Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uo18fOG8Ys8MHm6n_wkyCOlgpIE.roa
File:                     Uo18fOG8Ys8MHm6n_wkyCOlgpIE.roa (raw, json)
Hash identifier:          nrXX0qTAwaz2jN1tKvMIuu7rZkVIMl5EwqJ55OzckPs=
Subject key identifier:   52:8D:7C:7C:E1:BC:62:CF:0C:1E:6E:A7:FF:09:32:08:E9:60:A4:81
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uo18fOG8Ys8MHm6n_wkyCOlgpIE.roa
Signing time:             Tue 06 Jun 2023 16:03:44 +0000
ROA not before:           Tue 06 Jun 2023 16:03:44 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:44 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=528D7C7CE1BC62CF0C1E6EA7FF093208E960A481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:5e:e3:76:f0:87:bc:bc:10:11:27:5a:9c:
                    87:39:1a:eb:bd:22:4e:81:99:f0:4d:e1:3f:a8:2e:
                    d7:52:cb:33:26:69:b0:e3:1f:27:fd:a0:fe:80:d6:
                    7a:58:6b:5e:d0:39:42:b0:df:02:19:5f:79:65:ce:
                    ea:b7:17:39:88:75:e6:37:d7:7b:65:d0:c2:31:9a:
                    23:b4:47:b1:ec:0c:c3:df:2d:3d:d2:bd:21:93:c8:
                    6e:9a:ce:b6:be:30:cf:74:1b:24:a9:43:08:a3:02:
                    95:ba:8b:02:89:73:0f:82:33:7a:0f:cb:46:91:59:
                    80:1f:39:71:c3:ee:20:45:9b:58:6c:ab:a3:c5:84:
                    6d:f4:dd:f6:28:ca:22:79:c1:c6:74:f9:c8:ab:34:
                    55:de:f4:3d:45:eb:cb:de:4e:3f:85:bd:8a:fb:fa:
                    64:46:1b:4f:1c:81:c1:75:0c:18:20:ea:2e:ac:1b:
                    b8:e0:88:af:0e:75:59:36:25:6b:da:85:20:4c:76:
                    7d:c7:f4:99:47:38:1a:4a:bb:12:06:b5:f8:98:ea:
                    b0:ec:64:32:b8:bf:0a:f3:c9:4d:66:d0:68:ac:89:
                    59:e9:89:a3:1a:10:c1:64:64:91:73:ea:92:99:e8:
                    cb:13:81:d3:d8:00:bf:1c:7b:bf:75:c7:d3:2a:8c:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:7C:7C:E1:BC:62:CF:0C:1E:6E:A7:FF:09:32:08:E9:60:A4:81
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uo18fOG8Ys8MHm6n_wkyCOlgpIE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:86:d6:bd:37:b6:57:b3:7a:da:8a:62:75:f9:d1:6d:be:
         15:75:ec:ac:3d:68:69:da:58:86:ba:3f:d0:2f:fd:fe:19:5b:
         9d:ee:10:5b:fd:b2:6a:b2:cf:00:c8:b6:1b:92:a4:f8:4a:27:
         6f:4b:d3:29:c2:82:9c:74:82:fc:db:d1:52:3b:e4:04:03:af:
         cd:ac:d4:cb:4f:dc:b6:ae:a4:09:b2:0f:fd:4f:7e:90:1b:68:
         bf:03:9e:ca:db:bc:df:48:0d:ee:5e:ae:ad:63:1c:8a:95:c7:
         94:93:24:a5:84:27:a3:5d:35:0b:8b:a4:8a:9e:f5:15:43:c3:
         97:39:a4:b1:f4:96:1a:e8:94:5e:11:e7:1b:ce:fc:cd:89:4d:
         de:90:29:b6:cc:13:4d:59:f9:8d:ca:42:49:2c:46:8c:61:55:
         8e:67:5a:e5:db:b5:1b:d5:d0:e0:93:10:2d:13:ad:93:fe:0a:
         f7:77:54:23:6b:93:67:36:61:1c:5d:7d:44:f3:71:0a:95:8c:
         d4:2d:e6:ec:f9:ef:fa:39:e5:79:ed:d1:48:78:9f:1a:5c:b5:
         3f:10:c5:ed:52:7d:82:41:08:27:3d:89:88:41:5d:1d:a2:8a:
         62:56:90:af:ce:89:d1:0d:ef:8e:ff:fa:ae:e6:5e:d6:86:6f:
         01:70:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org