Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuabAS00HNCGp9_DT6h3JEY7DNk.roa
File:                     UuabAS00HNCGp9_DT6h3JEY7DNk.roa (raw, json)
Hash identifier:          YenA1yTzEEIycrAe3F41pKdUW0uvJeIghrk/HnXxmgE=
Subject key identifier:   52:E6:9B:01:2D:34:1C:D0:86:A7:DF:C3:4F:A8:77:24:46:3B:0C:D9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuabAS00HNCGp9_DT6h3JEY7DNk.roa
Signing time:             Wed 24 May 2023 16:40:28 +0000
ROA not before:           Wed 24 May 2023 16:40:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=52E69B012D341CD086A7DFC34FA87724463B0CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:25:0c:9b:b7:86:73:35:6f:fe:8a:5a:7e:
                    6b:9b:78:80:e3:05:41:ba:be:50:10:57:df:fd:3d:
                    c7:cc:4f:93:b2:52:95:fc:86:c1:64:47:97:eb:a3:
                    0b:1a:52:a4:65:ab:46:ca:47:c3:d0:de:eb:58:86:
                    d9:be:80:6e:4e:32:c5:57:a1:5c:50:ee:09:fb:63:
                    b6:83:3c:41:b8:70:7a:54:f5:c6:38:08:40:92:9e:
                    81:ab:be:e3:d0:16:1b:bf:f0:a1:f4:ba:07:64:5e:
                    19:3d:31:e7:24:7a:45:8b:25:84:ca:b3:cc:fd:61:
                    b4:6d:99:aa:c8:46:8d:fc:0d:01:c6:bc:7d:d3:46:
                    ce:08:e6:55:82:fd:0f:6d:c6:60:cd:dc:c0:1b:64:
                    15:d1:59:22:40:9e:e0:21:01:b8:99:1e:61:79:ce:
                    5d:1c:d5:e0:93:7d:51:87:ce:91:9a:7d:76:06:dd:
                    66:22:37:b7:ed:89:5f:78:54:c9:7c:1c:cd:db:3b:
                    95:e1:d1:3c:5e:9f:b6:d6:78:0e:35:3d:24:8b:14:
                    05:a7:06:d5:3f:57:2f:04:e8:01:f6:06:38:b2:92:
                    9b:14:87:fb:df:42:7f:31:15:f6:84:b8:02:29:c6:
                    c6:64:5c:b6:b8:9f:4b:61:32:fc:f5:a9:a0:49:c0:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:9B:01:2D:34:1C:D0:86:A7:DF:C3:4F:A8:77:24:46:3B:0C:D9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuabAS00HNCGp9_DT6h3JEY7DNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e3:7a:41:82:20:cc:e8:f1:07:78:18:0d:ca:9b:f7:99:99:6e:
         38:46:b0:56:2f:6d:d8:1a:e6:17:ec:01:5a:a9:df:42:53:fc:
         f1:34:e2:72:f4:1e:c9:97:3a:b0:f2:ce:d4:92:c0:56:7d:be:
         6f:ad:68:38:b0:72:5b:ad:d7:71:f5:c5:72:fa:4d:53:c7:3a:
         6a:5e:5f:22:ec:b6:5e:11:0d:5e:4b:f0:2c:f4:65:61:79:f5:
         c1:e1:b1:10:b6:0a:5c:18:44:9e:37:6c:ac:1c:67:a8:f9:eb:
         10:30:10:f9:1b:71:8b:03:17:1d:78:48:08:56:ef:86:16:23:
         1e:3b:2b:2e:26:e7:7f:ea:0b:3f:05:2e:0c:f9:32:0e:97:14:
         4b:8e:56:d2:82:04:e5:b6:eb:d4:74:85:a1:6c:53:84:f3:22:
         c4:12:b6:ca:5e:4b:b6:10:5f:72:4e:0e:76:b4:13:d5:4a:06:
         e3:7f:de:b8:e8:10:6b:d1:51:ab:ca:af:8f:f6:5e:69:10:34:
         94:1c:33:05:32:0a:d1:45:8d:0a:71:9c:94:86:65:81:8f:b1:
         a6:73:65:d5:dd:62:d6:c6:02:22:ca:8d:06:43:35:44:f9:41:
         53:90:78:e6:3c:ae:12:5a:fa:d1:c5:be:47:24:3c:01:e9:9e:
         77:9c:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org