Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0PLlwOXhM4S-RGDULFGVTaxKlY.roa
File:                     K0PLlwOXhM4S-RGDULFGVTaxKlY.roa (raw, json)
Hash identifier:          VeJoV5eLxCabYZau1Dc6CdZkKuTOF2ohu7Gqq+7+nkY=
Subject key identifier:   2B:43:CB:97:03:97:84:CE:12:F9:11:83:50:B1:46:55:36:B1:2A:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       63
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0PLlwOXhM4S-RGDULFGVTaxKlY.roa
Signing time:             Mon 27 Mar 2023 16:04:33 +0000
ROA not before:           Mon 27 Mar 2023 16:04:33 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:33 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2B43CB97039784CE12F9118350B1465536B12A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7e:68:5f:a9:f6:51:fe:0d:d3:5d:fb:7b:9d:
                    8e:aa:d6:20:cf:b2:2c:e2:5c:ba:c4:f1:95:f3:c4:
                    a0:ac:82:94:63:5c:93:5f:bd:bd:fd:03:aa:94:25:
                    46:f5:e8:9e:e5:c2:f3:8a:77:2c:0c:ae:b8:0d:81:
                    87:4d:bb:ce:db:60:39:80:87:98:53:44:e5:74:53:
                    36:42:89:05:76:05:40:45:99:f8:28:ad:07:29:28:
                    47:83:2e:27:15:27:22:2a:06:9d:2f:78:79:ba:d4:
                    60:9b:62:a5:e7:b8:72:7a:4c:cd:9b:96:ea:f5:87:
                    13:f2:d8:ed:b5:27:56:76:18:15:4f:6a:fe:06:4b:
                    79:44:da:14:c8:b3:37:56:d1:ff:c1:51:23:15:fd:
                    a7:fc:c0:fc:40:ad:93:28:47:e7:d1:7b:8f:15:97:
                    46:9b:53:d6:7d:1d:dd:58:d9:cd:5e:dc:e2:c1:db:
                    23:fb:16:37:20:59:0f:dd:7e:35:4b:14:34:9a:e9:
                    f9:69:db:27:24:29:8c:3b:a5:b1:cd:fb:00:45:a2:
                    63:81:bb:c8:56:65:ec:8f:53:ce:56:64:f2:fa:a0:
                    cd:1d:37:84:a4:7b:eb:71:44:d8:5f:5f:f6:f7:8b:
                    04:bf:87:af:5a:41:8d:e6:6e:54:f1:b2:4e:a9:5e:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:CB:97:03:97:84:CE:12:F9:11:83:50:B1:46:55:36:B1:2A:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0PLlwOXhM4S-RGDULFGVTaxKlY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:de:bf:15:39:73:df:42:8c:b6:00:a5:7b:24:64:40:da:
         d7:b0:ce:3d:55:bb:a0:1b:96:48:4b:80:6f:e3:a9:67:79:ab:
         ee:f3:1a:3f:33:61:60:e6:96:5e:8d:0f:03:66:90:cc:d2:f8:
         e9:e6:0a:c5:8b:2a:e5:22:db:13:fe:f8:38:34:5c:dc:f8:6d:
         d9:ee:8e:f4:55:fc:c6:72:01:bf:fd:bf:eb:b7:48:87:75:79:
         d5:0e:70:74:00:f6:c7:9a:d1:a4:c0:7c:83:86:2e:38:4a:96:
         61:36:06:b4:8b:95:d0:9d:78:44:46:c0:36:ad:51:aa:40:ff:
         88:70:85:c1:5f:b1:1c:83:98:ce:84:4a:3b:2a:17:46:a8:c0:
         b9:48:d6:8b:1d:0b:a2:8f:a4:09:50:2b:87:7e:0a:7d:dd:ff:
         cc:ad:5f:02:da:ac:ec:5a:29:eb:5d:3d:19:c8:e3:81:be:08:
         b3:db:52:24:80:30:8b:3d:bf:5f:1a:51:a8:ed:c0:1a:50:f5:
         b4:b6:ef:a4:79:e6:92:08:f8:0c:a9:79:c5:7e:22:5d:3f:5e:
         21:42:83:6c:e0:0c:e5:e6:45:c7:eb:53:a9:f0:09:0b:33:f9:
         6f:13:ed:c7:84:a7:0e:53:9d:54:ed:85:52:6d:1f:99:bd:00:
         b5:f4:66:19
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDQzM1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMkI0M0NCOTcwMzk3ODRD
RTEyRjkxMTgzNTBCMTQ2NTUzNkIxMkE1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPR+aF+p9lH+DdNd+3udjqrWIM+yLOJcusTxlfPEoKyClGNck1+9
vf0DqpQlRvXonuXC84p3LAyuuA2Bh027zttgOYCHmFNE5XRTNkKJBXYFQEWZ+Cit
BykoR4MuJxUnIioGnS94ebrUYJtipee4cnpMzZuW6vWHE/LY7bUnVnYYFU9q/gZL
eUTaFMizN1bR/8FRIxX9p/zA/ECtkyhH59F7jxWXRptT1n0d3VjZzV7c4sHbI/sW
NyBZD91+NUsUNJrp+WnbJyQpjDulsc37AEWiY4G7yFZl7I9TzlZk8vqgzR03hKR7
63FE2F9f9veLBL+Hr1pBjeZuVPGyTqleSH0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQrQ8uXA5eEzhL5EYNQsUZVNrEqVjAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvSzBQTGx3T1hoTTRTLVJHRFVMRkdWVGF4S2xZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADFhbjANBgkqhkiG9w0BAQsFAAOCAQEAM2zevxU5c99CjLYApXskZEDa17DO
PVW7oBuWSEuAb+OpZ3mr7vMaPzNhYOaWXo0PA2aQzNL46eYKxYsq5SLbE/74ODRc
3Pht2e6O9FX8xnIBv/2/67dIh3V51Q5wdAD2x5rRpMB8g4YuOEqWYTYGtIuV0J14
REbANq1RqkD/iHCFwV+xHIOYzoRKOyoXRqjAuUjWix0Loo+kCVArh34Kfd3/zK1f
Atqs7Fop6109Gcjjgb4Is9tSJIAwiz2/XxpRqO3AGlD1tLbvpHnmkgj4DKl5xX4i
XT9eIUKDbOAM5eZFx+tTqfAJCzP5bxPtx4SnDlOdVO2FUm0fmb0AtfRmGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org