Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FPRO26ztwrE23o6tyjx-IwcK1Tc.roa
File:                     FPRO26ztwrE23o6tyjx-IwcK1Tc.roa (raw, json)
Hash identifier:          wKWhWpgOWt+BrcHx1vwnvL6BTazMTCFIKISOEccP/vk=
Subject key identifier:   14:F4:4E:DB:AC:ED:C2:B1:36:DE:8E:AD:CA:3C:7E:23:07:0A:D5:37
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0343
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FPRO26ztwrE23o6tyjx-IwcK1Tc.roa
Signing time:             Thu 01 Jun 2023 16:10:45 +0000
ROA not before:           Thu 01 Jun 2023 16:10:45 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:10:45 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=14F44EDBACEDC2B136DE8EADCA3C7E23070AD537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:1a:24:42:80:9f:ac:a8:dc:b9:4c:ec:b2:
                    ec:77:2c:4e:82:8a:41:f6:4b:7a:aa:56:52:c8:2d:
                    22:80:70:9a:9a:84:38:c4:65:64:c8:5a:e2:18:15:
                    e2:a1:45:1e:b2:71:63:21:b0:80:1c:5f:78:8d:c4:
                    9a:dc:06:0a:e1:32:09:c8:77:0e:bf:20:04:31:27:
                    49:da:f0:3c:b8:f8:8b:7e:82:30:72:62:86:ca:30:
                    45:2e:97:dd:5f:4e:ba:af:97:80:33:49:d8:e7:34:
                    ae:ce:a0:0e:e7:47:7d:a0:37:29:bd:a0:8e:14:5e:
                    45:b7:ec:6b:63:87:88:3e:cb:b8:64:9a:ff:69:d7:
                    62:70:e3:c1:b8:c2:2b:6b:93:25:b8:00:b7:43:ac:
                    6f:dd:16:24:c9:ae:03:4e:8a:34:76:f0:28:29:57:
                    89:e7:56:8e:93:2c:e9:fa:cc:49:d0:f6:8d:1f:73:
                    33:5a:6e:69:40:d6:14:02:44:86:13:4d:19:c9:ee:
                    62:75:4d:43:20:2d:87:ee:4a:85:4d:fb:35:1c:6e:
                    be:d1:8f:61:cf:36:d3:37:03:07:01:46:aa:fd:58:
                    94:b2:a9:2e:a2:29:19:47:13:18:33:0b:0e:d2:d8:
                    01:b0:6f:aa:9e:9e:a3:98:a3:90:d4:26:e9:8e:ae:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F4:4E:DB:AC:ED:C2:B1:36:DE:8E:AD:CA:3C:7E:23:07:0A:D5:37
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FPRO26ztwrE23o6tyjx-IwcK1Tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:4a:89:b8:43:38:c6:27:2c:a3:2e:f9:37:bf:c8:96:b4:a4:
         32:54:95:db:7f:47:10:8b:c1:d2:98:d8:89:a3:73:b3:68:05:
         02:ac:23:7f:87:09:28:6f:06:ed:d4:86:4e:e4:11:67:39:25:
         b1:fa:5f:87:f9:eb:db:f0:88:ad:8d:5a:53:b2:c2:84:0f:14:
         7d:44:99:b2:c7:94:ae:41:6e:17:d8:aa:20:05:c5:11:73:8e:
         96:da:d2:03:be:b8:1c:c4:4a:11:c7:7f:59:9c:b0:99:a4:9c:
         a2:0d:c1:03:76:a3:8c:12:76:3a:70:c1:98:13:96:4a:bb:19:
         0a:0b:3b:43:e8:9d:70:c8:5a:ab:f1:da:37:ce:2c:42:89:f2:
         6c:4b:7a:20:56:fb:1e:ca:8e:5d:f5:d4:48:ea:ee:34:c4:67:
         9b:ed:db:c5:e2:af:1c:e3:66:ac:36:aa:1e:ab:71:4d:0d:7c:
         6f:1c:84:25:59:4a:30:35:67:df:f2:8f:de:a5:e1:dc:30:9a:
         9e:6c:63:00:03:9a:f0:c5:9e:7d:cf:77:5c:cc:34:62:d4:33:
         c7:0d:91:35:59:34:4a:b2:ad:80:1f:6c:39:bc:ad:f9:8f:5b:
         63:dd:0b:a1:45:37:ec:16:27:36:d1:fa:26:b7:2c:bb:84:fd:
         56:d4:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org