Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VJcAPtvuuZeQXbBQuFUo5He8pXs.roa
File:                     VJcAPtvuuZeQXbBQuFUo5He8pXs.roa (raw, json)
Hash identifier:          pMgI5B+rFuYu6v7xcCWkFfekJrpTTWuk1m5KUbpGAnQ=
Subject key identifier:   54:97:00:3E:DB:EE:B9:97:90:5D:B0:50:B8:55:28:E4:77:BC:A5:7B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       53
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VJcAPtvuuZeQXbBQuFUo5He8pXs.roa
Signing time:             Mon 27 Mar 2023 16:04:26 +0000
ROA not before:           Mon 27 Mar 2023 16:04:26 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:26 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5497003EDBEEB997905DB050B85528E477BCA57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:b5:07:3b:a2:6d:9a:54:61:1e:22:11:3b:
                    cd:6e:55:67:ef:00:ae:d1:02:70:df:6e:f9:8e:5e:
                    74:34:3f:81:c2:f4:f5:71:25:4f:09:07:57:2e:fc:
                    7b:a0:1f:99:30:e8:ef:f8:12:8c:d2:f6:8d:0e:57:
                    c4:47:54:f8:d3:88:b8:1a:28:7e:0f:42:9e:f9:05:
                    2e:66:4d:dd:19:74:bd:52:70:9e:03:e5:a2:d3:e0:
                    eb:3a:ae:cc:3a:d7:14:7f:b6:22:eb:7b:cc:c2:db:
                    5c:40:5d:c5:af:c4:a4:c7:37:32:5a:de:50:54:4e:
                    2c:06:03:10:33:6c:0c:b9:76:2a:6a:36:92:8b:5c:
                    61:d2:cd:a7:dc:1d:80:a6:f4:8d:26:d4:47:cf:be:
                    79:65:6f:e8:52:2e:5a:f0:7b:65:59:e4:06:47:04:
                    f6:00:97:a7:28:c0:dc:ac:ad:6a:4d:21:43:ea:d1:
                    2a:2b:4c:a3:91:e2:3d:ff:e8:d2:b2:3d:f8:7e:3b:
                    08:e4:47:70:5c:2b:b1:4c:e8:99:ec:dc:d5:a5:08:
                    31:06:75:c4:81:07:4b:21:6e:9f:ba:55:07:a6:aa:
                    ee:70:5f:9f:8a:9c:80:fd:10:1e:e8:b4:ff:bb:04:
                    99:ff:65:e6:db:46:3d:a0:b8:63:e8:9e:61:88:e5:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:97:00:3E:DB:EE:B9:97:90:5D:B0:50:B8:55:28:E4:77:BC:A5:7B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VJcAPtvuuZeQXbBQuFUo5He8pXs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:17:c7:76:8b:a7:d8:23:b7:f5:d6:45:4d:b0:11:67:2e:14:
         48:65:ca:da:a1:02:e7:70:3a:8b:1f:39:cf:5c:81:47:ed:39:
         43:d9:1a:c2:68:b2:23:d8:b2:92:75:f2:c2:bb:78:74:b2:af:
         c2:4a:4e:0c:7c:23:94:47:2e:6a:90:f3:cc:5f:24:08:a1:77:
         65:ee:ca:fa:02:ab:77:61:b0:ef:ce:79:59:51:23:63:82:67:
         3f:45:7c:7b:94:a6:d3:0c:c7:af:3b:f0:5c:49:01:a2:7b:12:
         2a:87:b6:17:f2:68:7e:b2:94:9d:aa:d0:3e:d0:79:30:11:39:
         c9:b2:d1:56:82:d7:cb:b0:29:9d:df:0f:1b:6a:27:fd:ea:e8:
         12:2f:ef:15:9e:d7:05:50:6b:ea:ae:56:6e:a7:1e:c6:6a:ea:
         55:8e:a8:cd:b1:97:4c:d7:16:ad:93:7d:fc:6d:22:9f:83:b1:
         71:46:22:55:b8:c7:e2:7c:c9:4d:6d:05:b9:5a:4c:b8:7a:db:
         6c:6a:39:1c:86:3b:6c:db:64:a9:33:45:89:31:56:ae:30:b1:
         78:68:a0:b4:d9:d9:78:23:15:8b:5e:f3:a0:10:06:48:5a:74:
         cb:4d:9a:c0:32:d6:85:48:c4:22:ab:e4:30:b9:1e:b4:66:38:
         fe:33:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org