Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X-ugwpUgmdaD9ex0PIFTrv0oV1s.roa
File:                     X-ugwpUgmdaD9ex0PIFTrv0oV1s.roa (raw, json)
Hash identifier:          TSYpEfShLo035A/i6Adq2ysNIwBdHm76qStynKJZhWw=
Subject key identifier:   5F:EB:A0:C2:95:20:99:D6:83:F5:EC:74:3C:81:53:AE:FD:28:57:5B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01A9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X-ugwpUgmdaD9ex0PIFTrv0oV1s.roa
Signing time:             Wed 24 May 2023 16:35:20 +0000
ROA not before:           Wed 24 May 2023 16:35:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:35:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5FEBA0C2952099D683F5EC743C8153AEFD28575B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:5a:75:06:ae:0c:65:18:f4:0d:48:41:69:
                    3a:02:77:11:4a:92:0e:ab:6b:75:d3:df:a0:3e:b0:
                    26:ee:81:b7:98:60:bf:b5:37:e7:74:a8:9b:a0:c7:
                    ea:0a:d6:c5:81:4f:1a:ac:79:59:43:5e:31:bc:85:
                    b0:c5:12:12:4a:f6:c6:fd:00:00:7a:24:a0:73:95:
                    9a:2d:f3:c6:05:4c:a9:59:a3:cb:fa:1c:83:53:3b:
                    ee:be:5a:d9:04:d8:f8:e4:bb:49:15:8e:12:93:da:
                    df:98:02:93:d1:ba:2c:a8:74:43:dd:f7:3c:46:bc:
                    c5:3d:56:7c:f1:6d:56:9b:a7:dc:5b:03:ab:d0:f4:
                    02:9f:e3:c3:77:8f:e8:ee:57:89:58:bd:f3:d5:68:
                    bc:ab:20:6c:8e:a2:49:c4:57:71:d8:af:dc:7b:f0:
                    9d:aa:8d:c9:16:df:0d:82:30:5c:50:6d:48:8f:60:
                    62:7f:6c:5d:a9:3e:71:48:c3:05:b5:b9:fa:af:99:
                    8f:a3:36:8a:f0:e6:bf:4a:99:3c:db:e0:bc:5f:ae:
                    90:d4:65:4d:4c:49:ca:73:1d:f9:c8:67:30:8b:cc:
                    01:85:9e:52:a2:50:31:2b:29:2b:8e:7e:8e:5d:01:
                    3d:46:8b:a5:e9:d6:38:bd:14:3d:6a:47:de:21:db:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:A0:C2:95:20:99:D6:83:F5:EC:74:3C:81:53:AE:FD:28:57:5B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X-ugwpUgmdaD9ex0PIFTrv0oV1s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:b2:cd:ed:14:1b:3f:ea:19:77:87:4b:e3:c1:68:83:17:
         1e:30:57:ca:30:15:6f:03:1d:59:f4:75:1f:aa:41:b7:72:25:
         c8:8b:54:92:67:fe:ed:4f:27:ba:16:2e:32:fa:f9:36:6f:10:
         91:73:e9:05:2e:af:ba:e7:53:8b:90:2d:c7:c5:4a:4a:e3:6d:
         99:59:1c:1b:cd:3e:fd:36:c1:27:b2:24:33:94:14:66:90:57:
         9f:27:3e:cf:2f:11:41:e4:20:85:88:24:5d:5c:cb:52:a0:d0:
         96:d4:e0:14:3a:17:03:72:ff:3e:3c:2a:98:9d:f4:3c:4f:3f:
         8e:46:db:c5:5f:a9:13:a4:c4:eb:0c:fc:d8:1d:d6:25:4b:32:
         44:5a:ee:85:cf:21:85:c4:76:f9:94:ca:4c:6d:15:0b:1e:75:
         22:c2:55:47:a5:91:c4:7f:b1:5c:19:76:f6:53:39:1b:d2:b2:
         d7:81:9a:50:f8:08:47:77:6f:3b:27:e3:8e:6d:ac:c7:fd:ac:
         0f:f2:89:8d:15:f0:4d:ff:68:66:c7:d0:5f:97:8d:82:a7:5b:
         d8:22:61:53:94:c9:67:12:31:f5:ad:0a:0e:8a:97:c1:43:54:
         02:59:2b:5f:0d:cd:36:e0:6a:bd:79:ea:4b:2d:a5:14:75:5e:
         29:4c:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org