Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UsKxSMcRhwLMWoIiSEZ7rleiZcs.roa
File:                     UsKxSMcRhwLMWoIiSEZ7rleiZcs.roa (raw, json)
Hash identifier:          kmzBa2l5OujAIib35KRcIu25xmhxBKAPGMJALEj+m1g=
Subject key identifier:   52:C2:B1:48:C7:11:87:02:CC:5A:82:22:48:46:7B:AE:57:A2:65:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0129
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UsKxSMcRhwLMWoIiSEZ7rleiZcs.roa
Signing time:             Wed 24 May 2023 16:30:20 +0000
ROA not before:           Wed 24 May 2023 16:30:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=52C2B148C7118702CC5A822248467BAE57A265CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:d0:a6:94:12:2c:cc:1b:3e:da:04:de:da:
                    6d:ab:75:e2:02:57:1e:ae:d4:a3:65:b4:22:5e:71:
                    87:05:19:4e:b4:42:d2:4e:96:ec:5e:35:cf:aa:96:
                    df:61:b2:85:21:b7:7d:f1:33:22:e9:c6:a9:8c:80:
                    fb:1d:8b:c1:4c:21:13:1a:a3:b0:a5:dc:cd:7d:21:
                    66:39:7e:4f:62:46:7d:9e:ee:dc:a4:5f:e3:97:01:
                    5b:f5:ef:7a:51:c2:ae:75:60:c9:e9:83:86:97:1e:
                    fd:ea:d1:4d:27:6a:e7:15:0d:b2:62:65:2a:8f:6d:
                    6f:05:aa:ef:89:8a:4e:41:9f:91:76:0f:e2:1a:7e:
                    fa:40:73:41:3b:04:66:f1:e9:06:c2:03:10:f5:f5:
                    f0:a4:a3:43:b5:ec:f0:d1:39:49:3d:a8:da:f1:f1:
                    65:84:f6:05:80:97:6a:9e:9f:57:30:4b:ce:bb:12:
                    d4:da:c6:86:60:59:9e:7e:eb:88:28:88:10:9e:ef:
                    be:0d:ce:4e:43:93:2d:05:b4:8b:e2:b2:0b:00:f4:
                    6d:bb:9c:55:d0:1b:bf:1f:f7:70:50:69:47:f1:91:
                    c3:57:fd:88:fb:3a:00:09:5e:e1:bd:b5:ca:d4:68:
                    67:46:ea:13:1c:91:35:24:6f:fe:f6:1e:af:59:5d:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C2:B1:48:C7:11:87:02:CC:5A:82:22:48:46:7B:AE:57:A2:65:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UsKxSMcRhwLMWoIiSEZ7rleiZcs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:f7:36:51:40:1c:87:cf:fd:53:a7:44:c1:f4:8e:98:19:
         3a:f2:78:45:f4:28:15:5d:ae:6f:02:6d:e9:48:4b:a5:86:f3:
         0c:02:85:67:50:76:1e:13:d7:7a:42:51:72:8d:56:ff:77:59:
         83:00:91:ba:e0:57:10:9e:f8:1c:db:8c:3c:5f:cf:84:03:de:
         f3:8e:ad:21:a8:28:1f:fb:78:27:f2:c8:4a:cb:28:d6:a3:c8:
         dc:13:de:b2:ec:34:ca:46:74:56:ff:14:2c:1d:7b:0d:b9:fa:
         13:8e:66:00:e3:76:c3:9e:92:18:54:6a:5b:a3:21:99:60:22:
         69:97:ab:c8:e5:03:81:d0:87:0f:b8:e7:e7:22:ab:31:30:27:
         36:37:b7:df:e1:3b:47:38:74:64:9c:3e:6e:3b:6a:6d:cb:2d:
         d5:ff:4c:78:24:a3:fa:bc:12:cc:09:28:32:d6:ba:d1:13:b6:
         00:8d:f4:5e:c1:fb:b6:d7:d0:5a:b4:7e:df:94:81:31:5a:d8:
         a3:e4:fa:cb:55:9e:f3:90:9c:c9:9e:bd:7d:b5:74:cd:19:3e:
         0f:a9:90:2e:bf:44:e9:fd:c4:f5:08:c8:60:58:ba:a5:e5:c8:
         86:eb:53:2d:eb:7a:ad:40:17:22:c3:83:d8:c9:2e:34:8e:ec:
         3f:41:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org