Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wi5ftIlIr4LFIcjfhZ-By0HW77A.roa
File:                     Wi5ftIlIr4LFIcjfhZ-By0HW77A.roa (raw, json)
Hash identifier:          j9O5iV16Q7hx6jYJUmPN+ClA64WMJR8DzktwnEZXW04=
Subject key identifier:   5A:2E:5F:B4:89:48:AF:82:C5:21:C8:DF:85:9F:81:CB:41:D6:EF:B0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0106
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wi5ftIlIr4LFIcjfhZ-By0HW77A.roa
Signing time:             Wed 24 May 2023 16:10:13 +0000
ROA not before:           Wed 24 May 2023 16:10:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:10:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5A2E5FB48948AF82C521C8DF859F81CB41D6EFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:15:c2:71:c4:2d:02:8b:2c:75:a2:da:09:
                    04:98:aa:5a:d4:63:63:63:a6:9d:a1:af:ce:6e:15:
                    bf:00:6d:e8:18:f7:71:ad:34:bb:3a:03:1a:93:e5:
                    9b:92:d1:13:16:7f:c9:a6:30:4b:a2:bc:38:86:38:
                    9c:6f:71:44:5e:e2:01:4b:3d:71:35:73:d9:45:17:
                    40:c8:92:fb:ba:cd:42:9c:75:6f:1a:74:96:74:ba:
                    64:c4:07:c3:fd:a6:6f:1b:b8:a1:6f:98:aa:2c:57:
                    61:31:d3:4c:37:d2:6e:e2:4d:81:bf:ac:31:30:11:
                    51:73:27:0a:bb:0c:61:4d:ed:35:cf:3f:f5:1b:0e:
                    44:b4:7f:6b:6c:fc:19:98:37:d8:ba:67:7b:48:b9:
                    ce:8c:57:db:3e:b8:24:52:d2:da:97:e0:ee:e3:17:
                    31:07:91:7e:e6:1c:c4:41:92:ff:c8:2e:61:83:db:
                    44:e6:78:9f:3d:81:f6:46:a6:33:c8:40:f4:20:e1:
                    f7:46:e9:7c:f4:20:f2:11:00:f3:ed:df:cb:fb:7f:
                    8e:03:6e:6d:e4:df:34:e3:16:8f:d9:5c:34:1f:1b:
                    cc:d3:70:e7:5e:c5:44:a5:0d:ee:85:a7:11:25:56:
                    fa:34:5e:f9:04:5e:7d:6b:fa:71:fe:37:2d:40:24:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:5F:B4:89:48:AF:82:C5:21:C8:DF:85:9F:81:CB:41:D6:EF:B0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wi5ftIlIr4LFIcjfhZ-By0HW77A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:54:a4:a8:76:5f:ca:27:c0:c9:72:d8:bd:a9:c0:66:7c:
         41:b1:bd:d3:01:45:a6:15:fd:91:5a:ea:52:11:4a:cd:8a:c7:
         cb:c0:80:8a:be:df:f9:f5:12:c5:b7:97:7d:9c:08:fd:3c:f0:
         10:a2:c2:86:10:a6:ab:d3:f3:ab:6e:a2:c0:68:58:3b:3f:94:
         0c:50:c1:e4:34:7a:88:36:cf:6e:02:7c:8a:e1:bd:f9:46:6c:
         06:9c:98:50:da:5c:6d:f4:82:fe:b6:2a:3b:a0:4d:8f:fb:ee:
         1e:4b:f7:22:62:78:e6:34:c0:43:12:4e:13:5b:3c:5c:70:d2:
         b7:5a:1c:05:24:a6:4f:f2:91:af:09:0f:a9:37:67:b2:42:9f:
         6b:be:cf:64:62:23:43:5d:20:01:5c:22:3d:f2:8c:4a:67:25:
         5f:cf:54:b8:49:f6:39:aa:fb:33:26:6e:db:48:0f:bb:5a:d3:
         9e:75:ea:4a:61:2f:f0:06:18:d7:9b:a1:03:0e:20:18:ae:bd:
         71:bf:3d:0c:60:a2:a0:7d:cd:79:27:f4:c5:03:b5:86:7b:a3:
         c3:9a:6b:c7:c1:93:c0:31:5c:2f:ab:48:73:09:f9:cf:cb:b5:
         d9:8f:1b:cf:82:eb:95:83:60:e1:a3:46:6d:5d:c7:ba:ec:7f:
         b3:e6:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org