Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NMP-UnL7B07c5WfwQrCbJJlGOR8.roa
File:                     NMP-UnL7B07c5WfwQrCbJJlGOR8.roa (raw, json)
Hash identifier:          gNMT8y8M5nghi7CBPZdC6pj5rPZj02smR+k77tuKlSE=
Subject key identifier:   34:C3:FE:52:72:FB:07:4E:DC:E5:67:F0:42:B0:9B:24:99:46:39:1F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0381
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NMP-UnL7B07c5WfwQrCbJJlGOR8.roa
Signing time:             Thu 01 Jun 2023 17:57:35 +0000
ROA not before:           Thu 01 Jun 2023 17:57:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=34C3FE5272FB074EDCE567F042B09B249946391F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:dc:70:0b:8b:86:c7:54:e5:c0:18:3d:8f:
                    42:cf:80:44:a5:1e:34:eb:35:da:20:b3:cf:05:af:
                    59:8d:b2:b8:e5:30:a3:93:8c:1f:e9:b6:b3:4a:a8:
                    82:6a:6e:95:9f:c7:c5:ff:0e:f7:e0:dd:1a:12:ee:
                    44:4c:36:81:4e:26:a5:f6:71:21:b4:88:ad:12:2a:
                    3c:3e:fe:f9:7a:f8:7c:b1:79:81:8a:9a:7a:19:5b:
                    31:2c:87:56:39:a6:bc:72:d8:1d:50:aa:a4:0f:10:
                    ab:31:1f:61:ea:8a:63:ee:74:8f:35:58:7e:fd:ba:
                    68:f7:14:7a:81:90:de:11:9c:6c:1f:b5:37:6a:66:
                    a8:1f:4d:7b:bd:69:d4:ba:38:06:76:69:9f:16:b7:
                    ab:a5:87:25:5c:5f:dd:14:7d:83:e6:8f:de:41:e9:
                    c3:04:9e:b6:86:7a:10:e6:48:6d:3d:1b:6c:17:df:
                    76:d2:3f:bc:6c:ca:ed:4c:56:1b:d6:6b:13:26:06:
                    36:40:a9:d4:5f:4a:50:f0:74:c7:d8:a2:9a:70:28:
                    d8:11:ff:8a:24:8c:2f:f6:ff:24:86:2a:2f:13:d7:
                    4b:6a:16:13:2f:12:e9:07:cc:ae:cd:82:e0:68:53:
                    de:c5:16:4b:e7:b3:cf:fd:44:6c:bd:bf:19:75:2c:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C3:FE:52:72:FB:07:4E:DC:E5:67:F0:42:B0:9B:24:99:46:39:1F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NMP-UnL7B07c5WfwQrCbJJlGOR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:44:b8:f6:53:f9:f2:ed:d8:a4:25:24:2e:59:5f:ac:70:cd:
         3e:24:48:02:3c:05:e2:2c:26:35:70:c9:dd:4a:65:5f:9e:ec:
         b4:22:00:e0:ee:83:36:35:bc:b0:89:47:80:75:49:e5:06:1d:
         76:f9:48:c4:cc:e8:7c:3a:3a:c9:fc:41:03:fc:6b:6b:d6:8c:
         86:b2:3d:f0:01:b3:cc:2b:1c:61:34:5f:42:97:5d:d1:f3:20:
         9c:4c:8d:f2:4b:c5:e1:92:54:72:c5:28:4a:b1:d1:f4:d6:8f:
         2c:5f:ca:61:f3:4a:58:84:6c:7f:92:6d:74:8d:7b:2a:46:13:
         bb:d1:d4:df:57:86:ea:e9:31:c6:d8:4a:7f:5b:31:f8:3d:ae:
         ec:29:e0:6c:28:ac:70:f9:1a:51:bb:51:26:ae:65:80:da:2f:
         88:a5:a7:6e:a4:d6:68:bf:4f:4a:5e:48:35:7f:23:0c:e4:87:
         20:5b:b9:70:ad:76:15:21:83:3c:97:14:88:e2:35:93:f2:da:
         a5:e5:4d:c4:e4:fc:e6:5e:7b:db:bb:bf:fa:27:ad:64:05:90:
         c2:a3:46:c6:98:3e:8e:f3:14:96:62:1a:14:66:c8:55:5d:3b:
         a2:ad:df:fd:f3:32:59:fd:10:14:59:2b:c0:fd:4e:20:fc:55:
         4b:de:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org