Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OUrzU9XDrFiIEHBJHSsslFMmfp0.roa
File:                     OUrzU9XDrFiIEHBJHSsslFMmfp0.roa (raw, json)
Hash identifier:          TQEunzrteCTY0JmOwdWYTRwzbyPjqH01INmu66J930Y=
Subject key identifier:   39:4A:F3:53:D5:C3:AC:58:88:10:70:49:1D:2B:2C:94:53:26:7E:9D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       4C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OUrzU9XDrFiIEHBJHSsslFMmfp0.roa
Signing time:             Mon 27 Mar 2023 16:04:24 +0000
ROA not before:           Mon 27 Mar 2023 16:04:24 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:24 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=394AF353D5C3AC58881070491D2B2C9453267E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:2e:84:86:22:81:b9:7f:dc:0c:60:94:22:
                    10:ad:91:3f:16:e8:a3:db:31:af:4d:c1:d4:62:ad:
                    62:a0:d7:cf:54:2a:7f:4e:31:31:f1:17:13:12:b3:
                    35:ab:d6:59:ff:ec:bf:ed:7f:4a:ef:7f:dc:16:f1:
                    89:96:17:f9:a0:3f:43:97:5d:24:a6:cf:00:c1:c0:
                    f1:18:43:b5:c7:19:57:6e:91:d3:81:06:b5:7b:77:
                    16:a8:34:21:09:12:a6:36:21:64:5c:22:ab:b2:fb:
                    38:c9:a1:a6:b6:a6:bb:5a:1e:d0:21:09:30:fe:fc:
                    83:8f:ea:cc:60:a4:7c:b1:28:b1:13:f4:51:19:84:
                    8d:dd:3a:57:62:13:af:1e:a7:04:31:03:f0:3b:f2:
                    6f:a7:73:b8:ec:12:1d:16:18:1c:69:37:3e:92:6e:
                    35:fd:18:f7:87:c7:dd:49:48:ae:61:c3:d7:b5:6a:
                    f9:6e:50:f9:e4:99:9e:09:6b:77:56:2c:47:48:29:
                    e9:44:06:ea:5a:ac:0e:f5:d8:ed:8f:35:b7:d7:74:
                    95:4c:04:22:82:fc:44:9d:de:12:68:69:1c:e1:82:
                    ca:ed:a9:26:68:8c:41:0d:c6:47:41:b3:73:ee:be:
                    7c:c5:a9:c5:f3:96:5e:ec:b7:7d:e3:29:05:f2:71:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4A:F3:53:D5:C3:AC:58:88:10:70:49:1D:2B:2C:94:53:26:7E:9D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OUrzU9XDrFiIEHBJHSsslFMmfp0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:f1:12:39:ee:db:b3:6b:f2:64:42:de:8d:78:74:b2:d1:
         e1:3c:09:d4:32:68:f7:96:aa:85:c8:6a:05:7c:fd:ed:d3:2b:
         ac:1d:6e:88:d7:16:5c:e1:7c:7e:4b:49:d2:75:bb:da:ae:01:
         9c:91:fa:68:e1:44:67:9f:a2:69:3b:3d:03:ee:86:c3:f8:64:
         86:50:38:e4:3c:bf:cd:db:41:0f:a2:2c:31:eb:87:c5:ec:99:
         35:5d:f9:ee:b1:ff:15:a9:ed:a7:f2:ad:cd:54:01:bf:de:de:
         d3:ce:b9:08:9a:93:13:51:8d:0e:9d:e3:b0:d4:36:bc:c2:4a:
         b3:28:49:1f:cc:61:19:5a:23:43:5c:30:e4:b8:31:2a:ff:a4:
         21:6c:15:b4:fb:27:9e:8c:e3:cc:eb:98:56:c9:b5:d8:43:2c:
         5c:90:bd:f6:30:5b:04:dd:9a:8b:e6:a1:b2:12:ed:01:4d:bc:
         6f:5c:93:1b:5d:8d:20:e7:b5:7c:bf:0f:13:cc:82:1f:94:ea:
         e5:93:17:66:1e:65:79:45:7c:f6:be:90:ca:c4:36:c9:80:67:
         34:b4:bf:7e:71:e3:db:40:89:60:e2:2e:d1:17:44:d2:d1:10:
         ae:90:86:8b:63:82:5c:be:61:69:f5:f6:ae:2a:81:9d:1d:20:
         fc:ff:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org