Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VMUotHV21fRShh7ZCGccVoqQtLA.roa
File:                     VMUotHV21fRShh7ZCGccVoqQtLA.roa (raw, json)
Hash identifier:          46JNotuo3urhDz8O7PKCBxW+rrr9sDM1BRdckQNFxEs=
Subject key identifier:   54:C5:28:B4:75:76:D5:F4:52:86:1E:D9:08:67:1C:56:8A:90:B4:B0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       021A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VMUotHV21fRShh7ZCGccVoqQtLA.roa
Signing time:             Tue 30 May 2023 16:30:27 +0000
ROA not before:           Tue 30 May 2023 16:30:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.244.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=54C528B47576D5F452861ED908671C568A90B4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:c0:64:8e:ea:5c:2c:2b:1d:57:8f:a6:76:
                    e7:49:31:32:2f:77:08:b3:38:e8:d7:1a:80:17:8a:
                    49:dd:a7:fa:33:69:47:65:b1:ce:c3:b3:91:6a:6f:
                    f6:f9:df:f1:0d:e3:90:95:7d:ad:9b:0b:42:31:af:
                    9c:82:82:83:90:5a:f7:76:aa:9e:1e:dd:d1:b2:45:
                    b2:e6:ef:3e:d4:7d:44:5c:42:59:b9:a5:fb:41:28:
                    31:df:45:33:f0:37:1a:13:55:29:47:3b:ce:04:ca:
                    51:c8:02:b8:86:07:a1:fb:a5:df:b2:fa:8c:1b:64:
                    45:ea:16:4e:b3:19:a2:54:12:04:0f:be:40:d6:83:
                    2e:86:e4:9b:86:1d:98:9e:26:d2:a5:2d:50:bb:ab:
                    ff:97:e2:81:8f:76:ee:6c:cb:e8:0c:de:c1:a7:ad:
                    b6:07:af:b0:de:24:eb:ec:25:2e:3c:1b:3c:1c:82:
                    c1:58:62:ad:61:a7:c4:e8:0b:83:27:ec:80:4d:90:
                    ac:b7:51:fe:e8:94:d2:31:96:e6:c7:c0:38:87:31:
                    53:a6:5f:f4:0a:69:5e:04:f3:f3:3b:6c:ed:1e:02:
                    a6:da:b3:dd:6b:54:c8:8f:73:af:35:36:c6:61:9b:
                    7e:e4:80:c7:bb:ff:3e:9e:77:05:f6:98:f3:b9:69:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C5:28:B4:75:76:D5:F4:52:86:1E:D9:08:67:1C:56:8A:90:B4:B0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VMUotHV21fRShh7ZCGccVoqQtLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:aa:ea:71:5a:3c:8b:4a:1d:84:36:54:17:0a:83:c1:1e:
         d4:fe:9a:79:0e:6e:fa:a1:32:23:83:1f:28:78:59:21:c3:32:
         89:19:57:6a:77:5f:fe:50:31:4a:b6:02:82:2e:26:79:cb:0c:
         f5:c1:fb:82:6c:12:cf:43:91:2e:8a:8c:68:d1:c4:d8:81:eb:
         d8:a6:86:ed:74:72:d3:53:f6:5f:3d:b4:ef:42:13:66:bf:0f:
         d9:11:cf:65:0e:fe:e3:31:87:57:94:94:ae:2f:bd:ff:a2:1f:
         b7:79:e5:9e:5e:f5:63:29:cd:48:d6:aa:85:c7:ed:b6:84:90:
         a2:36:e5:06:1d:61:5c:55:59:d3:b8:49:46:26:cc:ea:8b:42:
         b0:04:21:58:eb:a8:06:a8:df:f6:58:ee:95:f8:34:42:de:e6:
         1e:7b:93:81:4d:3a:60:16:d3:e0:e6:d4:d3:75:f3:33:25:c1:
         a7:7d:21:f6:9d:12:db:68:7b:41:30:0c:d4:f6:f6:56:eb:9f:
         fa:fb:e9:ce:56:d8:11:ea:ae:db:40:94:9d:fb:59:12:cd:4a:
         90:ea:f1:87:d4:43:d9:b0:52:7f:02:f8:95:30:71:38:fb:4e:
         c6:d4:c9:39:17:cc:f6:34:4b:f0:6e:47:15:88:d1:5f:a8:58:
         f3:42:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org