Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SZUpOJom4R2OWEXxe7dV1RZl_4M.roa
File:                     SZUpOJom4R2OWEXxe7dV1RZl_4M.roa (raw, json)
Hash identifier:          nv5u/Jq+zKlcHbG17uJe3EieoRh7hE/AGaK604Y+x/o=
Subject key identifier:   49:95:29:38:9A:26:E1:1D:8E:58:45:F1:7B:B7:55:D5:16:65:FF:83
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0165
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SZUpOJom4R2OWEXxe7dV1RZl_4M.roa
Signing time:             Wed 24 May 2023 16:33:15 +0000
ROA not before:           Wed 24 May 2023 16:33:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=499529389A26E11D8E5845F17BB755D51665FF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:2d:e9:b2:e4:5c:77:16:86:1d:b7:55:73:
                    a2:59:7a:64:a2:f7:21:17:f7:8e:91:e1:a6:ae:84:
                    1d:de:0e:eb:b8:17:37:99:de:f6:13:7b:d5:c4:37:
                    29:77:04:b6:20:cb:4a:48:e2:d4:82:a6:c0:74:bc:
                    73:84:b5:9b:f7:7b:35:5d:09:66:74:dd:21:b7:d0:
                    48:6f:39:94:84:72:e1:b9:0b:fb:85:a7:9d:9a:04:
                    d6:f0:95:95:cf:c0:04:d2:f5:d5:7f:83:82:3c:e5:
                    f8:35:fb:7c:27:3a:42:0a:eb:8c:88:75:24:a8:fd:
                    75:04:51:dd:b0:5b:5c:69:d6:ce:28:fb:88:49:75:
                    aa:57:64:86:c0:c7:1c:5f:ba:5d:62:bb:09:15:0b:
                    44:4d:b5:ff:c1:b1:1a:a2:ad:ed:b0:e2:49:5d:47:
                    2c:aa:9a:16:48:53:e8:b8:a3:74:77:26:fb:c6:6f:
                    eb:a3:01:20:35:17:d0:81:06:3e:48:33:47:a7:82:
                    8d:9b:16:fe:eb:8a:ff:78:58:bb:91:2f:9b:a7:d2:
                    2a:7d:20:fe:7f:e6:13:ed:01:2d:a3:89:d0:f2:cf:
                    d0:29:be:47:6d:a9:f3:b1:2f:2c:95:05:a9:5f:ef:
                    f3:d5:99:9d:9d:a6:32:de:b0:70:b9:85:13:e9:7a:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:95:29:38:9A:26:E1:1D:8E:58:45:F1:7B:B7:55:D5:16:65:FF:83
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SZUpOJom4R2OWEXxe7dV1RZl_4M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:df:f3:8e:bb:19:da:fe:e7:33:64:0f:3c:3d:7d:fe:05:6c:
         56:f5:ca:02:90:02:e9:05:f0:2a:5a:d7:ee:bc:5f:65:46:c7:
         c8:5c:95:ee:9b:b1:13:55:7f:3b:2b:0c:06:a8:28:91:67:42:
         cd:7c:95:9e:33:3a:a1:63:29:9a:be:fe:e7:f9:71:5d:f8:ba:
         87:b5:e4:66:43:03:1e:fd:f4:8f:32:43:d5:4e:85:d2:fc:a6:
         8e:b9:c2:38:28:f6:bc:d8:1d:69:4d:f4:8d:52:19:05:79:71:
         55:a5:ef:ff:ac:cd:a6:4b:ee:28:0a:af:aa:43:32:69:31:73:
         cc:f4:6b:56:26:81:be:4c:76:fd:ed:a8:e7:ab:c3:a8:45:0b:
         48:8d:c0:dd:f4:0f:f2:d4:1e:aa:d8:f0:1d:03:25:0f:7a:de:
         21:f9:da:ac:3d:51:bb:61:aa:43:4a:66:09:0e:e9:dc:8b:63:
         36:54:4f:52:f6:43:e3:2d:71:67:90:db:13:76:6f:2b:97:9b:
         7d:b8:21:3c:fd:59:bb:d1:a1:65:b7:21:2e:8f:f2:aa:f0:aa:
         52:d1:85:36:b0:4f:76:b0:75:d2:d9:7b:54:ed:b6:e3:e9:81:
         b0:6f:ed:d4:cb:03:2f:ad:44:32:ea:2c:4f:d4:a8:f9:2a:00:
         e9:75:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org