Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UfwSXa3olOzOFcuGJ6hIp17nH4o.roa
File:                     UfwSXa3olOzOFcuGJ6hIp17nH4o.roa (raw, json)
Hash identifier:          xsSEDw1Bs3839JcBp+pFlAwh9moy6Cy+TszsrFwAtjQ=
Subject key identifier:   51:FC:12:5D:AD:E8:94:EC:CE:15:CB:86:27:A8:48:A7:5E:E7:1F:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0286
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UfwSXa3olOzOFcuGJ6hIp17nH4o.roa
Signing time:             Tue 30 May 2023 16:36:24 +0000
ROA not before:           Tue 30 May 2023 16:36:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.231.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=51FC125DADE894ECCE15CB8627A848A75EE71F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:88:85:55:33:4f:f6:80:dd:97:dc:e1:16:
                    db:e2:da:a2:28:d5:39:3e:15:17:2e:7e:7a:30:c5:
                    bb:e3:3a:76:ab:17:a2:22:f6:c4:1e:9b:50:a4:73:
                    d7:d4:40:8e:9a:51:97:07:95:64:99:77:20:45:56:
                    a6:41:0f:48:57:f3:13:56:b8:aa:ca:8d:27:76:f6:
                    af:a4:e1:78:c7:87:06:67:27:ff:1e:6e:9c:c6:25:
                    c5:54:c0:a5:67:10:d3:2a:f0:78:57:fd:92:24:a5:
                    1c:b3:e9:00:ed:dd:fb:f4:fd:09:3d:5e:78:7c:ea:
                    08:20:00:0f:f0:56:0d:55:b2:33:05:94:0d:6e:90:
                    7c:86:48:f8:92:16:e4:ab:00:68:33:6d:9a:b9:20:
                    df:51:e2:70:d1:2a:f3:a9:a4:6e:90:db:ea:77:e7:
                    d1:99:4a:7e:1a:7a:00:b4:2b:aa:f6:61:5e:ee:a8:
                    b4:e6:04:33:45:8c:e2:7c:af:ef:b2:a7:27:03:73:
                    2c:e8:25:a4:1e:9d:79:3a:5c:93:9b:9a:56:df:83:
                    6d:7f:6c:71:35:5d:b5:f5:3c:4f:d9:5d:80:44:8d:
                    d8:f0:5f:e1:35:ec:c3:17:78:1f:59:d7:10:fe:5f:
                    9e:71:23:87:54:08:25:a3:a8:98:1b:5c:6a:4b:e1:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:12:5D:AD:E8:94:EC:CE:15:CB:86:27:A8:48:A7:5E:E7:1F:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UfwSXa3olOzOFcuGJ6hIp17nH4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:8d:e4:63:ac:73:9e:d9:07:98:18:a3:e4:4f:5e:1e:a7:
         29:28:92:99:f1:14:60:a8:63:be:d4:fd:e0:2b:4e:30:4e:1d:
         85:ee:f4:01:ff:04:8c:b5:92:b5:2a:d2:9d:e0:ff:f4:28:c4:
         ff:79:53:df:d0:27:db:0d:b2:9e:86:ae:8e:3f:e5:3e:4d:cc:
         97:51:0c:3d:50:07:df:c8:20:1f:25:ce:fd:8d:ee:e6:ac:41:
         eb:1a:c3:f4:92:8c:14:a8:d4:38:be:4f:ec:bb:5c:28:e3:91:
         d4:8b:a3:65:a2:a1:6d:98:10:37:5e:e1:61:f1:d9:33:fb:ae:
         e3:b6:28:25:a1:ff:f1:ce:43:63:4c:8c:be:54:8c:9f:53:94:
         e2:27:bc:d0:3d:3a:99:99:7d:b2:dc:a0:94:5f:c2:f7:47:66:
         d7:69:d3:60:89:8b:03:de:b1:e7:26:73:de:30:20:53:8b:6c:
         82:1b:39:47:28:f0:3a:a5:67:92:07:0d:0d:de:7f:fb:84:8d:
         19:22:db:af:ec:e3:aa:d9:33:a5:57:d0:6a:12:c0:5d:13:9e:
         53:26:b5:3b:dd:da:e9:af:ff:e2:d3:8c:b4:91:d6:ef:b8:07:
         75:94:2c:59:1b:36:01:1a:a7:d6:79:28:69:dd:de:d3:4a:bd:
         c7:ee:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org