Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FZm5ef9Ixd6uVh344NJ94zP6qWo.roa
File:                     FZm5ef9Ixd6uVh344NJ94zP6qWo.roa (raw, json)
Hash identifier:          xK0R82M2FzTTZV741GzMq1YzQfUnIGjMdRKPPBlvjJU=
Subject key identifier:   15:99:B9:79:FF:48:C5:DE:AE:56:1D:F8:E0:D2:7D:E3:33:FA:A9:6A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       52
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FZm5ef9Ixd6uVh344NJ94zP6qWo.roa
Signing time:             Mon 27 Mar 2023 16:04:26 +0000
ROA not before:           Mon 27 Mar 2023 16:04:26 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:26 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1599B979FF48C5DEAE561DF8E0D27DE333FAA96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:88:2b:c9:ae:d6:33:2e:b6:21:d7:24:88:
                    30:ba:25:d9:68:3c:28:f6:8c:48:f7:55:bf:bf:30:
                    55:22:aa:e7:bd:b9:af:d1:70:4f:05:e5:01:34:d6:
                    d4:1f:d8:cc:3a:45:9b:4e:c0:6e:fb:dd:14:7d:a8:
                    23:f9:94:cc:aa:d9:15:53:aa:b5:6e:52:a0:3e:c8:
                    ac:93:0d:aa:55:6d:3f:e5:f3:d1:1f:6e:f8:78:d5:
                    5f:c9:df:ea:d0:b4:8f:05:34:ca:cc:c0:9c:5d:d5:
                    e4:7b:08:c6:6a:fe:d3:50:dc:5b:b5:29:3d:fe:95:
                    70:b3:3c:28:bd:17:51:94:c4:77:7a:e9:7a:ae:e2:
                    2a:cc:a8:4c:01:e8:fb:0e:bb:96:01:bd:4c:3c:e4:
                    29:73:13:06:73:34:97:8d:ad:38:55:19:8e:15:c1:
                    16:c2:81:0f:7a:90:09:a6:2c:f0:58:2d:96:6c:52:
                    02:a4:be:a4:e3:93:02:d1:78:67:a7:87:a7:d7:d1:
                    6f:4b:e6:c1:63:ee:54:55:fa:68:1d:f4:bb:4d:52:
                    ab:8f:7d:3d:c5:25:93:69:c2:a4:5c:a7:51:5e:85:
                    28:2f:f0:07:75:8e:7c:b1:df:0e:68:c1:27:b2:b5:
                    cd:03:71:f8:1c:48:87:2b:e9:9e:28:0e:0f:ae:81:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:B9:79:FF:48:C5:DE:AE:56:1D:F8:E0:D2:7D:E3:33:FA:A9:6A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FZm5ef9Ixd6uVh344NJ94zP6qWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:bd:52:27:70:b2:de:4c:68:af:7b:36:9f:eb:82:94:5a:b5:
         43:47:0c:e2:d4:51:71:23:ea:f9:5a:41:d2:db:d8:60:f4:48:
         bf:48:cc:a5:2b:e6:55:bd:c5:87:6f:04:b0:9d:ae:95:62:8c:
         42:a1:9a:3a:7b:65:92:eb:c2:27:f0:8b:4e:06:f3:2a:01:b9:
         b3:3c:f5:7c:46:70:4e:49:6c:63:b0:2b:3b:57:d2:d0:1e:4a:
         b5:49:b1:75:dd:11:34:c6:f9:b3:37:b6:32:1b:14:a4:64:92:
         b4:09:39:7e:21:34:d1:7d:c6:01:8b:05:5d:7f:0e:07:34:a5:
         e0:e5:cc:13:19:28:01:ed:39:22:e3:08:fc:54:60:8c:3e:bf:
         28:5e:17:05:d4:5f:a9:b5:53:f6:bc:69:13:05:e7:7f:53:59:
         3a:4a:39:01:a2:23:5f:00:eb:ce:80:cb:2a:aa:7e:87:4e:f7:
         d1:ec:24:be:9d:a5:bf:aa:d8:ea:1f:a7:28:8d:74:9b:91:4c:
         4b:be:79:30:b5:6f:80:d6:c9:15:3b:ed:ec:b3:b0:1b:a6:77:
         c8:65:88:6d:15:81:a5:c7:12:2d:4d:ac:92:99:9a:2d:8e:f9:
         36:9a:2f:7b:a9:bc:0f:50:e9:aa:ad:04:18:1c:ca:e9:56:32:
         74:89:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org