:a1:c3:a3:5a:34:ef:50:c3:d3:39:69:94:24:
                    3b:a5:fd:9a:a7:c0:b8:0d:cf:76:3f:c9:18:33:97:
                    c1:9d:5c:a0:fb:73:be:3e:0a:3f:ec:30:08:25:ec:
                    66:99:00:93:d5:ae:f1:0b:b9:80:94:97:0b:e6:85:
                    5d:2c:16:30:94:05:10:d6:68:48:cd:d1:f3:0b:4f:
                    a6:00:53:06:7e:fc:9e:90:43:bd:d2:49:24:e1:f4:
                    21:35:ef:6a:d1:a7:99:65:cb:b1:ca:15:6c:81:4b:
                    0a:94:90:8a:63:75:3e:52:16:fc:75:2d:49:11:01:
                    2c:a4:82:c5:e0:51:d9:7d:d7:25:f3:56:ce:bd:3e:
                    b0:82:8d:2b:dc:09:0a:7d:05:eb:93:9b:0e:60:19:
                    31:28:f7:49:1f:22:15:d0:42:90:22:df:06:a6:f8:
                    88:dd:3f:50:b7:ad:53:12:5d:a4:06:0c:21:a0:e6:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:7C:FE:B9:16:91:57:CD:C3:7F:37:E1:B2:05:44:66:99:B4:AB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FDx8_rkWkVfNw3834bIFRGaZtKs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:5e:6d:c0:de:18:65:ed:b4:73:2e:bf:06:e9:be:35:cb:ea:
         a5:de:a0:1d:49:f0:e0:ff:9b:d9:ac:59:e9:07:88:5f:22:8b:
         65:33:1d:91:22:22:48:3d:c1:ae:f4:3d:0b:ca:4f:5e:2d:49:
         c9:55:76:37:22:cd:25:10:15:f8:7f:98:14:c5:70:e8:24:10:
         fd:40:f9:da:5a:52:60:38:43:31:45:88:36:65:e7:cf:20:4f:
         84:6d:77:fc:aa:76:38:a8:f3:72:b2:bb:c0:48:bc:50:b4:97:
         f3:83:19:24:1e:e6:75:23:d2:af:b0:96:e4:97:f7:66:8a:15:
         86:64:58:8c:ed:1b:0c:4e:35:7f:c3:d0:15:96:4c:61:e7:f3:
         d3:2a:f8:22:5f:00:96:07:c1:00:b0:4c:5c:80:40:30:9b:ad:
         c2:69:8c:aa:95:07:ea:32:35:c9:b6:18:b6:46:76:12:3c:ae:
         4c:f8:30:26:20:ff:32:af:6e:f5:2c:7a:96:09:b5:40:80:c7:
         82:32:77:b1:83:b0:dd:a8:66:34:66:12:4c:90:18:d3:eb:ef:
         56:05:66:65:a4:ce:82:e7:67:9b:03:e3:c7:1b:b6:7f:57:a0:
         a9:0b:4a:45:13:88:37:36:94:aa:b6:ee:09:15:d3:97:4d:b4:
         e6:85:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org