Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ufzd6jRO78NYFct4XT1ZJLMl03A.roa
File:                     Ufzd6jRO78NYFct4XT1ZJLMl03A.roa (raw, json)
Hash identifier:          +kXy3bA0n7EpFCLA5WrvllwkjcnSEz6LBlyEASnk1Ao=
Subject key identifier:   51:FC:DD:EA:34:4E:EF:C3:58:15:CB:78:5D:3D:59:24:B3:25:D3:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0153
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ufzd6jRO78NYFct4XT1ZJLMl03A.roa
Signing time:             Wed 24 May 2023 16:31:19 +0000
ROA not before:           Wed 24 May 2023 16:31:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.0.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=51FCDDEA344EEFC35815CB785D3D5924B325D370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:92:9d:b3:25:33:48:f9:db:c7:85:68:63:
                    dd:33:be:eb:46:4c:52:86:0c:5c:56:64:c3:0f:ca:
                    30:3b:53:b4:b3:02:db:38:69:03:a3:31:09:e3:c2:
                    aa:d5:99:b7:78:4d:b6:e1:67:cb:06:79:15:77:be:
                    1e:06:03:07:b9:06:40:11:bd:61:f7:73:cb:a3:fc:
                    69:07:d7:b2:69:7a:d7:e9:79:09:30:38:37:90:9a:
                    59:a9:d1:0f:5d:ab:a5:19:28:f1:24:af:60:58:f7:
                    42:c4:0b:ed:3c:a7:94:f6:fb:bd:68:1a:b3:98:6c:
                    92:4b:e3:8c:04:53:70:07:b7:bd:99:54:cf:6e:a2:
                    5e:d2:b6:26:8f:72:9c:80:e7:06:77:ce:b2:18:aa:
                    58:9b:82:f6:4e:44:86:46:b8:32:24:4a:57:91:24:
                    eb:96:cc:fa:63:55:4a:0e:73:16:3e:42:fc:37:38:
                    08:f7:9b:89:27:11:b3:55:0a:57:52:3d:2c:8f:11:
                    4c:eb:c6:b0:77:1d:04:78:07:b5:c0:d5:d5:e1:57:
                    3c:63:1b:62:e3:37:77:a2:67:81:69:b7:36:cf:fb:
                    4f:fb:a3:ac:ef:b0:60:fa:8a:21:ce:0b:47:55:a8:
                    b3:78:da:48:d1:e8:99:86:a0:0d:3f:cb:26:9e:a1:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:DD:EA:34:4E:EF:C3:58:15:CB:78:5D:3D:59:24:B3:25:D3:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ufzd6jRO78NYFct4XT1ZJLMl03A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:61:88:e4:4d:0d:7e:fd:0c:d3:71:ec:64:a8:0b:7d:1e:ad:
         fa:9f:cf:29:b9:df:73:29:18:b4:8b:64:eb:e7:c8:64:ad:75:
         70:d9:d0:05:a2:fa:53:4b:23:97:2a:93:77:df:65:4a:aa:ad:
         11:5f:6f:f1:0e:ea:05:81:09:50:46:fb:c9:8a:d3:91:b5:e5:
         ad:4a:41:c4:63:41:2a:4b:3c:2e:5d:fc:07:c7:65:d2:46:89:
         f9:a9:56:c1:e9:35:bc:6d:ef:6d:ce:a8:dd:92:5b:45:9d:e9:
         58:76:3c:0d:43:f4:20:32:ea:13:0b:97:f5:75:6a:07:f4:35:
         8a:1f:8b:81:51:82:e0:7a:cf:b1:39:24:77:ec:72:e0:63:2f:
         b3:64:a7:a5:10:4f:9f:20:e0:97:f4:0e:51:86:45:d0:c5:5d:
         41:8d:1a:6d:96:47:a5:07:7d:7d:d7:fc:66:56:7c:65:f2:29:
         91:1e:d5:ef:9a:f9:a5:d3:da:12:31:b1:88:27:58:c5:ab:e5:
         80:89:ab:3d:33:dc:c6:49:3f:36:61:fa:f9:2c:19:94:d5:03:
         63:08:ad:0c:6d:9e:2f:b4:9b:5b:eb:c0:f4:a7:c7:3d:7e:68:
         e4:6e:49:3d:13:9c:6e:ee:7f:29:d5:af:e8:b4:36:89:e0:bb:
         a0:e4:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org