Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PHX3P50pIHf-70_-0ZjFXUn4Lo8.roa
File:                     PHX3P50pIHf-70_-0ZjFXUn4Lo8.roa (raw, json)
Hash identifier:          Ms5DS5pmwqJrfCWOn3QhRwvfWQ7F+dYqgIUCXhrnPqk=
Subject key identifier:   3C:75:F7:3F:9D:29:20:77:FE:EF:4F:FE:D1:98:C5:5D:49:F8:2E:8F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PHX3P50pIHf-70_-0ZjFXUn4Lo8.roa
Signing time:             Thu 01 Jun 2023 17:59:32 +0000
ROA not before:           Thu 01 Jun 2023 17:59:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:59:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3C75F73F9D292077FEEF4FFED198C55D49F82E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:a0:56:21:4f:81:cc:c1:92:62:08:e7:df:
                    62:42:58:54:a4:89:4c:ad:d4:1a:be:23:5d:a4:ac:
                    43:6c:44:33:f8:f1:e8:42:0f:90:b8:66:d4:6d:f1:
                    a8:0e:ba:32:91:76:0a:ac:6b:63:00:5d:a4:2e:4d:
                    f7:a2:c8:bc:b5:de:c8:7a:08:ec:41:a7:ff:2c:17:
                    24:06:e7:22:ed:0b:b3:28:c7:55:01:b9:b3:c2:fd:
                    98:a3:41:68:94:9f:47:1d:31:37:b3:a9:b5:b7:ab:
                    62:0e:e1:ce:5d:bd:5a:fb:48:25:fe:b4:1b:39:62:
                    45:f9:b5:e0:54:d1:00:07:56:10:42:26:e6:2d:bc:
                    f6:0b:89:5f:51:76:85:7d:0b:f6:39:c7:e3:82:3e:
                    82:42:fb:c5:fc:56:d3:cf:60:f1:1a:77:94:32:eb:
                    b0:eb:99:92:91:5c:23:84:a9:ee:90:c9:65:1b:43:
                    eb:01:6c:e6:d5:72:a4:30:1a:d6:c1:42:c5:cc:a1:
                    e8:69:44:17:77:ed:cf:00:fe:71:88:6e:41:40:70:
                    e7:aa:24:52:e7:ee:aa:60:91:fb:89:70:94:bb:25:
                    56:7f:e5:11:be:24:85:95:af:d3:fa:99:76:7d:cb:
                    f3:bc:fc:b9:37:16:3d:ea:6e:41:01:03:a9:5d:f1:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:75:F7:3F:9D:29:20:77:FE:EF:4F:FE:D1:98:C5:5D:49:F8:2E:8F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PHX3P50pIHf-70_-0ZjFXUn4Lo8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:28:6d:57:1c:42:3e:d9:7a:e7:8d:95:1b:bb:a3:95:84:17:
         80:28:1a:02:56:67:f9:12:e0:c6:2c:02:0b:e2:d0:29:62:2c:
         8c:c6:98:b6:8a:c1:65:cb:95:6c:7a:93:a1:1a:33:64:f0:90:
         35:03:32:d7:98:ca:4a:ae:91:ee:c7:4e:21:81:a6:67:b9:ce:
         58:10:aa:36:7d:11:9e:e4:c1:39:96:4f:75:b5:ab:7b:1d:ad:
         1b:46:b7:3f:ad:eb:d1:1c:ac:f2:cb:70:f8:c7:3f:c8:65:69:
         ab:54:47:ac:59:5a:e1:1a:45:43:f7:b3:f5:72:a9:9e:d4:77:
         8b:91:0a:6b:e5:e6:97:1c:71:3e:da:e5:fb:79:ef:1f:8d:8e:
         00:af:89:ae:96:c1:57:64:4a:87:aa:b2:53:6c:b8:82:c5:42:
         72:6b:3f:05:21:21:51:3b:2e:0d:d2:d9:65:58:b7:0b:a8:fa:
         4e:3f:2c:b9:2a:6e:3f:36:75:9c:49:47:f5:09:d6:66:2c:6d:
         cc:47:18:36:95:e5:7d:05:2a:75:29:25:ea:ec:ab:f3:03:78:
         e2:6f:9c:d8:6f:21:ad:a6:c9:89:ad:58:d2:be:ac:cf:95:f9:
         30:cd:4b:7f:53:78:bf:2b:ef:f6:bc:06:90:b3:02:cc:93:f3:
         73:4e:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org