Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NbEuE-MtyH5_nyyUe3N_ccRse_U.roa
File:                     NbEuE-MtyH5_nyyUe3N_ccRse_U.roa (raw, json)
Hash identifier:          u6O/ezx6rc8mF54+eDqg7shhVUIZ7PTSxhs2hMLq97o=
Subject key identifier:   35:B1:2E:13:E3:2D:C8:7E:7F:9F:2C:94:7B:73:7F:71:C4:6C:7B:F5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       29
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NbEuE-MtyH5_nyyUe3N_ccRse_U.roa
Signing time:             Mon 27 Mar 2023 16:02:02 +0000
ROA not before:           Mon 27 Mar 2023 16:02:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.92.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=35B12E13E32DC87E7F9F2C947B737F71C46C7BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:62:67:5f:34:91:95:95:72:fd:49:9f:03:
                    d6:25:6b:55:c5:c2:0d:49:80:17:78:12:c8:6a:5b:
                    52:b1:cd:ba:79:1a:50:73:02:30:5f:c1:36:f9:55:
                    e2:32:5e:07:2b:5d:08:d7:ca:b9:7a:70:b6:74:49:
                    c8:f4:8c:fe:62:bb:eb:54:ab:4c:17:37:dd:a6:fb:
                    7e:35:8d:c3:81:c9:25:09:05:a3:cf:d4:7b:f0:14:
                    9f:c9:d5:00:e2:cd:9b:90:0b:56:fc:06:42:6c:72:
                    27:74:0f:cb:17:27:d4:75:17:f7:96:2b:0b:25:81:
                    b8:a8:ec:57:2c:63:46:d7:40:70:eb:82:a8:65:d0:
                    04:1d:e9:e5:99:58:9a:38:49:d5:a8:08:ea:0f:57:
                    d0:a8:d5:f7:43:af:a5:80:c4:ec:c3:33:88:5b:c8:
                    08:ff:52:ac:f2:c3:f3:c8:ea:fe:7f:76:c3:d3:58:
                    eb:85:b2:a5:0a:50:47:d5:a0:b7:f8:81:ee:a9:b5:
                    2a:36:16:fe:d1:76:a6:1f:a7:1e:33:b9:7c:9c:bb:
                    47:7e:47:82:81:50:4b:9c:c9:82:d3:18:7f:d4:4a:
                    0c:51:f6:af:b8:44:1f:ef:74:85:58:3e:8f:89:cc:
                    74:a6:f8:36:e4:c3:16:34:f1:6d:5a:d5:38:44:15:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:2E:13:E3:2D:C8:7E:7F:9F:2C:94:7B:73:7F:71:C4:6C:7B:F5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NbEuE-MtyH5_nyyUe3N_ccRse_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:5a:b4:04:bf:40:ae:e6:56:6f:54:8d:fc:df:c4:c0:d3:
         7f:18:ab:38:26:c8:a8:27:34:dd:3a:ef:82:3c:c3:98:3b:ce:
         b1:5b:36:26:d5:8c:63:4b:2a:c7:f1:9b:fc:b5:cb:d9:7b:67:
         ce:c5:9c:fa:b7:85:b0:ea:52:bb:0f:fa:cd:a4:ff:77:64:2a:
         26:1c:8d:8a:19:aa:fa:78:48:61:54:f3:96:95:03:aa:8e:42:
         60:6c:14:46:db:a7:20:77:c1:26:f5:2d:c8:e9:36:e4:be:31:
         50:af:e6:75:39:fb:65:5c:4d:9b:24:76:62:f7:6e:11:1a:47:
         8f:73:f5:21:a4:a1:85:3f:a6:63:ce:dc:52:c9:43:98:a3:65:
         21:f2:f5:b0:b1:0f:1c:fe:35:e2:fc:7a:4c:2d:27:e9:d1:48:
         2d:39:01:69:6f:e9:61:6c:d6:55:ec:75:b1:4d:b3:53:d9:32:
         b8:ff:64:f0:6c:14:c0:70:f8:9b:9e:1d:75:34:8e:20:9c:8f:
         26:63:dc:f0:b4:ba:8d:68:53:92:93:7e:bb:83:ed:8d:e3:fd:
         e4:48:75:a0:00:99:6b:5d:03:13:92:78:79:32:91:0e:25:e0:
         96:86:16:ba:24:17:e8:bd:70:73:79:e8:2f:8b:d8:ee:d2:f1:
         8d:2b:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org