Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pq_3ThcmWadndlgUNcwl_jlhl7I.roa
File:                     Pq_3ThcmWadndlgUNcwl_jlhl7I.roa (raw, json)
Hash identifier:          TwKj/ukdXH5qbz9BZx3dInJhg2PMKgRgJ6A/vWPxFgY=
Subject key identifier:   3E:AF:F7:4E:17:26:59:A7:67:76:58:14:35:CC:25:FE:39:61:97:B2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pq_3ThcmWadndlgUNcwl_jlhl7I.roa
Signing time:             Tue 30 May 2023 17:17:34 +0000
ROA not before:           Tue 30 May 2023 17:17:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.160.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3EAFF74E172659A76776581435CC25FE396197B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:a6:5a:06:ff:a9:b9:0c:27:90:6f:74:92:
                    c1:d3:19:f6:2b:9e:de:0e:b6:88:50:da:f3:de:bd:
                    15:80:42:77:2a:b0:8f:83:a7:c4:bc:74:39:4c:93:
                    fc:45:77:61:de:49:c7:d3:fe:0d:a7:ba:4d:58:e4:
                    26:fd:ee:b7:da:2b:6d:24:7f:b6:1d:67:49:23:02:
                    b6:b8:10:9e:2b:ae:c8:39:ad:8a:d5:96:69:63:af:
                    b4:c8:c8:d8:1e:1f:3b:25:06:51:e8:57:7f:9b:7e:
                    30:2c:17:e7:20:8d:f9:61:d2:66:1e:80:b6:1d:1c:
                    2d:af:04:dc:d1:09:51:98:16:1c:b0:65:ed:f1:71:
                    d9:51:78:b9:bb:db:4a:21:2f:62:c2:67:46:76:e3:
                    b7:6d:f3:ac:ea:9f:cf:7e:0b:06:99:b6:fd:cf:c8:
                    6e:3d:88:b9:67:3b:f0:a2:15:52:d4:fb:f1:bc:3e:
                    09:d8:86:5f:6a:f2:48:3d:3e:b9:42:f8:06:76:d6:
                    29:40:fb:a8:61:49:33:85:83:ae:3e:3e:f6:56:56:
                    ea:7e:60:a4:d1:fb:18:a2:36:c6:fe:bf:7b:38:58:
                    f6:6d:ef:69:e5:0f:cc:66:a1:61:59:a8:8f:2c:44:
                    de:f3:51:73:60:c4:1a:4d:0a:bd:0a:b2:62:9c:db:
                    fa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AF:F7:4E:17:26:59:A7:67:76:58:14:35:CC:25:FE:39:61:97:B2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Pq_3ThcmWadndlgUNcwl_jlhl7I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:ae:a3:58:a7:a6:1e:86:1a:32:bc:83:dc:75:11:cf:16:
         ef:47:d7:a2:46:25:56:fc:e1:a6:47:75:77:74:a6:33:41:c8:
         d4:18:99:02:80:58:89:b1:83:e2:18:0c:d9:07:f7:3c:9d:3b:
         33:ef:c9:12:d1:2c:ee:df:a0:61:ab:39:98:7e:b3:9c:6e:ba:
         fc:70:f5:a8:80:eb:86:b4:3e:57:7f:15:34:a2:7f:bd:8f:d2:
         96:98:bd:39:cc:80:e2:49:03:a1:48:43:ad:63:04:ac:23:8b:
         1a:cb:88:9f:82:77:58:c9:b9:6a:44:0f:12:c9:35:f0:56:62:
         fe:06:82:a5:1f:ed:8e:6d:96:66:dd:13:48:7f:08:aa:97:1e:
         88:0c:f5:62:47:4d:86:b7:d7:f7:7a:41:8f:dc:56:15:5c:ba:
         63:f3:11:9c:02:1a:c1:56:5a:3b:55:f6:44:cc:9f:3f:74:13:
         58:95:74:d4:f2:50:93:8b:81:7a:f2:87:ca:2b:4b:73:c4:54:
         1d:e4:98:af:a7:36:0c:a1:4f:17:d0:5e:5f:83:8c:81:42:c0:
         e7:af:33:52:fd:0b:ad:64:c3:af:51:99:a9:24:d6:03:0c:ef:
         50:b9:1e:a3:ea:81:19:d3:67:9a:ad:b7:9b:cd:02:dd:2f:71:
         c1:1e:db:7f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICArwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NzE3MzRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNFQUZGNzRFMTcyNjU5
QTc2Nzc2NTgxNDM1Q0MyNUZFMzk2MTk3QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf6aZaBv+puQwnkG90ksHTGfYrnt4OtohQ2vPevRWAQncqsI+D
p8S8dDlMk/xFd2HeScfT/g2nuk1Y5Cb97rfaK20kf7YdZ0kjAra4EJ4rrsg5rYrV
lmljr7TIyNgeHzslBlHoV3+bfjAsF+cgjflh0mYegLYdHC2vBNzRCVGYFhywZe3x
cdlReLm720ohL2LCZ0Z247dt86zqn89+CwaZtv3PyG49iLlnO/CiFVLU+/G8PgnY
hl9q8kg9PrlC+AZ21ilA+6hhSTOFg64+PvZWVup+YKTR+xiiNsb+v3s4WPZt72nl
D8xmoWFZqI8sRN7zUXNgxBpNCr0KsmKc2/qNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPq/3ThcmWadndlgUNcwl/jlhl7IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1BxXzNUaGNtV2FkbmRsZ1VOY3dsX2psaGw3SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExZqAwDQYJKoZIhvcNAQELBQADggEBAJ/TrqNYp6YehhoyvIPcdRHPFu9H
16JGJVb84aZHdXd0pjNByNQYmQKAWImxg+IYDNkH9zydOzPvyRLRLO7foGGrOZh+
s5xuuvxw9aiA64a0Pld/FTSif72P0paYvTnMgOJJA6FIQ61jBKwjixrLiJ+Cd1jJ
uWpEDxLJNfBWYv4GgqUf7Y5tlmbdE0h/CKqXHogM9WJHTYa31/d6QY/cVhVcumPz
EZwCGsFWWjtV9kTMnz90E1iVdNTyUJOLgXryh8orS3PEVB3kmK+nNgyhTxfQXl+D
jIFCwOevM1L9C61kw69Rmakk1gMM71C5HqPqgRnTZ5qtt5vNAt0vccEe238=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org