Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa
File:                     Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa (raw, json)
Hash identifier:          CuuMxlJm2UlBunFUPzT+IraiNk6fPfvq5CPe/faj3Rg=
Subject key identifier:   3A:39:F8:7C:5A:14:99:52:55:17:DA:15:6B:99:59:E7:7B:1D:56:1B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa
Signing time:             Tue 06 Jun 2023 16:03:48 +0000
ROA not before:           Tue 06 Jun 2023 16:03:48 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:48 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3A39F87C5A1499525517DA156B9959E77B1D561B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:54:f4:33:0e:d8:a0:50:d2:f5:e1:e6:13:
                    46:85:cf:3a:df:59:98:0b:48:61:24:ac:48:8f:69:
                    9b:79:cb:0b:83:35:8b:72:3f:ac:da:a3:ec:3a:fc:
                    9e:02:05:20:5a:c5:50:a4:26:2b:14:4f:12:8c:7c:
                    de:62:8d:0d:44:70:6d:9b:50:44:e3:41:cf:67:09:
                    bf:95:be:d3:d3:13:ac:f9:47:be:59:d2:3a:76:01:
                    0a:2f:8b:22:4d:b4:f2:ee:eb:bd:12:49:5f:8a:79:
                    88:dc:d0:68:0a:c7:53:ac:d0:e2:4b:af:07:cd:f0:
                    1e:b4:d7:f6:39:ef:8d:58:ae:ec:e3:b7:c6:55:ad:
                    32:4f:62:02:46:7c:ca:96:9d:11:80:78:32:60:10:
                    21:9a:de:b0:3e:e1:30:9e:19:c7:89:57:9e:51:d4:
                    6f:c3:f8:81:dd:ad:aa:a8:7e:6f:c5:12:87:84:f8:
                    73:97:fc:34:e4:db:98:91:73:ee:d3:5e:20:77:2d:
                    66:65:61:9d:1c:09:97:e2:55:34:ee:27:b0:9a:05:
                    53:40:86:75:e1:c9:c9:cf:cc:96:55:af:04:54:93:
                    bd:72:05:fd:70:8a:40:92:a3:29:1f:21:e2:63:c5:
                    80:1d:17:92:2f:7b:15:64:f6:96:7e:20:8a:95:6b:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:39:F8:7C:5A:14:99:52:55:17:DA:15:6B:99:59:E7:7B:1D:56:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ojn4fFoUmVJVF9oVa5lZ53sdVhs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:19:53:e6:65:de:a5:70:ee:47:72:ee:2e:dd:fe:46:10:
         68:c0:e8:42:1f:33:48:75:c7:1c:68:2c:66:e7:ec:6c:f3:0f:
         c4:0b:3a:75:74:5a:05:2e:94:f6:6e:39:d1:52:6c:0a:e5:41:
         44:0e:d5:34:ca:87:02:0c:fa:d2:cb:38:f7:fd:52:6c:30:5f:
         c8:cf:ab:ce:96:a1:d7:b6:db:c0:0c:f4:6a:81:42:43:82:a2:
         75:29:c2:0c:d5:42:6f:2d:c3:c4:85:1c:07:8a:3f:fe:ce:e6:
         1b:0d:cd:08:1e:5e:fd:c8:3a:0a:ea:22:b7:4f:97:44:e8:bb:
         19:21:c0:b3:74:9e:7f:24:26:dc:b0:f1:ee:5a:f3:dc:cb:07:
         ec:17:63:44:8c:72:0a:ec:c2:5c:79:98:8c:d4:00:09:e1:7a:
         12:4c:3e:26:08:db:c8:b5:bb:a4:8e:33:d5:2b:d5:35:19:08:
         4c:40:57:3e:89:4e:df:5a:ed:66:be:8a:06:c7:e1:67:b9:d9:
         23:eb:6e:1e:38:12:18:f3:c7:8e:08:1a:12:e2:47:4d:55:64:
         83:13:61:5b:65:25:1e:df:66:bc:74:43:0c:08:18:44:5d:ad:
         df:5b:54:cf:f9:74:79:65:07:85:a1:13:c4:24:49:5b:16:55:
         f2:13:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org