Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jjv6Gw7lAqrVuk5F4p897fNWu-E.roa
File:                     Jjv6Gw7lAqrVuk5F4p897fNWu-E.roa (raw, json)
Hash identifier:          MEos+m2BcVGRCZQJU7xackD/w5bS/GNFLOfyblnA7AQ=
Subject key identifier:   26:3B:FA:1B:0E:E5:02:AA:D5:BA:4E:45:E2:9F:3D:ED:F3:56:BB:E1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jjv6Gw7lAqrVuk5F4p897fNWu-E.roa
Signing time:             Tue 30 May 2023 16:29:23 +0000
ROA not before:           Tue 30 May 2023 16:29:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=263BFA1B0EE502AAD5BA4E45E29F3DEDF356BBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:da:be:08:51:87:c9:13:ea:6c:6a:d0:3e:
                    68:3f:0e:b3:7f:a4:1b:96:fd:df:7e:ca:ec:42:77:
                    f5:36:0e:89:73:0c:de:31:d2:37:56:74:1e:82:9b:
                    6a:4e:ce:d8:7b:ac:b9:f0:67:e4:a3:7d:11:26:a4:
                    2e:ae:cd:2c:25:0f:6a:8b:29:d2:78:23:39:08:ab:
                    0b:8e:0d:58:13:4b:ae:2a:f3:d6:60:27:e3:c1:e7:
                    a8:fd:1a:13:c0:be:c6:01:9a:09:bf:8d:ad:10:e3:
                    9d:73:71:e1:ba:8a:e5:3f:8b:8f:47:36:9f:f5:d6:
                    c5:b7:3b:bf:c3:f0:e9:7d:f6:92:3a:b7:ad:11:ee:
                    4b:35:8a:3a:7a:e6:49:31:0e:32:5b:1b:50:67:95:
                    8f:46:38:49:f7:cd:94:93:fc:ca:a5:fb:16:c7:e5:
                    7f:f4:e4:a6:36:76:43:be:bc:5e:a8:c9:9b:63:b1:
                    85:da:65:54:91:fb:7f:2c:ba:fa:2c:2d:d9:c2:0d:
                    eb:18:a6:86:26:07:15:b3:0e:55:f4:5a:e2:e6:0a:
                    01:8f:34:99:23:eb:83:9e:67:88:61:a7:16:61:b9:
                    12:66:a7:eb:9a:b3:d4:36:29:bf:c5:60:8d:7d:3c:
                    b9:ab:08:5b:79:5b:16:fd:0a:71:9b:be:2c:0d:b5:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3B:FA:1B:0E:E5:02:AA:D5:BA:4E:45:E2:9F:3D:ED:F3:56:BB:E1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jjv6Gw7lAqrVuk5F4p897fNWu-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:a7:4e:bf:96:b9:af:95:3d:c2:4c:49:ed:bb:b4:61:26:
         5e:f3:20:02:18:61:aa:91:cf:73:e8:10:0f:cb:ca:0d:f4:49:
         5d:49:a2:b7:47:4e:eb:4f:b0:3a:93:bb:61:a2:31:53:e3:b5:
         17:d6:47:7d:0a:80:0a:ab:b8:bb:d3:22:dd:9e:f8:59:c7:8f:
         7a:a0:23:64:a5:81:e8:d3:59:56:20:64:7a:5d:4c:96:18:e6:
         1c:56:c2:2f:e4:b0:a6:0f:88:6f:c8:48:fd:69:5a:8e:e4:b0:
         22:7d:5a:03:eb:22:19:c6:5e:e6:cb:6a:54:9c:bc:48:0a:2e:
         5d:76:92:69:3b:e0:e0:97:37:86:58:bc:13:27:10:ec:4b:0c:
         64:21:e2:0a:90:e8:c9:da:62:5c:08:a8:86:0a:2e:09:71:8e:
         00:05:36:cf:87:bd:38:e0:8e:3e:42:58:23:43:6e:ed:75:30:
         2f:d7:3a:a8:c7:e9:ad:e8:22:0e:9f:6e:10:01:e8:93:ac:e6:
         e5:50:fb:3c:5a:0e:3f:7c:76:b1:b9:a9:aa:7b:85:db:7e:8d:
         39:f4:46:c1:2a:11:71:ba:c7:7b:e3:1f:2f:f4:80:bb:f5:64:
         59:6d:f0:8e:59:0f:c4:6c:b2:a0:82:55:fe:f9:98:b5:c9:91:
         c6:12:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org