Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IlEEzUpP3jbdaEXsVUEC7ZuHBOQ.roa
File:                     IlEEzUpP3jbdaEXsVUEC7ZuHBOQ.roa (raw, json)
Hash identifier:          2glkSrM6eAUbC7OjdReeDfDwfwrePsW9mF7Posb0fjo=
Subject key identifier:   22:51:04:CD:4A:4F:DE:36:DD:68:45:EC:55:41:02:ED:9B:87:04:E4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       026A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IlEEzUpP3jbdaEXsVUEC7ZuHBOQ.roa
Signing time:             Tue 30 May 2023 16:34:16 +0000
ROA not before:           Tue 30 May 2023 16:34:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=225104CD4A4FDE36DD6845EC554102ED9B8704E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e6:1f:e2:25:32:2b:e4:2f:ae:cd:0a:b6:df:
                    47:fe:39:e8:cb:26:25:d6:c8:6d:e8:f8:e2:d9:e0:
                    27:dd:af:59:6b:84:cc:83:d2:61:7a:ec:89:56:72:
                    23:67:74:0a:14:45:e7:45:ab:5f:6d:39:fd:4f:41:
                    ad:64:4c:2f:9f:b3:c1:38:29:c1:69:1a:76:7a:60:
                    a9:e0:56:3f:e2:5e:cc:31:40:63:d3:1c:13:88:37:
                    f9:06:9f:86:f5:4b:ee:31:bd:a2:f9:ef:e4:f1:e5:
                    92:10:41:86:3e:85:aa:40:fd:1a:bc:81:eb:62:49:
                    b9:ab:b3:8f:63:d5:e7:b9:92:7a:88:32:b9:0e:81:
                    c3:4a:55:b6:7b:40:b7:09:71:23:7e:c9:81:86:03:
                    80:5e:18:71:41:24:f0:5b:4f:ef:6e:4a:e9:52:ca:
                    76:00:6c:98:2a:c5:f3:3f:4e:87:b4:d8:a6:55:e1:
                    c1:fb:69:8f:63:fc:25:f4:06:73:a4:c2:47:ea:de:
                    05:76:ca:d4:1c:39:2a:77:d9:7f:cf:43:c4:cc:b6:
                    e0:a8:ad:c5:32:0a:59:c2:9a:24:7c:eb:e4:0d:55:
                    4a:84:d1:b0:74:cf:de:7c:1f:6b:45:c1:d7:ed:e2:
                    2d:3f:38:a6:c1:78:48:8f:c4:6d:73:9e:e9:f2:af:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:51:04:CD:4A:4F:DE:36:DD:68:45:EC:55:41:02:ED:9B:87:04:E4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IlEEzUpP3jbdaEXsVUEC7ZuHBOQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:56:cc:a0:b3:2f:03:58:eb:8f:54:7a:6d:57:24:33:62:
         14:c2:2c:f9:3d:64:7e:79:e2:55:d8:a7:d5:cb:19:d7:bd:61:
         90:eb:b1:e2:05:39:07:09:36:ef:f6:5d:d5:df:16:1d:06:c0:
         64:71:98:aa:d7:47:01:c2:cb:f7:1f:fa:9f:4f:43:cc:07:3f:
         eb:cf:9a:87:af:22:0e:3b:bb:ea:f2:e4:da:59:71:66:6a:e4:
         cf:e1:e7:c9:74:87:9b:cb:d8:22:6f:27:b3:d6:f8:f4:fc:57:
         17:eb:d8:de:ea:fd:fb:03:e8:5b:68:8d:88:e3:a8:c4:b5:e5:
         67:44:57:70:f4:07:c2:c3:64:8b:ee:c7:41:2f:94:27:2c:ff:
         03:0f:f8:09:94:f3:21:8f:25:85:dd:5d:29:72:f2:fd:bd:7d:
         fb:d4:d0:9f:31:74:a9:13:e2:a8:f9:ab:e6:89:e6:33:6d:8d:
         1d:d3:57:64:a7:35:1e:fb:9e:e7:a6:58:d2:4e:be:a0:a5:08:
         70:c6:a6:2e:c7:32:3e:3c:c6:a9:12:47:68:9e:a1:ef:81:7f:
         bf:44:09:d1:03:9f:ba:e3:14:43:c4:d5:eb:5b:1b:d5:69:bb:
         ab:51:73:8c:18:2a:f3:6e:6a:32:53:da:e1:d1:f6:d1:d0:9f:
         16:60:bd:4a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjM0MTZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDIyNTEwNENENEE0RkRF
MzZERDY4NDVFQzU1NDEwMkVEOUI4NzA0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDo5h/iJTIr5C+uzQq230f+OejLJiXWyG3o+OLZ4Cfdr1lrhMyD
0mF67IlWciNndAoURedFq19tOf1PQa1kTC+fs8E4KcFpGnZ6YKngVj/iXswxQGPT
HBOIN/kGn4b1S+4xvaL57+Tx5ZIQQYY+hapA/Rq8getiSbmrs49j1ee5knqIMrkO
gcNKVbZ7QLcJcSN+yYGGA4BeGHFBJPBbT+9uSulSynYAbJgqxfM/Toe02KZV4cH7
aY9j/CX0BnOkwkfq3gV2ytQcOSp32X/PQ8TMtuCorcUyClnCmiR86+QNVUqE0bB0
z958H2tFwdft4i0/OKbBeEiPxG1znunyr7ZPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIlEEzUpP3jbdaEXsVUEC7ZuHBOQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0lsRUV6VXBQM2piZGFFWHNWVUVDN1p1SEJPUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBQmowDQYJKoZIhvcNAQELBQADggEBAKGPVsygsy8DWOuPVHptVyQzYhTC
LPk9ZH554lXYp9XLGde9YZDrseIFOQcJNu/2XdXfFh0GwGRxmKrXRwHCy/cf+p9P
Q8wHP+vPmoevIg47u+ry5NpZcWZq5M/h58l0h5vL2CJvJ7PW+PT8Vxfr2N7q/fsD
6FtojYjjqMS15WdEV3D0B8LDZIvux0EvlCcs/wMP+AmU8yGPJYXdXSly8v29ffvU
0J8xdKkT4qj5q+aJ5jNtjR3TV2SnNR77nuemWNJOvqClCHDGpi7HMj48xqkSR2ie
oe+Bf79ECdEDn7rjFEPE1etbG9Vpu6tRc4wYKvNuajJT2uHR9tHQnxZgvUo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org