Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M7W1UNcRWbcEFBa4nLqg2dlcQe0.roa
File:                     M7W1UNcRWbcEFBa4nLqg2dlcQe0.roa (raw, json)
Hash identifier:          nHeEL97nh7a7zSeckBtPqHBmMSF4KgXgtUNGkuB54i0=
Subject key identifier:   33:B5:B5:50:D7:11:59:B7:04:14:16:B8:9C:BA:A0:D9:D9:5C:41:ED
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0328
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M7W1UNcRWbcEFBa4nLqg2dlcQe0.roa
Signing time:             Thu 01 Jun 2023 16:07:27 +0000
ROA not before:           Thu 01 Jun 2023 16:07:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:07:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=33B5B550D71159B7041416B89CBAA0D9D95C41ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:88:0d:03:3a:61:88:a3:81:d3:61:7c:2b:
                    17:63:c3:f8:1b:93:b7:bd:da:e6:c6:b8:03:b1:82:
                    09:32:86:9c:cd:7f:13:80:6c:3d:56:4b:14:57:49:
                    a2:fc:1a:07:85:fc:c5:e0:e8:82:77:b7:11:4e:81:
                    75:cc:6c:2e:6c:21:10:f9:ea:67:07:28:fe:3c:98:
                    2f:de:43:90:94:a8:25:27:9a:78:74:ac:54:97:4a:
                    b1:69:be:37:2a:75:2b:e7:2b:b1:f4:33:ad:29:42:
                    27:bf:15:e4:77:cf:ce:55:87:0e:80:2d:ad:99:7c:
                    d8:45:0e:6b:84:32:1e:4b:dd:24:0e:7c:09:d0:90:
                    33:44:06:46:64:4e:b7:91:c4:92:4e:68:d9:9b:f9:
                    81:7c:f5:82:91:35:7c:cc:5a:c1:69:16:4d:c7:ee:
                    e9:d5:36:a2:21:ee:83:2f:ee:12:e6:41:7a:f5:06:
                    ee:a2:a2:06:26:23:bc:f9:4f:21:96:65:11:3a:2b:
                    d6:b0:71:ba:9e:46:d0:0d:22:8a:8b:e9:57:ec:cd:
                    09:61:88:46:f8:71:66:ee:ff:c4:b6:3b:ed:a3:65:
                    d2:67:73:80:df:c3:b7:db:d9:8d:07:0f:11:06:81:
                    4d:21:ec:3c:98:9c:6f:b3:b5:47:9d:0d:1c:63:f5:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B5:B5:50:D7:11:59:B7:04:14:16:B8:9C:BA:A0:D9:D9:5C:41:ED
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M7W1UNcRWbcEFBa4nLqg2dlcQe0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:4c:64:bf:08:c8:8f:55:d3:34:85:fa:7e:32:ba:17:fe:
         19:3f:39:4c:27:71:8e:7b:76:16:e7:51:65:81:a6:8b:47:df:
         1a:de:3c:80:e6:48:ff:91:18:05:c9:67:71:b2:14:a1:b2:6c:
         5c:68:31:2c:71:d2:07:75:d4:b8:ae:89:2a:26:3d:eb:e0:8b:
         1e:22:16:e5:1f:4b:fb:30:e2:ce:12:42:ba:8c:d6:17:4e:ce:
         66:47:7a:1f:ff:f6:9b:6f:1a:a4:1b:bc:00:e7:e1:81:53:2d:
         69:ce:a5:1f:93:c3:b8:c2:8b:cb:90:0f:11:ca:08:05:70:89:
         cd:25:07:93:6f:09:3b:60:9a:7b:56:da:64:25:6b:05:f1:fa:
         08:f9:bc:b5:4e:ee:35:ec:98:b8:7f:43:af:ee:0d:0e:c8:56:
         60:9d:8d:f4:b5:44:65:c1:2d:88:0e:d9:81:70:eb:68:d5:40:
         6b:e7:d9:bc:fa:3d:a4:21:74:99:e7:c2:19:45:93:6f:ac:7e:
         f3:3c:7b:6a:a8:bc:d6:9e:50:e6:d3:dc:a8:03:56:e7:a2:95:
         18:e4:b2:d5:cc:3e:d5:de:68:ee:a7:b9:ca:76:c6:cd:9c:81:
         25:87:ae:71:08:e7:cb:4f:84:c6:d1:f8:32:3b:3b:d3:55:22:
         cc:b8:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org