Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X6JEVaa-t8Cx0tgCU3NXy3ARhko.roa
File:                     X6JEVaa-t8Cx0tgCU3NXy3ARhko.roa (raw, json)
Hash identifier:          bOKKhwr4p2sWgXAx3YmKFtszwlE8Mqvp4itaKRJtBLo=
Subject key identifier:   5F:A2:44:55:A6:BE:B7:C0:B1:D2:D8:02:53:73:57:CB:70:11:86:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       030D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X6JEVaa-t8Cx0tgCU3NXy3ARhko.roa
Signing time:             Thu 01 Jun 2023 16:05:29 +0000
ROA not before:           Thu 01 Jun 2023 16:05:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5FA24455A6BEB7C0B1D2D802537357CB7011864A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:41:54:f4:3a:1d:3d:08:aa:f8:6b:f9:1a:
                    61:50:00:b5:e0:7d:b7:94:bf:75:bc:03:c8:6d:a8:
                    91:dc:85:07:48:e4:1a:60:a1:11:17:08:c8:ed:b9:
                    b9:5e:cf:a2:7d:c0:71:64:46:e0:fe:ee:58:82:c7:
                    3d:1e:92:24:cb:a0:e3:44:92:6b:d6:c0:9f:ce:61:
                    5a:45:e6:b9:34:78:8d:9a:99:d0:49:4b:9c:6b:cf:
                    7d:73:b9:69:61:3f:e7:56:40:69:35:5e:4b:55:c0:
                    7d:1d:90:b7:ac:c5:c2:6c:34:d4:52:32:4e:db:9e:
                    cc:b9:7f:43:1a:2d:12:30:e1:d7:df:c6:cc:3a:8a:
                    b3:3f:a9:b8:13:36:9a:68:73:63:35:ca:d0:c0:39:
                    b8:18:b2:7a:f5:0f:1e:c3:5c:2f:0f:ec:ef:57:71:
                    a0:a2:e0:3c:a9:ab:29:8e:e9:19:9f:12:0b:d5:cc:
                    16:48:87:87:da:a4:ac:5e:76:7b:ae:86:21:dc:c7:
                    ae:b9:ba:e1:8b:31:4f:4e:7c:0a:bb:c2:18:e1:73:
                    4f:11:8b:c0:da:0d:43:22:b4:c9:32:f5:b6:75:f1:
                    25:d8:5f:d4:50:2e:88:63:cb:0f:7f:bb:74:ce:ae:
                    a8:33:f2:a9:c1:a7:5b:77:72:e1:65:ca:33:a7:b6:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:44:55:A6:BE:B7:C0:B1:D2:D8:02:53:73:57:CB:70:11:86:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X6JEVaa-t8Cx0tgCU3NXy3ARhko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:18:25:c5:e2:e2:a2:ab:b7:c0:17:b4:af:52:95:2b:60:
         8b:de:93:0e:a7:e6:87:cc:1f:f4:cf:96:d5:9f:b6:d1:60:d7:
         f1:33:30:31:52:57:ef:bd:02:38:b4:04:13:59:ea:ef:27:b6:
         9f:01:4f:fe:65:ba:41:c4:ec:99:47:55:20:5d:9c:af:15:1e:
         74:60:c6:f1:a6:90:67:7a:d3:ca:58:3b:3c:f0:0d:a8:60:21:
         ca:c1:05:23:da:98:a1:bf:b0:8d:c5:8e:97:63:05:90:d7:c2:
         71:39:dc:58:ec:8d:09:94:57:6f:62:b7:33:52:a7:32:84:4c:
         02:87:8e:3a:fa:92:cd:86:6a:c7:07:6f:82:32:ba:dc:68:ef:
         d4:81:74:18:01:cb:b3:b1:cd:67:fb:de:d3:00:e6:5a:62:7a:
         cf:d4:ec:af:b7:fa:06:7e:9c:d1:14:07:fc:94:fd:40:87:3f:
         96:35:5a:d1:a6:0e:98:07:b4:d3:dc:07:60:86:a0:c7:6a:7c:
         a8:2e:fb:f7:83:08:94:a4:3b:4e:29:f7:c4:36:b6:2a:ad:9e:
         46:0a:45:c4:5a:16:ba:0e:24:08:ca:78:6a:5a:6d:cb:c5:3c:
         00:b0:ae:5a:6a:c0:76:8a:5f:1c:f0:5d:bd:64:bb:0b:c7:96:
         17:e7:77:83
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDVGQTI0NDU1QTZCRUI3
QzBCMUQyRDgwMjUzNzM1N0NCNzAxMTg2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcY0FU9DodPQiq+Gv5GmFQALXgfbeUv3W8A8htqJHchQdI5Bpg
oREXCMjtublez6J9wHFkRuD+7liCxz0ekiTLoONEkmvWwJ/OYVpF5rk0eI2amdBJ
S5xrz31zuWlhP+dWQGk1XktVwH0dkLesxcJsNNRSMk7bnsy5f0MaLRIw4dffxsw6
irM/qbgTNppoc2M1ytDAObgYsnr1Dx7DXC8P7O9XcaCi4DypqymO6RmfEgvVzBZI
h4fapKxednuuhiHcx665uuGLMU9OfAq7whjhc08Ri8DaDUMitMky9bZ18SXYX9RQ
Lohjyw9/u3TOrqgz8qnBp1t3cuFlyjOntm2JAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUX6JEVaa+t8Cx0tgCU3NXy3ARhkowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1g2SkVWYWEtdDhDeDB0Z0NVM05YeTNBUmhrby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYBIwDQYJKoZIhvcNAQELBQADggEBAGyuGCXF4uKiq7fAF7SvUpUrYIve
kw6n5ofMH/TPltWfttFg1/EzMDFSV++9Aji0BBNZ6u8ntp8BT/5lukHE7JlHVSBd
nK8VHnRgxvGmkGd608pYOzzwDahgIcrBBSPamKG/sI3FjpdjBZDXwnE53FjsjQmU
V29itzNSpzKETAKHjjr6ks2GascHb4Iyutxo79SBdBgBy7OxzWf73tMA5lpies/U
7K+3+gZ+nNEUB/yU/UCHP5Y1WtGmDpgHtNPcB2CGoMdqfKgu+/eDCJSkO04p98Q2
tiqtnkYKRcRaFroOJAjKeGpabcvFPACwrlpqwHaKXxzwXb1kuwvHlhfnd4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org