Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OMuS3jTWQkvpAAroueS5_3I-_bA.roa
File:                     OMuS3jTWQkvpAAroueS5_3I-_bA.roa (raw, json)
Hash identifier:          s+EcFoeyHFbWrDt1MsU5Tjb+LbQ8fqaqSAbCOteOmFU=
Subject key identifier:   38:CB:92:DE:34:D6:42:4B:E9:00:0A:E8:B9:E4:B9:FF:72:3E:FD:B0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0131
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OMuS3jTWQkvpAAroueS5_3I-_bA.roa
Signing time:             Wed 24 May 2023 16:30:22 +0000
ROA not before:           Wed 24 May 2023 16:30:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=38CB92DE34D6424BE9000AE8B9E4B9FF723EFDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:2a:aa:15:12:e7:81:c2:b1:58:a3:01:c9:
                    9e:c1:83:54:41:47:d5:3b:4c:f6:e3:f4:61:17:df:
                    07:89:d6:74:6a:fa:e7:55:be:29:a2:c5:76:9e:a4:
                    72:13:68:30:68:8b:17:98:31:31:7c:c7:48:79:b5:
                    f1:32:85:01:24:5a:eb:36:b8:3b:15:9f:07:f2:c4:
                    f3:d3:dd:71:37:1a:e8:4b:b6:59:c9:c0:72:4c:0b:
                    11:71:24:6b:11:61:a1:5f:ca:a6:69:d9:bd:a2:6e:
                    f1:76:12:cd:09:fb:47:f9:61:3a:75:1e:89:56:08:
                    84:9d:f2:ef:21:b4:96:ca:ee:09:0c:a6:36:6d:bc:
                    50:ba:8b:b8:05:13:f6:ce:f6:db:da:89:5d:90:a9:
                    44:b5:a6:4d:47:d8:a1:58:77:79:22:d8:1f:04:a7:
                    35:48:c7:c4:94:b5:15:4e:4b:ff:3a:2d:ec:5a:96:
                    78:44:d3:c0:43:fe:7a:40:5d:57:b1:25:7c:e8:7c:
                    ab:b3:bb:3e:59:08:6b:7f:50:27:d6:2f:e1:89:14:
                    34:b9:bb:80:92:fa:ce:f7:48:ee:6a:fc:07:34:d7:
                    0c:70:63:32:94:6d:a8:87:e1:d9:8d:51:72:35:e9:
                    cc:8f:01:8d:b1:fa:01:0f:0c:ef:71:33:46:80:90:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:92:DE:34:D6:42:4B:E9:00:0A:E8:B9:E4:B9:FF:72:3E:FD:B0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OMuS3jTWQkvpAAroueS5_3I-_bA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:81:d5:06:29:d6:7b:09:c1:e2:f1:a0:42:be:de:23:18:ee:
         78:6b:b5:0e:1d:45:bc:8a:37:2e:fc:62:b0:6c:18:fb:c8:53:
         0f:73:1d:83:71:ae:e1:2f:56:6c:c3:15:57:61:d5:ff:44:f2:
         ba:91:a2:79:83:58:71:c8:9e:6c:0e:c7:33:30:94:6a:91:cc:
         15:5f:d3:f6:8e:71:88:bf:45:de:70:92:29:f4:20:b9:05:92:
         64:9f:e0:11:e0:e5:da:cf:54:96:b5:3f:5a:ed:db:05:81:e6:
         b6:a0:ca:5e:d6:7a:35:9e:49:49:e3:fe:ba:e5:bb:22:a3:8f:
         97:ce:db:e7:51:f5:de:3d:10:4f:5d:ac:0a:8a:09:4a:dc:ad:
         90:55:e8:27:c5:55:a0:45:7b:8b:52:39:d3:46:bc:fd:4f:a6:
         3d:3a:06:8e:66:1c:f9:70:31:13:25:d6:61:05:de:33:86:0d:
         d3:98:98:e8:d3:a5:13:5c:f9:b8:14:63:ba:5e:19:80:fe:c4:
         b4:b4:2a:cd:60:bd:67:5c:b5:46:cc:7a:b3:19:22:ac:92:33:
         2c:98:6d:8a:7e:c9:6b:55:6d:b2:1f:34:e8:f4:f2:15:1b:18:
         0b:ac:b7:4f:fd:09:91:13:b8:cd:27:64:72:59:e2:8b:e2:ab:
         28:9a:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org