Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQo0S8WsHpCiCI2sfj31gcJurWY.roa
File:                     PQo0S8WsHpCiCI2sfj31gcJurWY.roa (raw, json)
Hash identifier:          kUMywCuyvcH6QoAIt5N5g0DAQKZwWXfrMGiu1qLMaeg=
Subject key identifier:   3D:0A:34:4B:C5:AC:1E:90:A2:08:8D:AC:7E:3D:F5:81:C2:6E:AD:66
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQo0S8WsHpCiCI2sfj31gcJurWY.roa
Signing time:             Wed 24 May 2023 16:03:12 +0000
ROA not before:           Wed 24 May 2023 16:03:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.170.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:03:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3D0A344BC5AC1E90A2088DAC7E3DF581C26EAD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:38:8f:03:f3:63:e5:a9:5b:56:af:69:00:
                    18:4a:1f:d2:94:03:30:3e:f8:6a:9a:a8:53:9b:cf:
                    9c:a0:f4:e0:b0:58:b0:b9:82:44:a1:23:80:bc:62:
                    7e:ce:33:4c:e6:58:8e:3b:f5:dc:b6:95:60:f6:a4:
                    c7:f2:b6:4b:c3:58:84:98:b6:61:d7:c8:56:b7:94:
                    94:f9:5a:f6:53:5b:dc:9c:99:7a:2a:35:8a:08:d8:
                    af:cf:7d:d7:6d:7f:fb:e1:bc:5b:bb:e4:ce:07:f6:
                    96:31:95:4e:57:91:89:00:22:9d:6f:8b:ad:c3:9a:
                    25:5b:aa:df:43:ff:2d:38:04:8f:c4:6e:fc:9f:c4:
                    37:aa:0d:a2:ae:4c:5a:7f:34:0f:10:9f:27:17:07:
                    71:67:c1:5b:84:8c:1e:24:db:32:a0:39:a1:31:a8:
                    b8:1e:5a:37:0f:25:60:47:b9:29:e7:93:b9:e3:3c:
                    62:42:67:7f:79:fe:3b:83:19:60:28:19:f1:c6:c9:
                    73:eb:31:ad:3e:1f:3e:08:36:15:66:b3:23:22:ed:
                    1b:c5:13:16:c2:b1:e8:9f:bf:f1:4c:40:19:8c:8b:
                    72:2e:b5:ed:f9:5c:a0:3e:ee:44:8f:4d:bb:b8:59:
                    d2:21:b6:1e:a8:40:0e:f3:d3:81:72:28:b7:44:25:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:34:4B:C5:AC:1E:90:A2:08:8D:AC:7E:3D:F5:81:C2:6E:AD:66
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQo0S8WsHpCiCI2sfj31gcJurWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:ae:98:a4:41:c0:e6:8e:c0:31:b1:29:ae:10:1c:4b:45:
         fa:bf:43:af:0b:68:ab:59:3d:79:b1:7c:ef:9c:9e:9b:ae:62:
         fa:2b:f3:8e:6b:88:89:5d:21:3f:1e:3c:d3:00:a5:fb:be:0a:
         af:25:33:61:8e:2f:9b:a8:ac:dd:e8:82:19:d9:59:69:ef:42:
         58:93:a2:2f:04:0c:8f:4b:ae:1a:a0:43:6f:c5:45:d2:1d:15:
         29:bb:9b:85:3f:14:9b:d8:8a:e0:da:e1:1a:8a:de:17:52:8b:
         9c:2e:22:ee:77:f6:99:09:c4:15:3f:cd:4c:c4:38:ba:b9:22:
         79:ba:a5:80:32:e9:ca:f6:3e:2c:6d:a5:4e:08:55:fc:81:27:
         9c:89:b0:ce:89:77:e4:78:b2:82:68:39:8f:ad:30:78:4a:8a:
         b0:08:64:35:89:e8:85:03:cb:1d:d9:f5:fe:b7:b4:b2:68:69:
         39:3f:d3:2b:96:82:bc:b7:c9:5a:ae:f9:ed:75:35:96:7d:93:
         44:d7:95:cd:ab:23:1e:2b:85:d7:73:85:5a:27:6b:31:fb:f2:
         2a:ce:07:02:f6:8e:18:88:a7:d2:09:b3:d6:54:54:a6:5e:a7:
         5f:b3:f8:6c:e8:1d:c6:5b:ac:51:b1:79:a3:c2:e7:e5:d6:0e:
         9b:3a:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org