Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ThibNp6tlBiZ33FlDPajwb4bvSs.roa
File:                     ThibNp6tlBiZ33FlDPajwb4bvSs.roa (raw, json)
Hash identifier:          KrlhJXWCdceB7i9/DMz75M64LsEaOoUCIcjcCxY7PBo=
Subject key identifier:   4E:18:9B:36:9E:AD:94:18:99:DF:71:65:0C:F6:A3:C1:BE:1B:BD:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0403
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ThibNp6tlBiZ33FlDPajwb4bvSs.roa
Signing time:             Tue 06 Jun 2023 16:05:49 +0000
ROA not before:           Tue 06 Jun 2023 16:05:49 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:49 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4E189B369EAD941899DF71650CF6A3C1BE1BBD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:85:45:96:4c:b9:b4:c7:62:13:11:90:90:
                    f0:4d:17:d1:ed:b4:0a:3a:de:41:1f:cc:82:61:1c:
                    1b:7d:ed:0a:3f:08:3c:0b:c3:bc:83:26:50:e8:00:
                    b9:0a:41:b0:13:4a:a3:b7:e9:88:45:8a:cc:65:5f:
                    30:d9:19:c7:98:c8:ce:94:ed:2b:a6:b8:54:51:f8:
                    8f:76:e4:62:be:f6:69:ce:d6:83:23:44:d0:25:c8:
                    36:f0:aa:c1:39:22:45:cd:32:cc:92:dd:48:70:13:
                    82:b9:41:6d:a5:4a:d7:79:76:82:a2:c5:13:af:46:
                    6a:50:57:65:44:2e:01:31:b0:68:b3:9a:d8:a3:cf:
                    81:6a:af:d7:7f:02:4e:0b:c3:8c:8b:71:61:69:b6:
                    54:b7:0d:da:87:ac:af:f4:12:02:34:c7:b8:a3:ac:
                    f5:d3:cb:53:ae:1c:36:37:ce:72:12:4d:c6:bf:62:
                    3d:b6:be:76:d1:20:be:c6:e2:ca:02:e8:38:d8:d0:
                    cb:92:f4:54:62:4d:4b:ce:9c:90:3a:4f:16:de:66:
                    2b:42:4e:7a:e4:5d:d6:8d:15:93:fe:27:61:f1:5c:
                    f0:44:70:99:9e:3c:00:6e:3c:44:e4:10:37:d3:1d:
                    5b:9f:15:dc:1f:25:c0:43:b0:f3:e8:8b:aa:f8:b6:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:18:9B:36:9E:AD:94:18:99:DF:71:65:0C:F6:A3:C1:BE:1B:BD:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ThibNp6tlBiZ33FlDPajwb4bvSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:2b:02:09:f6:c8:45:0e:e7:b4:39:2d:9f:b1:b8:cc:c5:
         0f:2f:26:ce:16:c4:75:00:be:8e:2b:70:8a:e4:24:ff:17:b1:
         7b:ee:b8:9b:22:29:0f:2c:fc:0c:29:57:17:e8:1a:0a:42:a5:
         dc:e0:dd:da:58:c1:67:aa:ab:f4:18:9b:53:0b:1f:e3:0c:68:
         67:f2:e0:62:c8:3e:f6:ae:88:6f:4e:1c:96:25:52:96:98:d7:
         6b:43:98:9c:83:88:c7:77:e6:eb:8a:9f:1e:22:23:4a:64:77:
         dd:02:df:23:8d:5e:32:7c:d2:32:e7:57:e8:02:89:86:69:ab:
         be:a8:f6:1a:de:a1:ea:72:e0:9e:13:f4:30:d6:68:c1:d8:62:
         34:13:35:93:18:b0:17:77:fe:25:ba:00:d5:5b:60:41:02:e6:
         58:f1:f3:a7:69:d5:ff:e4:80:64:df:1f:41:27:5b:c0:69:10:
         c6:c2:1d:32:f1:fa:fb:10:75:29:38:1e:af:b1:e0:78:6f:bd:
         9b:0b:fe:2c:6a:19:93:9b:2d:4e:71:f2:4c:3a:b3:6e:56:00:
         55:7a:8a:90:90:e6:78:09:ba:b0:5b:42:6d:08:bd:6b:4a:6b:
         6e:05:5c:ae:58:a5:bf:e5:35:1f:4a:8b:16:71:e0:df:47:5b:
         7a:f5:34:5e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjA1NDlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRFMTg5QjM2OUVBRDk0
MTg5OURGNzE2NTBDRjZBM0MxQkUxQkJEMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCct4VFlky5tMdiExGQkPBNF9HttAo63kEfzIJhHBt97Qo/CDwL
w7yDJlDoALkKQbATSqO36YhFisxlXzDZGceYyM6U7SumuFRR+I925GK+9mnO1oMj
RNAlyDbwqsE5IkXNMsyS3UhwE4K5QW2lStd5doKixROvRmpQV2VELgExsGizmtij
z4Fqr9d/Ak4Lw4yLcWFptlS3DdqHrK/0EgI0x7ijrPXTy1OuHDY3znISTca/Yj22
vnbRIL7G4soC6DjY0MuS9FRiTUvOnJA6TxbeZitCTnrkXdaNFZP+J2HxXPBEcJme
PABuPETkEDfTHVufFdwfJcBDsPPoi6r4tsDzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUThibNp6tlBiZ33FlDPajwb4bvSswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RoaWJOcDZ0bEJpWjMzRmxEUGFqd2I0YnZTcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxatcwDQYJKoZIhvcNAQELBQADggEBAHb2KwIJ9shFDue0OS2fsbjMxQ8v
Js4WxHUAvo4rcIrkJP8XsXvuuJsiKQ8s/AwpVxfoGgpCpdzg3dpYwWeqq/QYm1ML
H+MMaGfy4GLIPvauiG9OHJYlUpaY12tDmJyDiMd35uuKnx4iI0pkd90C3yONXjJ8
0jLnV+gCiYZpq76o9hreoepy4J4T9DDWaMHYYjQTNZMYsBd3/iW6ANVbYEEC5ljx
86dp1f/kgGTfH0EnW8BpEMbCHTLx+vsQdSk4Hq+x4HhvvZsL/ixqGZObLU5x8kw6
s25WAFV6ipCQ5ngJurBbQm0IvWtKa24FXK5Ypb/lNR9KixZx4N9HW3r1NF4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org