Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L6Jpj5k7jxy78YKcZH-eCF-bTWs.roa
File:                     L6Jpj5k7jxy78YKcZH-eCF-bTWs.roa (raw, json)
Hash identifier:          5HdunUkia2UhGSCRJtq5ozyxwkQf/ZiZLtFlPFMmgM4=
Subject key identifier:   2F:A2:69:8F:99:3B:8F:1C:BB:F1:82:9C:64:7F:9E:08:5F:9B:4D:6B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0254
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L6Jpj5k7jxy78YKcZH-eCF-bTWs.roa
Signing time:             Tue 30 May 2023 16:32:30 +0000
ROA not before:           Tue 30 May 2023 16:32:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.118.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2FA2698F993B8F1CBBF1829C647F9E085F9B4D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:e7:26:82:f0:74:08:ee:a1:d4:13:49:e8:
                    d0:79:17:3d:8b:7a:b1:c7:0b:87:16:54:3e:8d:e1:
                    ef:bc:bc:e4:69:e8:91:84:9e:d3:ac:da:5c:5f:69:
                    50:85:02:7e:59:f1:35:67:8e:7a:51:3c:4d:97:61:
                    b1:af:75:cc:00:3e:e1:ab:d0:f5:c7:dd:a5:99:fb:
                    b6:e5:ec:c2:bb:4d:6f:20:21:b6:35:dd:d0:e2:5e:
                    84:03:a3:12:56:7e:68:60:5f:96:a9:8b:7b:0f:b5:
                    78:2d:3f:b8:2c:16:9a:37:d2:ec:cd:bd:62:87:c8:
                    f7:b1:76:d0:ea:0a:c5:67:59:1d:2e:9d:42:1a:b7:
                    4e:6b:1d:ce:f9:29:ee:62:a7:37:4c:4f:01:1b:4f:
                    f6:fe:9c:80:e1:70:37:0e:88:62:a5:c2:23:0b:64:
                    07:dc:34:9a:20:a0:2a:00:e4:8e:f6:c4:73:f6:09:
                    28:4c:9e:30:7d:58:79:b0:e4:16:ae:9a:a5:0f:79:
                    c1:d9:bb:90:a9:1f:71:01:89:93:42:34:b1:51:52:
                    26:66:86:ff:dc:87:d4:1f:76:9d:f9:5d:4a:54:ea:
                    aa:a1:e7:3b:82:90:7b:4d:db:b4:22:c8:51:eb:1e:
                    6b:f6:f3:b3:4e:1f:3e:c3:ca:ac:e4:0f:09:9a:5d:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:69:8F:99:3B:8F:1C:BB:F1:82:9C:64:7F:9E:08:5F:9B:4D:6B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L6Jpj5k7jxy78YKcZH-eCF-bTWs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:26:b7:90:e1:aa:7f:ee:7a:99:3d:31:d5:43:b6:96:cc:df:
         a0:96:18:00:ef:e9:1a:0f:05:32:57:f7:17:8f:aa:31:ac:ed:
         ac:a0:9d:d6:10:fb:b3:0c:b3:75:6b:0a:53:c9:ff:25:4e:64:
         70:f3:88:b6:d3:56:08:58:21:e7:be:a6:5a:29:b8:3e:4c:bc:
         4f:aa:e2:f0:77:89:89:02:68:a3:79:39:ed:3e:92:b3:72:bf:
         3c:fb:6d:3e:2c:4b:0f:4f:88:33:07:2c:fc:d2:11:f4:03:a2:
         5f:00:80:51:0f:b3:e1:b4:54:3b:37:ea:94:fc:46:f1:0b:1c:
         b7:63:29:95:33:0e:37:00:c0:00:ec:b0:1b:04:55:7d:91:f5:
         21:9e:43:ce:c7:e7:25:87:e6:68:63:9f:89:5a:9d:e2:ff:3e:
         1c:bf:f5:9f:4d:16:c0:d3:37:bc:99:10:79:41:0a:73:d5:90:
         69:21:dc:31:d8:4e:27:f2:68:56:18:32:20:b0:52:89:10:9d:
         d5:c2:46:4a:7e:65:a1:28:d1:10:6a:97:3e:da:7a:46:fc:c9:
         7a:c1:3a:fb:62:6a:07:b2:27:41:55:7a:be:d6:db:de:01:6e:
         27:57:24:5d:87:53:4b:84:99:c3:a2:fe:e9:99:8a:6e:4f:fd:
         7f:b9:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org