Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NV4Jl-abxXSaZ-zN9uOYJE6Hc0M.roa
File:                     NV4Jl-abxXSaZ-zN9uOYJE6Hc0M.roa (raw, json)
Hash identifier:          6Zu+tazhqPP1zICeEwuv6//YUVngN4woFgNu9zjcrfY=
Subject key identifier:   35:5E:09:97:E6:9B:C5:74:9A:67:EC:CD:F6:E3:98:24:4E:87:73:43
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       014E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NV4Jl-abxXSaZ-zN9uOYJE6Hc0M.roa
Signing time:             Wed 24 May 2023 16:31:16 +0000
ROA not before:           Wed 24 May 2023 16:31:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=355E0997E69BC5749A67ECCDF6E398244E877343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:bc:59:10:50:b6:66:d4:3a:d5:90:47:0c:
                    f4:05:17:60:cc:53:46:4c:c0:21:8a:0e:38:4d:c6:
                    f5:a1:45:2c:a1:a5:17:3f:cb:6e:bb:45:b4:c2:c3:
                    06:12:78:94:5e:d0:62:c0:7b:ec:33:cf:8a:04:3c:
                    91:bf:33:8d:6b:e8:a2:98:97:92:d2:33:f3:46:ee:
                    1b:87:7d:fe:0a:92:72:88:e2:2e:d8:39:09:9e:86:
                    6c:c3:73:6b:07:3a:4b:f3:c2:02:48:e5:a2:a9:10:
                    20:5e:27:80:7f:c6:61:37:a8:2f:a2:ad:50:7c:00:
                    a3:7d:01:c5:ad:da:46:5b:f2:aa:2b:29:01:64:38:
                    d0:40:d1:5d:9a:9c:b4:4c:3e:51:16:1a:2a:26:1c:
                    67:3c:f7:d7:a8:12:49:79:4a:50:81:c1:1a:59:bf:
                    09:0d:ea:2c:62:97:87:f2:9d:ab:8f:23:6e:d3:2f:
                    45:67:5f:b6:9a:c5:a7:2c:2f:aa:69:17:c2:c8:64:
                    1b:99:ec:08:f0:0f:3f:ea:81:6d:ee:78:a7:d0:54:
                    46:ec:da:d3:92:24:65:b6:3c:49:96:fe:5c:9f:6a:
                    6c:ea:6f:94:4d:9d:a3:ee:44:68:0b:42:4f:21:6e:
                    9c:48:f9:fc:1b:79:3f:31:35:c4:68:41:90:97:2c:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:09:97:E6:9B:C5:74:9A:67:EC:CD:F6:E3:98:24:4E:87:73:43
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NV4Jl-abxXSaZ-zN9uOYJE6Hc0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:0d:65:95:31:3f:28:43:93:74:82:3f:8d:58:4b:9f:ee:
         cf:19:d1:c9:8d:64:c2:03:ab:05:e4:7f:04:9f:80:85:86:8a:
         2b:0a:14:c1:08:e5:b0:7b:7a:b3:68:c9:75:02:01:fe:49:31:
         0f:07:16:42:19:10:bc:6b:74:ec:23:1e:dc:02:4b:5b:5b:69:
         5a:5b:e6:a7:23:1a:2b:00:dd:6c:89:18:f7:15:e2:c9:dc:55:
         ab:5d:5b:c8:32:e8:cb:43:be:3d:7c:f3:2b:e0:c3:63:79:af:
         98:21:9f:93:59:1c:43:2a:bd:6e:6f:44:d5:6d:bf:8c:7e:f8:
         24:49:9f:d2:2d:36:ad:75:c2:4f:6e:97:27:87:c1:e1:79:16:
         10:56:f0:bd:3c:57:06:ae:da:af:84:47:d2:1c:80:87:95:18:
         d3:7e:15:78:7a:c5:02:5e:89:a7:76:31:d9:1a:b6:d5:9b:a4:
         ee:0f:cd:be:a3:58:75:22:37:5b:71:ef:5c:d5:1e:0f:8b:c4:
         9a:b6:80:b7:0d:53:06:be:a2:d4:47:fe:f8:28:48:13:14:c2:
         34:7e:76:9b:dd:73:f1:a2:21:8e:44:43:cb:10:d3:d4:37:b0:
         69:fa:e9:44:36:ba:07:f3:d4:92:ff:8d:eb:61:a7:a0:00:56:
         6f:07:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org