Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpRg0cRnPhbYbbMNo7Pf5qdBxXM.roa
File:                     NpRg0cRnPhbYbbMNo7Pf5qdBxXM.roa (raw, json)
Hash identifier:          6ZHwuT54QmL/7FCztkOFmboCFbeC0petyxlmQ/DZ8gw=
Subject key identifier:   36:94:60:D1:C4:67:3E:16:D8:6D:B3:0D:A3:B3:DF:E6:A7:41:C5:73
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpRg0cRnPhbYbbMNo7Pf5qdBxXM.roa
Signing time:             Tue 30 May 2023 16:36:36 +0000
ROA not before:           Tue 30 May 2023 16:36:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.206.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=369460D1C4673E16D86DB30DA3B3DFE6A741C573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:21:9a:97:95:24:ad:04:f0:e4:87:1d:b2:
                    66:41:c8:3e:96:0d:8a:f6:2e:2b:4c:d1:2c:64:01:
                    1c:0e:26:81:05:1f:70:a4:34:bd:b4:06:01:1b:38:
                    29:0b:bc:93:be:b2:4d:8d:e6:8f:a3:28:89:35:b9:
                    90:2b:25:3d:3e:26:50:7e:9a:d2:49:53:d0:17:f7:
                    18:5c:12:34:c7:92:83:d2:72:5c:63:41:a3:89:f5:
                    a7:3c:ec:30:dc:cd:e4:bc:c8:8f:3e:89:8f:d1:4c:
                    d3:48:c0:24:17:34:8b:41:0a:4a:81:61:74:92:bc:
                    49:d1:04:85:4d:26:ab:7f:50:18:b0:11:a0:86:4f:
                    1d:82:83:01:f6:88:bd:9b:87:82:4c:31:8f:51:76:
                    ab:4b:09:4b:4d:2e:3f:10:7d:11:7e:59:3e:50:5d:
                    17:5c:80:b5:64:98:09:78:93:ae:c6:fc:42:fb:0c:
                    4a:c8:53:24:af:ab:b5:18:a9:b2:a6:1f:15:71:f5:
                    e8:df:16:36:ac:29:ac:7f:5e:54:78:f8:67:fc:4f:
                    74:6d:a5:87:5a:7e:82:cf:1e:02:39:74:da:84:7a:
                    f4:6e:84:a3:9b:c4:a8:77:78:66:67:a3:44:ac:02:
                    98:ec:18:97:97:08:76:63:4c:33:98:a5:bc:e5:f6:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:94:60:D1:C4:67:3E:16:D8:6D:B3:0D:A3:B3:DF:E6:A7:41:C5:73
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpRg0cRnPhbYbbMNo7Pf5qdBxXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:04:ac:e5:3b:1e:88:7a:31:2a:d6:77:fc:4a:0c:66:40:
         86:b7:51:c0:ab:e6:82:d0:9a:46:ce:b0:89:bc:66:bd:52:3f:
         e6:64:cd:be:22:94:1d:eb:c5:c3:fb:b2:76:b4:6b:81:69:70:
         34:f0:c3:f5:bb:bd:fd:b0:9b:44:de:40:2e:2b:4c:b4:07:b6:
         9e:70:68:6f:47:9d:82:f8:d8:6d:ee:47:57:21:81:7e:92:50:
         d4:ee:8b:b3:73:a5:95:c5:ba:6e:ba:96:91:41:8a:95:6a:3d:
         ae:8a:fa:5b:c7:a8:4a:7c:18:0c:ce:0f:f4:53:14:b1:21:6e:
         22:c4:ac:f7:97:f2:99:6f:2f:36:19:31:30:86:39:d1:98:7c:
         30:2a:98:7e:de:65:21:a4:3b:24:ec:f9:32:ca:6c:66:45:14:
         f9:68:be:46:0f:98:5c:fe:2b:3b:63:ee:da:05:0d:0c:f7:85:
         bc:ce:07:8b:b9:c8:8a:a2:da:b3:de:21:07:17:f0:68:27:0e:
         e6:2a:9e:67:12:63:73:00:6b:46:59:7b:23:9e:a4:0d:94:ec:
         c6:a6:a5:23:00:69:6f:c2:19:b3:3d:9f:0f:e1:b3:38:5d:51:
         74:d6:e1:6e:ab:f6:62:80:de:63:fb:58:64:ce:63:c2:f0:61:
         cf:5e:db:63
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjM2MzZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM2OTQ2MEQxQzQ2NzNF
MTZEODZEQjMwREEzQjNERkU2QTc0MUM1NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwLiGal5UkrQTw5IcdsmZByD6WDYr2LitM0SxkARwOJoEFH3Ck
NL20BgEbOCkLvJO+sk2N5o+jKIk1uZArJT0+JlB+mtJJU9AX9xhcEjTHkoPSclxj
QaOJ9ac87DDczeS8yI8+iY/RTNNIwCQXNItBCkqBYXSSvEnRBIVNJqt/UBiwEaCG
Tx2CgwH2iL2bh4JMMY9RdqtLCUtNLj8QfRF+WT5QXRdcgLVkmAl4k67G/EL7DErI
UySvq7UYqbKmHxVx9ejfFjasKax/XlR4+Gf8T3RtpYdafoLPHgI5dNqEevRuhKOb
xKh3eGZno0SsApjsGJeXCHZjTDOYpbzl9vEpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNpRg0cRnPhbYbbMNo7Pf5qdBxXMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L05wUmcwY1JuUGhiWWJiTU5vN1BmNXFkQnhYTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAG3S84wDQYJKoZIhvcNAQELBQADggEBAGNMBKzlOx6IejEq1nf8SgxmQIa3
UcCr5oLQmkbOsIm8Zr1SP+Zkzb4ilB3rxcP7sna0a4FpcDTww/W7vf2wm0TeQC4r
TLQHtp5waG9HnYL42G3uR1chgX6SUNTui7NzpZXFum66lpFBipVqPa6K+lvHqEp8
GAzOD/RTFLEhbiLErPeX8plvLzYZMTCGOdGYfDAqmH7eZSGkOyTs+TLKbGZFFPlo
vkYPmFz+Kztj7toFDQz3hbzOB4u5yIqi2rPeIQcX8GgnDuYqnmcSY3MAa0ZZeyOe
pA2U7MampSMAaW/CGbM9nw/hszhdUXTW4W6r9mKA3mP7WGTOY8LwYc9e22M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org