Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/P7xjxHHiiqZ21yqhyKhRLSJbgxA.roa
File:                     P7xjxHHiiqZ21yqhyKhRLSJbgxA.roa (raw, json)
Hash identifier:          go55znQVeXZNcdg1U6uZud/4kOOrcrShep4j/VMGuEc=
Subject key identifier:   3F:BC:63:C4:71:E2:8A:A6:76:D7:2A:A1:C8:A8:51:2D:22:5B:83:10
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P7xjxHHiiqZ21yqhyKhRLSJbgxA.roa
Signing time:             Wed 24 May 2023 16:02:17 +0000
ROA not before:           Wed 24 May 2023 16:02:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:02:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3FBC63C471E28AA676D72AA1C8A8512D225B8310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:74:78:eb:eb:44:81:59:45:f9:f3:0a:2c:
                    27:79:ec:b4:26:7b:26:42:0d:19:9b:0a:81:75:d9:
                    53:6c:7d:2d:b9:f4:01:34:ca:cb:61:00:49:44:14:
                    46:d5:7f:72:ef:33:ed:d2:29:b7:75:8f:57:7e:0d:
                    2f:55:9b:f7:9a:f3:d2:a6:c0:32:01:5c:3a:5c:c3:
                    da:ef:b8:89:00:5f:a9:a6:29:27:f9:77:f5:99:50:
                    7d:c5:6d:53:34:fe:3c:44:00:1f:13:7e:06:3e:ec:
                    60:49:5b:eb:df:da:eb:48:4f:54:89:9a:51:f2:20:
                    8c:d7:40:74:ca:cb:e9:0f:ec:0b:85:17:1f:71:b7:
                    53:38:41:b3:6d:4b:80:6c:9f:1c:c7:39:40:82:df:
                    08:81:eb:0d:48:75:6d:1d:69:bb:ad:17:0b:1e:fd:
                    00:2f:89:c9:21:a5:85:58:e0:2a:99:65:f5:00:f1:
                    05:b5:be:1a:2a:ec:54:85:20:ae:4f:64:02:32:e1:
                    a5:de:19:bc:b9:87:4d:30:59:90:a6:b3:d6:cf:cf:
                    42:fa:2e:b5:04:15:ad:f8:8e:77:77:c5:83:61:68:
                    e0:53:ce:da:ff:30:f3:27:69:38:cf:f9:26:29:3d:
                    a6:50:72:68:ac:4e:51:45:4b:8a:f8:39:bc:73:2a:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BC:63:C4:71:E2:8A:A6:76:D7:2A:A1:C8:A8:51:2D:22:5B:83:10
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P7xjxHHiiqZ21yqhyKhRLSJbgxA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:b1:7d:49:c3:f0:d8:ce:8d:fb:0e:3e:61:d9:94:3a:a4:eb:
         8e:34:de:b5:a0:c6:26:09:39:0c:49:6e:0e:58:79:44:66:1a:
         bc:37:f4:d9:16:2c:66:9f:23:2f:08:b1:58:a7:36:a8:6e:5e:
         fd:d8:ea:30:3c:69:fd:d0:de:66:b8:6f:b2:ab:03:72:e6:78:
         07:24:ac:95:37:ac:44:f0:56:69:43:08:2c:aa:65:e1:5e:dc:
         2a:0c:0e:67:a7:4c:58:2b:d0:44:51:ee:2d:20:66:62:8d:36:
         c5:8d:9c:62:c1:36:57:ee:5e:78:16:d7:64:d6:2f:55:9e:55:
         21:29:6a:a3:6e:a2:b0:1e:a1:8f:22:65:7c:e6:83:aa:75:8f:
         33:8b:de:fc:81:66:3e:1b:44:fa:8d:2d:ba:26:bc:cb:3a:b8:
         42:f7:0e:f1:bd:62:06:44:5e:6b:58:37:e7:8e:bb:43:bd:f8:
         ab:bd:e2:1f:e0:22:22:ff:e0:20:d3:be:bf:f2:99:25:29:1f:
         b7:b2:18:7c:d4:f4:89:54:09:da:f8:24:cc:11:6d:b5:1a:0d:
         ea:be:b3:75:76:65:92:28:73:fe:b2:9e:3a:a3:82:fc:4d:d0:
         b4:31:e8:f6:62:38:7d:cb:a6:da:51:fd:d0:17:ee:25:a1:0e:
         53:ff:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org