Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LHqh7f2exfpHHtFl0DrQnOwJi1M.roa
File:                     LHqh7f2exfpHHtFl0DrQnOwJi1M.roa (raw, json)
Hash identifier:          2u7EOTAnJitAPVEOPIqmYFGQRZrCb3ByWj7IGNqPUwg=
Subject key identifier:   2C:7A:A1:ED:FD:9E:C5:FA:47:1E:D1:65:D0:3A:D0:9C:EC:09:8B:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0250
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LHqh7f2exfpHHtFl0DrQnOwJi1M.roa
Signing time:             Tue 30 May 2023 16:32:29 +0000
ROA not before:           Tue 30 May 2023 16:32:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2C7AA1EDFD9EC5FA471ED165D03AD09CEC098B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:2e:0c:4b:0c:58:4f:d5:52:ff:13:cd:08:
                    b1:8e:c4:06:55:88:6a:c8:7a:dc:c6:16:be:ff:05:
                    64:4d:b6:4b:37:b7:5e:57:8d:a9:c9:cf:66:53:18:
                    4e:26:a6:05:05:90:af:92:b4:c2:6e:f0:85:59:16:
                    1d:74:51:1f:c8:ac:a3:33:cc:e0:8e:5a:74:e6:f7:
                    4a:4a:10:e4:f0:aa:9d:07:5c:c1:df:45:eb:3e:78:
                    68:c7:8a:2d:c5:3d:a7:15:38:14:9e:96:41:49:b3:
                    c7:02:fa:7f:d7:fe:5b:bd:c4:3a:1b:d1:08:fb:ce:
                    f1:55:be:a1:51:de:27:07:4c:54:0a:ab:e7:bf:b4:
                    ea:f4:40:8d:76:32:e8:e4:90:01:6e:3b:26:17:1c:
                    15:29:a8:29:ba:44:f3:b6:cc:c3:e9:42:c1:65:f5:
                    9c:22:f5:c6:c1:6f:07:ad:89:7b:8d:36:95:16:eb:
                    59:46:e3:e5:db:83:9b:09:dd:0d:61:b4:92:c3:46:
                    20:a7:d7:e0:6f:29:e1:0d:8f:27:37:a0:b0:61:a8:
                    5d:ce:d5:0b:8c:f6:05:ae:63:53:81:01:cc:a2:04:
                    7d:ee:c5:87:12:b5:1c:ad:33:9e:e8:c6:61:f8:68:
                    eb:c5:39:da:e0:ff:05:00:55:09:9d:45:5e:63:48:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7A:A1:ED:FD:9E:C5:FA:47:1E:D1:65:D0:3A:D0:9C:EC:09:8B:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LHqh7f2exfpHHtFl0DrQnOwJi1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:49:6c:6f:81:eb:34:5f:36:d1:d0:9b:0b:1d:ec:ac:3c:a7:
         55:fe:ff:2b:e3:46:ff:f2:9a:b8:d9:0b:b7:a0:5e:08:4a:ed:
         43:18:5a:6c:66:16:76:e7:52:6d:8d:55:a5:42:08:b3:e5:e1:
         aa:99:fa:a6:fc:c3:fe:5b:cb:23:3b:5f:34:9d:9c:84:08:92:
         86:a1:73:bb:23:94:dd:70:12:6c:f3:7b:e5:bf:17:27:7a:72:
         09:4c:c1:dc:27:35:18:37:52:ad:e4:1b:c7:d0:73:d2:86:c2:
         ee:71:38:7a:16:f4:5e:8e:73:b3:d5:b5:55:b2:5a:c4:a3:bb:
         eb:a2:6b:e0:4e:8c:59:b8:8e:67:43:b1:9a:a4:85:74:4b:72:
         ca:bd:6c:0b:a5:9b:57:f5:8a:fd:18:05:71:98:80:0c:8e:93:
         68:01:f9:eb:6a:b3:fe:ac:59:68:a0:c9:9b:a2:c7:5c:85:10:
         03:8f:16:70:a6:91:4b:2e:06:bf:52:08:7f:75:ba:43:83:2c:
         6b:88:4c:ba:f2:ea:9b:b2:98:b1:33:aa:23:58:cd:da:ac:e8:
         c8:e3:6d:b3:2c:f1:4a:e5:e4:63:72:22:86:47:55:ae:71:28:
         da:4f:9f:cc:2b:56:93:7c:b2:cc:71:20:70:a6:5b:ea:1f:91:
         58:4a:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org