Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/W3M0YkHPPIbm5uptuNOYd1ByF1w.roa
File:                     W3M0YkHPPIbm5uptuNOYd1ByF1w.roa (raw, json)
Hash identifier:          cNLqEfhVJ4ZrFb+TyGf0I14fVv6bQPYl+ohb4wHuoU4=
Subject key identifier:   5B:73:34:62:41:CF:3C:86:E6:E6:EA:6D:B8:D3:98:77:50:72:17:5C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       016C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W3M0YkHPPIbm5uptuNOYd1ByF1w.roa
Signing time:             Wed 24 May 2023 16:33:18 +0000
ROA not before:           Wed 24 May 2023 16:33:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.28.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5B73346241CF3C86E6E6EA6DB8D398775072175C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:04:de:cd:67:83:e9:aa:96:b7:ee:25:47:
                    5f:73:26:74:c4:ca:71:4d:cd:ed:74:e6:67:76:70:
                    1a:f1:69:e3:a4:50:13:a3:16:35:6c:09:d3:58:55:
                    1a:3b:fa:84:55:12:ab:c0:0a:5d:86:4b:89:73:9e:
                    2f:a7:84:a3:92:fa:7e:71:3f:12:bd:02:53:ca:78:
                    1a:15:ec:f5:b9:ab:16:eb:1c:d9:41:b0:ca:f4:70:
                    f8:ca:97:dc:b7:16:ba:40:4b:82:e3:a9:76:15:48:
                    01:8f:3d:96:61:d0:55:2d:88:1a:3a:77:a5:67:b3:
                    fb:f2:5c:4c:91:60:45:1c:aa:3a:b6:bb:31:10:62:
                    fb:27:8f:ae:69:7f:2a:3a:4b:df:b4:53:70:f5:e2:
                    f3:07:c7:72:eb:e4:3d:20:2d:ab:66:ae:f8:ef:93:
                    95:62:0a:dc:c5:e6:38:73:9c:7e:3a:92:24:10:6f:
                    09:f5:a1:ae:95:e6:79:a6:30:42:b5:d7:8c:c9:e8:
                    b0:fe:d4:01:8f:96:0f:07:65:95:27:f3:a3:10:f2:
                    97:6c:8c:27:ef:48:d0:d0:1a:b8:0c:c1:85:01:d8:
                    73:61:ef:72:29:7c:f1:72:82:8c:e5:69:38:15:2b:
                    b1:3e:95:71:de:7d:80:c8:36:9e:b7:c8:ac:b7:82:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:73:34:62:41:CF:3C:86:E6:E6:EA:6D:B8:D3:98:77:50:72:17:5C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W3M0YkHPPIbm5uptuNOYd1ByF1w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1b:6b:52:a4:f3:e9:cb:bb:bc:da:4e:65:f1:7b:50:3b:0c:
         02:3d:4c:a4:57:ee:b0:5d:f7:4a:68:e7:06:ad:13:50:5d:e7:
         d0:99:a6:d8:d7:04:34:a4:0f:d6:f6:45:e5:85:1c:85:5c:a4:
         aa:f4:cc:4b:1c:f6:18:5c:a1:a9:16:60:75:88:58:67:3f:35:
         0c:c4:e7:6c:41:b4:67:b7:68:71:26:cf:bd:44:26:5d:44:53:
         bb:00:7c:f2:03:8d:c9:77:ac:b3:ba:4c:0c:3e:98:83:7e:a3:
         dd:69:77:51:8c:17:77:44:36:23:6a:37:aa:6a:c2:1f:79:46:
         06:84:e8:5b:15:88:4f:d2:f0:e1:3d:5f:67:96:26:a3:72:dd:
         4f:a7:bb:df:46:5f:2d:bc:f5:12:8e:18:a6:ef:a3:0a:b4:6f:
         75:39:e1:c8:a9:72:20:bf:92:c9:d9:5f:b0:98:23:ac:46:19:
         80:09:a4:f0:59:db:45:ab:de:b0:0f:c1:4d:50:76:1b:c0:6f:
         a2:c4:04:c5:c2:e3:01:54:cc:d4:d3:2b:c9:c8:55:bd:00:68:
         4c:2a:97:0d:67:ea:6b:6a:c7:ee:c5:02:7d:cf:73:0c:ad:bf:
         e9:8c:35:b9:b8:f3:f4:b4:e1:62:0d:5a:3d:a7:a7:cd:9c:d2:
         81:36:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org