Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/P-U2eU4ADrg3ApbEXmGOsPY4vdU.roa
File:                     P-U2eU4ADrg3ApbEXmGOsPY4vdU.roa (raw, json)
Hash identifier:          w7mdS8QyBGxZ8/Iusfkw3V4mtkfMKZFkXHbfIORq+y8=
Subject key identifier:   3F:E5:36:79:4E:00:0E:B8:37:02:96:C4:5E:61:8E:B0:F6:38:BD:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       25
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P-U2eU4ADrg3ApbEXmGOsPY4vdU.roa
Signing time:             Mon 27 Mar 2023 16:02:01 +0000
ROA not before:           Mon 27 Mar 2023 16:02:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3FE536794E000EB8370296C45E618EB0F638BDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:6c:59:86:bf:32:e3:22:bc:cb:e8:31:09:
                    72:b2:ac:d6:6e:d8:ac:d8:6e:62:4f:36:a6:3d:58:
                    d0:94:ba:24:2d:86:d2:61:e3:f2:70:ca:e8:57:71:
                    1f:76:c2:70:41:f2:79:65:4f:f6:f8:3b:95:e9:eb:
                    0e:bc:ee:11:46:e7:dd:cd:02:16:ea:22:0b:e3:3b:
                    60:a3:bb:8d:69:68:cf:bc:b5:37:ad:bd:b8:51:84:
                    4b:0b:fb:97:3c:99:bc:b4:cc:05:e3:62:82:80:dd:
                    bb:94:7a:d8:8e:51:64:eb:2b:17:75:8c:56:0b:77:
                    31:e5:41:91:f1:87:0f:6b:c8:f1:94:04:3b:c4:f9:
                    b7:7a:74:2d:d0:24:12:88:91:36:72:e9:56:f9:a8:
                    93:5a:b2:58:6a:02:51:9f:33:80:9e:a8:d5:ad:a5:
                    c8:f6:e2:fa:70:87:d2:75:cf:02:e0:e3:1a:7b:6c:
                    a2:c0:1d:ae:ba:02:6e:2d:32:c0:ec:90:77:4d:54:
                    b7:4f:83:20:90:17:82:c6:84:f0:01:47:04:0f:a1:
                    12:67:d3:4f:0c:76:de:b3:55:dd:e6:ab:f7:ad:a7:
                    28:ec:50:2b:5a:52:1d:f4:bf:ab:15:0e:7f:ed:62:
                    51:67:15:9b:49:7f:b7:ec:7e:19:33:f7:b6:92:10:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E5:36:79:4E:00:0E:B8:37:02:96:C4:5E:61:8E:B0:F6:38:BD:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P-U2eU4ADrg3ApbEXmGOsPY4vdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:92:3b:7b:d0:ac:9d:25:99:6a:c6:1e:01:af:ff:55:64:d0:
         79:d0:a6:07:3a:cb:50:61:bc:a6:f6:ac:fb:5c:30:24:20:8f:
         6f:bb:72:ad:69:93:6a:fc:b2:96:70:1c:f8:3c:f1:31:3b:3f:
         67:cb:03:55:7a:d8:cd:0a:73:d1:55:d1:aa:a3:ac:88:ec:da:
         3d:57:73:60:d7:0a:9c:ab:63:c0:2a:0f:4f:5d:14:2f:3e:bf:
         40:6f:bc:cb:83:fe:2b:2d:bb:8f:27:f3:8b:9d:01:cb:2f:42:
         b5:a8:d0:bf:34:8e:17:38:d5:11:13:c2:06:16:8a:0d:c8:38:
         a4:49:fb:6b:18:86:2c:f2:51:17:4b:55:52:60:80:12:a6:7e:
         da:a6:89:92:39:41:e5:83:a2:dc:9e:eb:c8:39:b7:6d:03:95:
         38:61:18:c9:32:f5:97:fc:31:2d:fc:34:82:11:72:a3:b7:d1:
         aa:dd:af:f3:d0:7e:8a:57:83:c0:6e:2a:bc:90:63:ec:ec:ea:
         8a:e5:c3:c2:6c:d5:95:a2:3b:49:00:e3:3a:82:c5:eb:fd:9c:
         36:ca:f4:31:99:c8:80:77:23:02:32:96:96:01:7c:7b:3f:18:
         71:bd:cc:0d:db:70:ac:e7:09:cb:24:37:f4:51:a2:9a:c1:54:
         09:52:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org