Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jrqju0vk9lkeLvd57wFOdaiIsdY.roa
File:                     Jrqju0vk9lkeLvd57wFOdaiIsdY.roa (raw, json)
Hash identifier:          eEv6W4JC3gvLJiyhltc3VkAw+gVfvOcEFM0GcJhp/Mo=
Subject key identifier:   26:BA:A3:BB:4B:E4:F6:59:1E:2E:F7:79:EF:01:4E:75:A8:88:B1:D6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0435
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jrqju0vk9lkeLvd57wFOdaiIsdY.roa
Signing time:             Tue 06 Jun 2023 16:44:53 +0000
ROA not before:           Tue 06 Jun 2023 16:44:53 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:44:53 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=26BAA3BB4BE4F6591E2EF779EF014E75A888B1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:db:26:e9:57:d0:5f:6d:a4:59:06:1c:58:
                    86:14:36:2a:c5:d7:ff:72:8b:ed:a4:05:a3:2c:5c:
                    32:09:7e:03:90:76:f4:83:27:76:84:fe:dc:bb:fe:
                    08:64:92:e2:d3:3f:e5:3f:a4:4f:c6:0a:11:cd:5a:
                    41:8d:58:81:2b:88:df:57:00:2c:4b:ed:c2:3f:c3:
                    dd:8b:5e:04:8d:52:ea:46:40:98:f7:5c:96:a0:26:
                    bf:96:34:65:d1:4c:c9:d7:8c:0d:df:8b:11:5c:61:
                    12:30:e3:ff:00:2b:15:63:9b:e3:b0:95:0d:39:bf:
                    9e:0a:21:45:f5:09:e2:a9:08:0d:bd:ca:39:fb:02:
                    05:e6:6b:ab:5c:e1:bb:0a:d3:c2:d5:42:72:9f:c1:
                    71:b8:46:f7:e1:dd:45:ce:0f:84:93:07:62:f5:c5:
                    66:19:dd:ed:11:39:d4:47:41:0d:3a:6c:98:c1:78:
                    96:fd:80:dc:17:90:e4:3f:51:be:87:53:57:bd:11:
                    46:04:9a:a1:54:27:7c:07:69:f6:65:36:cc:bf:49:
                    01:ac:a9:9e:f1:f5:e1:bc:ca:2c:15:3c:ff:ac:b2:
                    06:57:d5:56:3f:13:e7:66:0d:76:de:dc:05:e8:0d:
                    fc:93:84:01:de:ca:89:b5:b1:ce:9e:d1:ac:67:af:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:A3:BB:4B:E4:F6:59:1E:2E:F7:79:EF:01:4E:75:A8:88:B1:D6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jrqju0vk9lkeLvd57wFOdaiIsdY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:72:5d:da:2c:f0:b3:d7:40:ac:7c:d8:3a:77:5e:61:bc:
         f9:12:2e:05:f2:f7:d8:15:d9:6f:f7:65:a2:73:b3:3e:22:13:
         bb:72:32:e5:c9:a0:2f:bc:e6:eb:7e:38:28:9d:f8:06:ff:0b:
         61:95:7f:f5:b8:f8:74:17:63:74:7a:db:8d:25:e7:7a:83:b1:
         33:40:e9:30:96:16:0d:03:65:45:96:0c:f9:bc:23:da:92:57:
         92:78:dd:4b:a8:1b:d6:01:de:01:fa:57:ef:d1:75:c5:c7:88:
         3b:62:fb:75:96:b7:b2:81:0c:43:f8:77:61:c3:ac:c4:e3:a7:
         1c:db:c2:31:ea:0c:2d:29:71:cf:f4:f0:9e:cf:60:9c:c1:98:
         d0:86:20:db:19:75:67:15:a9:0e:01:34:df:17:bf:fa:3f:a0:
         5f:2e:65:80:b5:0c:b7:9f:28:ba:f9:48:fb:a3:88:a9:9e:1a:
         5b:b5:96:4c:2c:f3:01:7e:3c:88:71:aa:64:a2:5a:b2:76:ca:
         25:34:18:fd:4c:63:c4:c3:f7:9a:38:97:ef:49:cc:a4:2d:54:
         eb:68:95:a3:35:ef:4d:fb:fa:ab:80:23:dd:95:09:06:13:94:
         b4:2e:04:60:35:d7:8a:28:19:42:62:fc:78:63:5c:15:4d:93:
         0c:7f:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org