Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/G3lOtNSundW8exCgkcziUZyyB-Y.roa
File:                     G3lOtNSundW8exCgkcziUZyyB-Y.roa (raw, json)
Hash identifier:          wRBZY6+4HAF0aaC5sMfTpnmNAgauUtF4QCskig6alBs=
Subject key identifier:   1B:79:4E:B4:D4:AE:9D:D5:BC:7B:10:A0:91:CC:E2:51:9C:B2:07:E6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0361
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G3lOtNSundW8exCgkcziUZyyB-Y.roa
Signing time:             Thu 01 Jun 2023 17:56:37 +0000
ROA not before:           Thu 01 Jun 2023 17:56:37 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:56:37 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1B794EB4D4AE9DD5BC7B10A091CCE2519CB207E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:05:10:d1:a3:3a:09:ff:f5:75:1f:d1:6b:
                    7b:5e:69:cd:a6:58:a6:03:a6:f8:e7:a9:a8:09:d5:
                    78:ed:bd:76:37:01:b8:e8:21:22:07:aa:ba:ae:b8:
                    38:20:69:64:86:8e:00:01:3d:d8:e6:a3:17:3e:98:
                    f1:70:a5:ca:c7:fc:63:e1:2d:88:8d:db:b4:28:2e:
                    50:4c:12:b3:7d:00:dd:5d:a9:b1:60:3c:37:88:c9:
                    bf:11:21:3c:07:91:f4:0f:b7:8d:49:22:92:fe:72:
                    ba:72:0a:74:79:74:83:3c:f3:b3:79:87:cc:03:fe:
                    23:50:36:c1:0a:4a:84:f5:f4:77:65:ce:80:05:2b:
                    d6:f3:78:66:eb:cf:e0:d8:c4:28:d9:85:65:2e:9f:
                    94:ba:8e:68:f0:8f:84:c9:6b:ba:67:d1:69:4b:b4:
                    37:4d:6e:aa:20:77:db:26:b2:aa:49:fa:d4:4f:0f:
                    0b:50:a8:2c:63:b4:21:e8:9f:e8:09:04:12:c1:b5:
                    b7:63:2a:5a:cc:10:71:aa:2f:04:5f:36:6e:a2:33:
                    4b:a4:f0:1f:33:b4:d8:1d:71:0e:bf:5c:9e:06:8b:
                    d6:5a:35:ef:47:e2:7e:77:8c:a8:ab:80:4b:48:70:
                    b9:90:42:0d:45:a2:d3:a9:60:a3:d1:5a:14:2c:2e:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:4E:B4:D4:AE:9D:D5:BC:7B:10:A0:91:CC:E2:51:9C:B2:07:E6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G3lOtNSundW8exCgkcziUZyyB-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:26:e0:fc:38:cb:e0:c9:b3:da:a6:fc:a5:8f:e8:0e:90:58:
         04:f9:cc:fb:f3:78:8f:cd:36:2b:24:70:f4:de:4a:55:ea:91:
         a8:3e:78:6b:8e:6d:22:c9:6a:b8:dc:3f:3f:e6:e8:04:0e:7c:
         b8:40:ee:71:18:08:5c:b3:e0:f0:9d:d0:e9:d3:b0:7d:26:be:
         92:00:30:5c:ff:1c:16:9e:d8:a9:87:58:d1:32:37:d1:51:ee:
         f3:81:b9:18:33:2e:ef:ae:44:ec:49:44:81:57:4d:62:35:c5:
         3b:ae:ed:73:37:e7:3f:18:ea:59:22:c2:3d:e4:05:db:fe:6d:
         b5:5f:21:23:87:09:92:b5:22:ca:a8:d0:e2:59:86:7d:0f:0d:
         2b:06:ba:81:aa:2c:b5:02:c7:e8:3e:ec:6f:3d:bc:87:1d:e5:
         d1:b5:75:97:fb:6d:5a:f7:6f:1c:42:e3:03:bf:e0:ca:81:eb:
         65:9c:66:00:c1:4d:73:29:86:80:62:21:56:eb:c6:08:3a:4b:
         0d:d4:82:8c:e1:62:25:a9:c6:b5:b5:5f:24:7e:5e:c6:b2:82:
         07:d0:37:e2:31:01:23:50:06:e9:92:ee:8e:47:43:0e:41:8c:
         63:33:5a:a5:67:0d:ce:51:a9:bb:38:09:91:46:07:23:90:d2:
         a8:38:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org