Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LieMXZyDo-WaZ_mD_PIhy1BkWls.roa
File:                     LieMXZyDo-WaZ_mD_PIhy1BkWls.roa (raw, json)
Hash identifier:          BxrjLSotEf4d3A6ypbcBtSHJCO4bYZMWDsjH0GPimYk=
Subject key identifier:   2E:27:8C:5D:9C:83:A3:E5:9A:67:F9:83:FC:F2:21:CB:50:64:5A:5B
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       1B
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LieMXZyDo-WaZ_mD_PIhy1BkWls.roa
Signing time:             Tue 30 May 2023 16:29:29 +0000
ROA not before:           Tue 30 May 2023 16:29:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        148.67.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May 30 16:29:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2E278C5D9C83A3E59A67F983FCF221CB50645A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:06:84:f6:3e:f1:0a:8b:9a:60:fa:7b:ce:
                    1b:96:10:1c:26:b5:bd:4e:70:ff:ec:32:d0:77:92:
                    d4:b4:5f:90:03:e1:5e:0b:65:67:50:9e:d9:d9:48:
                    c9:f7:02:5d:fa:ee:2b:e2:c9:10:21:8e:60:33:23:
                    4b:1c:4e:3a:44:02:f7:36:c9:ff:f2:ea:6f:c0:16:
                    4e:4f:41:8d:db:33:e6:00:01:6d:12:f7:ae:5d:51:
                    d4:7b:e1:89:fb:e8:e0:88:bc:7d:d3:61:d8:5a:30:
                    19:e3:02:5b:cb:d3:11:0f:6b:27:af:5d:61:78:5c:
                    a9:f8:ad:a4:6f:bd:9c:1a:ae:17:58:12:65:9a:ac:
                    0e:7b:bc:bd:4e:b1:96:f7:75:30:48:1b:8c:1f:69:
                    e1:00:2b:36:50:de:32:27:ca:57:ff:ff:e5:9a:64:
                    a7:be:a2:57:ef:72:e6:1b:94:5b:b7:b5:29:44:d4:
                    fc:1f:ae:56:d1:75:3f:1d:7e:3d:cb:ee:5b:db:7e:
                    5e:bd:52:8c:65:da:06:5b:82:cc:46:a5:51:fd:27:
                    56:af:62:d0:14:5c:95:c5:0a:90:cd:1d:0f:e7:93:
                    43:d8:67:9a:49:c6:10:02:74:5c:2c:7a:3f:0f:e3:
                    e4:20:73:47:94:b8:6d:26:65:a6:10:98:f5:e1:8d:
                    4e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:27:8C:5D:9C:83:A3:E5:9A:67:F9:83:FC:F2:21:CB:50:64:5A:5B
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LieMXZyDo-WaZ_mD_PIhy1BkWls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:bc:3b:3d:0b:17:15:ed:dc:5e:2f:bd:98:a6:6c:87:81:
         b2:94:af:90:85:21:ef:74:8b:36:98:39:e7:76:83:c8:b6:05:
         77:0b:62:b8:73:f3:71:ac:4b:e8:e9:b7:0f:9f:85:d2:5a:77:
         ca:d9:ac:77:ca:d1:b9:79:65:ed:d9:81:17:00:9a:65:37:cf:
         f5:e0:be:95:92:e8:04:40:cf:83:d3:88:c1:79:97:05:d9:c1:
         62:91:77:77:ce:ae:bc:bf:c0:18:3f:f6:9d:82:a8:43:f5:1f:
         10:20:05:67:55:dc:7a:79:21:6a:32:94:ed:12:15:28:ac:b9:
         6f:0b:9d:b8:59:ab:67:ee:90:6d:2a:13:02:ed:da:0b:0f:37:
         c7:b0:fd:fc:a0:ad:51:9c:68:4a:62:0d:1b:33:2a:ea:16:9f:
         93:f1:5a:d5:eb:4f:94:6f:d5:b3:39:37:d1:8f:20:f3:3a:30:
         6d:28:42:0a:67:c6:94:69:e8:1c:fa:4a:4c:85:64:77:0a:cd:
         1b:d9:a5:29:9f:87:8d:cf:24:a2:6d:31:34:d1:a7:00:54:41:
         6a:cb:d6:4c:53:1f:4e:01:47:16:2d:ef:5a:45:e8:af:44:58:
         99:a4:25:b6:61:72:15:f5:14:4c:e5:b4:ac:ae:10:24:5f:51:
         c3:99:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org