Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WZxs6gO2ZgC1Y-vJf041cKVU2Fo.roa
File:                     WZxs6gO2ZgC1Y-vJf041cKVU2Fo.roa (raw, json)
Hash identifier:          9/Q32ROaFUt9UnKh6YGqNUBKQ9IycE8PrRGS1DbHu4M=
Subject key identifier:   59:9C:6C:EA:03:B6:66:00:B5:63:EB:C9:7F:4E:35:70:A5:54:D8:5A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0151
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WZxs6gO2ZgC1Y-vJf041cKVU2Fo.roa
Signing time:             Wed 24 May 2023 16:31:19 +0000
ROA not before:           Wed 24 May 2023 16:31:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=599C6CEA03B66600B563EBC97F4E3570A554D85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:84:b4:80:c0:98:31:16:df:67:da:91:c1:
                    ce:f7:e9:97:f4:be:e8:7e:df:72:36:41:56:bf:d6:
                    c2:ac:aa:00:76:ed:f5:65:3b:0a:90:ba:9d:2b:95:
                    c3:28:83:08:24:08:0e:4b:73:f3:a9:a9:f1:17:f2:
                    75:d6:6d:ed:98:5b:18:01:e9:f7:ab:f5:e7:af:0c:
                    b6:c5:26:56:82:14:53:07:f0:6e:61:29:d9:8a:97:
                    43:7b:25:12:4c:01:61:cc:5d:43:04:a7:cd:0d:db:
                    8f:77:63:2a:85:07:1f:32:a4:ec:aa:4a:39:89:30:
                    36:18:89:44:fb:67:6e:07:09:24:83:a4:35:6c:7b:
                    d9:54:7e:d9:24:6f:7d:21:e7:00:e8:05:37:73:a1:
                    69:9c:d0:a3:70:1f:02:5e:7d:dc:4f:ec:9a:c5:3a:
                    24:2c:cd:6f:63:70:8d:42:74:56:25:b3:12:ff:7d:
                    54:69:f7:85:f2:74:25:98:c4:4b:a2:e8:61:74:6f:
                    83:1c:cf:41:ed:c1:9c:c8:b6:f9:20:97:40:a0:8f:
                    9e:e4:79:3c:f5:ae:9f:90:55:4a:14:75:9a:86:fb:
                    31:ae:11:64:94:ad:bd:26:32:9a:a1:41:39:ae:94:
                    61:ff:73:b6:4f:e4:51:95:65:bf:a2:d9:d5:a7:8f:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:6C:EA:03:B6:66:00:B5:63:EB:C9:7F:4E:35:70:A5:54:D8:5A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WZxs6gO2ZgC1Y-vJf041cKVU2Fo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:f6:d0:71:eb:80:22:04:75:c5:2a:4d:0b:89:b6:1d:7f:3a:
         70:fd:8c:17:d2:23:0f:bd:bc:1f:24:52:f1:1f:27:76:79:28:
         6c:42:a8:92:f3:01:74:06:29:0c:16:e4:c6:ef:c5:b8:fb:c3:
         d7:6a:d6:12:6a:1c:46:4b:d6:94:80:56:83:35:5d:b5:e1:0a:
         04:72:ab:1d:67:fe:76:05:09:65:9a:a8:cb:63:9a:73:2a:67:
         e6:b4:ad:f5:1f:05:2c:bf:8a:7f:49:10:ce:01:a9:26:49:f2:
         95:87:ac:a9:1e:46:12:47:dc:85:e5:a4:79:ca:6d:ae:be:76:
         24:bf:a2:26:88:5f:b0:77:f7:12:ea:15:c4:19:e2:1d:4d:ca:
         16:d7:fe:08:f8:97:b4:02:be:ee:ff:8d:6f:a9:8d:9e:4d:df:
         c7:6d:88:43:63:95:78:68:1d:8c:05:bc:24:19:12:bd:25:27:
         c3:f0:ca:90:b3:b3:36:c2:e0:73:89:cf:19:f4:d2:0b:58:3d:
         83:48:a7:1e:c1:fb:38:59:d4:8b:00:e7:0f:9b:95:fe:36:c0:
         d0:39:6d:cd:8f:73:d7:f4:fe:b9:fa:9e:e2:79:e0:c4:b3:4f:
         97:1c:c4:2b:79:ef:16:2d:0c:48:ae:01:00:a6:a7:d5:c0:07:
         fe:e2:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org