Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GNlMQ-WCi5-In4TpSyM5lGgaz6Q.roa
File:                     GNlMQ-WCi5-In4TpSyM5lGgaz6Q.roa (raw, json)
Hash identifier:          cT3WtoC8PDNYtLv69jxCCdv/4Bo49vgP3M4HYLJN4NU=
Subject key identifier:   18:D9:4C:43:E5:82:8B:9F:88:9F:84:E9:4B:23:39:94:68:1A:CF:A4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0148
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GNlMQ-WCi5-In4TpSyM5lGgaz6Q.roa
Signing time:             Wed 24 May 2023 16:31:14 +0000
ROA not before:           Wed 24 May 2023 16:31:14 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.8.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:14 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=18D94C43E5828B9F889F84E94B233994681ACFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:47:d7:62:f8:62:07:cc:75:42:47:fe:c5:
                    d2:00:ad:f0:ab:4d:8c:7a:84:55:8c:9b:b0:63:6e:
                    88:ff:00:cb:23:b4:80:e5:f9:45:de:be:16:c2:fc:
                    d1:a4:33:ae:d4:5d:ac:f5:b2:fd:3f:02:94:fb:6c:
                    18:ec:13:68:5c:d7:d1:3d:80:83:53:9e:8c:17:6f:
                    d1:e6:8a:c1:78:58:d9:1f:d3:97:c1:67:09:30:c8:
                    9f:07:97:fe:13:fb:16:45:c2:7b:f7:e5:06:c2:a6:
                    a0:a1:9e:92:28:f1:95:b7:f8:cd:9f:b3:a3:34:07:
                    bf:a8:15:d1:c4:21:ff:b8:73:be:93:48:3a:1d:3f:
                    ad:85:8c:3f:6f:aa:f9:d9:e7:2b:d9:78:48:f1:45:
                    bd:d7:30:dd:c8:08:4b:55:67:b9:e9:34:da:d2:f5:
                    5c:58:88:c1:7c:b9:72:9c:90:c9:dd:42:60:5f:3e:
                    5b:46:74:c9:34:e2:43:34:c5:31:e9:8c:88:d1:8d:
                    f5:74:8a:b2:75:4b:19:86:9e:e4:6b:de:c7:20:01:
                    8a:1c:bf:a4:1f:21:97:95:36:08:39:46:29:c3:09:
                    ec:ca:f7:16:56:14:98:df:bd:d8:ec:40:6e:dc:9d:
                    90:a6:19:30:b7:57:46:e0:fe:d9:f2:11:39:e9:39:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D9:4C:43:E5:82:8B:9F:88:9F:84:E9:4B:23:39:94:68:1A:CF:A4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GNlMQ-WCi5-In4TpSyM5lGgaz6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:60:aa:d3:da:fb:05:8e:c5:03:52:60:4c:82:cc:54:76:
         6b:f5:50:3e:f5:a9:5f:00:39:cb:f0:39:5a:d8:60:9f:36:f3:
         88:6f:72:4f:0b:59:80:3a:94:7a:92:94:a8:7e:18:95:e9:ad:
         d5:4c:42:a4:e6:f2:c2:5f:e8:a8:1d:ca:10:02:26:06:c2:0f:
         ab:b2:9e:e6:2c:a7:cb:23:02:25:b7:ec:39:22:97:1f:2b:08:
         51:9d:0b:7f:ef:d6:5a:5a:ef:d9:c6:6f:f2:2e:ee:ef:7f:dc:
         38:0c:cc:94:25:8b:ec:b1:12:58:a5:3c:41:31:a7:4a:4a:75:
         ac:38:6e:60:fa:59:51:19:2b:32:47:4b:6d:dd:e6:16:ce:66:
         65:45:8b:d7:07:8d:7f:a9:74:27:d1:f8:f6:ad:8a:1a:28:b4:
         cb:79:b5:f9:66:ca:ce:f3:4b:bb:77:21:d7:ce:f1:92:04:a3:
         56:25:67:90:7e:05:32:f6:42:01:7d:4c:fd:b5:99:fb:66:c5:
         61:4e:41:d6:9c:34:e6:64:6f:98:09:ce:44:5b:53:64:a8:55:
         16:34:1e:69:33:db:a1:82:a2:62:37:86:40:42:22:78:ee:9d:
         65:bc:28:00:28:9d:48:41:69:e3:45:cf:2a:f0:3f:50:0e:dc:
         40:5e:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org