Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MRPS08pfPh9dT1YpbTrRnZRgdCc.roa
File:                     MRPS08pfPh9dT1YpbTrRnZRgdCc.roa (raw, json)
Hash identifier:          gqIoBry4ZzqelRixEOOYQeCIcLHqAIGSMxvUHxoafUI=
Subject key identifier:   31:13:D2:D3:CA:5F:3E:1F:5D:4F:56:29:6D:3A:D1:9D:94:60:74:27
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02EE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MRPS08pfPh9dT1YpbTrRnZRgdCc.roa
Signing time:             Thu 01 Jun 2023 16:04:36 +0000
ROA not before:           Thu 01 Jun 2023 16:04:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.48.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3113D2D3CA5F3E1F5D4F56296D3AD19D94607427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:5f:be:9f:9d:2b:3c:28:3c:58:43:aa:92:
                    1a:6e:85:ce:19:48:54:8d:7b:d3:ac:77:e0:0c:e0:
                    08:3d:58:68:fd:bf:8e:7b:95:43:1b:b1:c2:96:0f:
                    99:f8:a3:97:d3:20:18:9e:1b:90:e4:c5:86:85:2e:
                    4c:af:34:24:d2:35:b8:18:43:6a:d6:62:cc:2b:7a:
                    16:1a:55:08:2c:10:92:a3:2a:7d:69:d4:ba:9d:12:
                    6d:04:1d:a4:bf:cf:e6:1c:9a:57:ca:58:13:6a:df:
                    8c:ae:60:e0:99:6a:ba:72:21:10:0a:0c:e5:7f:d4:
                    95:f2:b0:50:0f:27:e2:63:e4:ba:ae:67:06:97:6a:
                    6a:be:ad:6f:b0:9d:ba:a4:63:f3:d9:c7:bb:53:4e:
                    95:2e:05:03:89:ac:50:15:d0:e6:f8:cd:e8:83:e8:
                    34:b5:a4:1d:c3:ab:83:54:3c:96:0d:e1:a8:ff:03:
                    2b:9d:00:73:52:d3:f8:67:dc:01:bc:35:3f:d7:e8:
                    ed:a1:e2:4a:79:c2:ac:71:d4:85:5d:a2:1a:ab:0d:
                    31:db:a0:f0:dc:75:e4:12:6d:ef:99:19:3e:f9:97:
                    51:bf:4f:5f:b3:8f:9b:53:36:9d:fe:0e:97:41:15:
                    4a:42:9a:3b:fa:54:95:c7:bf:de:b2:10:ab:91:c4:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:13:D2:D3:CA:5F:3E:1F:5D:4F:56:29:6D:3A:D1:9D:94:60:74:27
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MRPS08pfPh9dT1YpbTrRnZRgdCc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:25:26:5a:2e:a5:d2:65:99:9b:46:c8:45:71:58:f4:d6:b6:
         e1:bb:8b:8c:b4:59:fe:43:97:80:02:39:42:9f:ee:51:c1:06:
         4a:ef:7b:db:27:22:ac:7f:6e:2e:3f:3f:b1:11:e3:60:75:cb:
         2d:56:cf:8f:d9:87:cd:83:7c:a7:48:e2:d9:15:74:f0:f0:35:
         56:07:f4:90:46:be:24:7c:8a:ea:8f:0b:2c:ec:f5:4c:08:21:
         2f:f0:3e:05:78:94:57:d5:b1:c4:15:66:29:7c:f3:5e:dc:d4:
         74:d3:a8:5e:0a:5a:48:d1:fb:06:21:36:bd:80:9f:71:22:b0:
         a8:e0:a1:b6:db:3b:86:92:ce:50:59:ea:f6:cd:07:e5:55:5b:
         1e:c8:0e:f4:dc:5d:3c:ed:da:32:01:dd:9a:7d:1b:53:45:b8:
         70:42:0f:f0:80:b5:3a:02:fd:32:88:64:f9:b4:ec:ee:58:cf:
         81:25:d7:6d:b2:25:07:7d:61:5d:6f:91:1b:bc:5d:3d:cd:3c:
         92:c9:99:f2:f2:62:9d:0b:96:dd:d9:6f:e9:71:b6:d4:9a:19:
         84:1c:de:da:9d:cc:62:80:51:4c:82:38:32:f7:3d:9e:b6:f8:
         b8:95:3c:ef:ad:53:6c:3b:21:3b:f3:8c:d7:9f:5b:bc:a1:76:
         0d:fa:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org