Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OrE2mo5iiyWvPLdX0ouazMefGfI.roa
File:                     OrE2mo5iiyWvPLdX0ouazMefGfI.roa (raw, json)
Hash identifier:          G1MF2v0PBQ9rmlaWBCDFTndNN+OCqF7k9IevTjq9YfQ=
Subject key identifier:   3A:B1:36:9A:8E:62:8B:25:AF:3C:B7:57:D2:8B:9A:CC:C7:9F:19:F2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OrE2mo5iiyWvPLdX0ouazMefGfI.roa
Signing time:             Wed 24 May 2023 16:02:19 +0000
ROA not before:           Wed 24 May 2023 16:02:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:02:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3AB1369A8E628B25AF3CB757D28B9ACCC79F19F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:e0:52:6e:e5:9f:13:e3:75:e1:f3:db:14:
                    9a:f1:48:bd:ea:0f:79:4a:b2:6c:c9:51:0c:1f:46:
                    f8:d0:c1:59:8d:00:aa:d0:1f:d9:0c:3e:67:20:98:
                    c7:45:55:d0:b7:85:06:88:ad:cb:b5:02:6e:b0:9a:
                    f6:4d:f0:1d:bb:07:8e:48:2a:0a:d5:5e:f0:3e:80:
                    81:2d:6d:13:d4:32:60:0c:84:e4:28:3b:fc:15:4f:
                    25:03:bb:1f:80:2b:b5:49:51:74:a4:c7:49:2d:5c:
                    9e:2f:ea:07:40:9a:c9:17:2a:00:30:6c:af:c3:b4:
                    09:38:99:97:93:ca:fc:91:99:64:a3:39:f0:ca:2a:
                    00:67:58:80:ba:a0:3e:0d:d6:68:ea:31:2e:9f:d9:
                    e4:6c:63:e0:e7:d8:c2:af:90:79:32:0f:73:05:cc:
                    55:f3:e0:da:b0:16:d6:8d:bc:6c:38:2d:fe:6b:ea:
                    3f:cb:88:a4:09:c8:3a:58:71:8d:30:82:6d:21:d6:
                    8c:4b:1e:28:26:3f:16:b7:10:13:e5:24:d6:2c:c5:
                    3b:a5:c1:83:a0:de:be:c5:69:22:31:64:ad:08:29:
                    0a:c6:ce:b1:61:2e:86:fe:38:5a:b0:c0:65:43:63:
                    3e:b2:cc:12:82:a6:af:8a:0f:5f:af:7d:8c:c9:70:
                    72:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B1:36:9A:8E:62:8B:25:AF:3C:B7:57:D2:8B:9A:CC:C7:9F:19:F2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OrE2mo5iiyWvPLdX0ouazMefGfI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:e8:68:cc:a7:2d:c4:90:6e:b5:a8:28:7b:23:7e:dc:ee:
         91:e6:c4:f2:5e:76:6a:cd:e8:e2:4b:cd:d7:68:e7:93:90:ef:
         a3:f1:7b:7c:8e:3c:b8:19:68:ed:2c:be:48:60:3c:d4:99:f7:
         f9:05:2a:37:54:da:27:0a:6e:8b:a3:23:eb:c2:bf:47:a0:35:
         de:d5:ee:28:94:b4:8f:e3:5b:34:5d:fb:a1:56:8d:83:6c:95:
         5b:95:19:e6:97:00:d2:9e:34:eb:1b:1d:5e:9b:ce:17:1a:b9:
         5e:29:e2:fd:9a:aa:be:d3:40:76:e7:7a:87:74:90:e6:3a:97:
         65:64:c1:f8:90:46:d0:0c:cb:a6:31:ce:bb:c4:1f:30:ed:3a:
         e7:d0:0f:42:38:c7:14:63:6c:3c:5b:4a:ff:21:2d:f6:21:2f:
         c7:7f:fa:58:4a:30:da:d3:e2:6b:9b:12:f4:43:f8:ba:cd:25:
         b4:0b:29:d4:e5:b9:d8:e6:8a:fa:45:b7:3e:44:3e:8b:0f:a7:
         2d:df:30:b2:ac:b9:20:67:c8:cc:db:e8:e8:9d:43:2e:ed:39:
         8e:83:5f:76:00:f8:50:35:c3:d0:08:88:52:94:36:28:70:d5:
         7b:93:4f:97:aa:2b:62:c0:4a:96:e3:d6:99:47:43:0d:81:52:
         8a:33:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org