Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XWioNu2M1DhtlCqs4zQWfblDqVc.roa
File:                     XWioNu2M1DhtlCqs4zQWfblDqVc.roa (raw, json)
Hash identifier:          erJjTG0jrpWMWAsj5+gvcmHyGFD7mdG5IJGWpygR33w=
Subject key identifier:   5D:68:A8:36:ED:8C:D4:38:6D:94:2A:AC:E3:34:16:7D:B9:43:A9:57
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0351
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XWioNu2M1DhtlCqs4zQWfblDqVc.roa
Signing time:             Thu 01 Jun 2023 17:56:30 +0000
ROA not before:           Thu 01 Jun 2023 17:56:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:56:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5D68A836ED8CD4386D942AACE334167DB943A957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:ed:06:2e:eb:ad:e6:d3:86:d4:d9:7c:68:
                    5a:f0:d1:63:03:b7:23:cf:61:b3:f1:22:4a:40:2c:
                    b5:37:43:74:f0:d7:94:9d:67:94:4f:0c:9b:d7:24:
                    40:b2:ef:ff:a0:c0:42:2e:1f:35:b5:71:24:87:dc:
                    bc:32:68:df:3f:e5:bc:2b:15:5a:83:b3:87:ac:60:
                    39:27:e5:49:f3:b6:51:65:bf:88:32:50:28:2e:cd:
                    2b:30:c1:92:76:98:7b:98:cf:ab:0a:4b:1c:aa:30:
                    15:a4:ee:cf:0f:1b:33:c7:45:b7:c0:27:b7:c2:a0:
                    89:b9:c6:9c:96:61:40:2d:2f:47:39:5d:6a:24:e4:
                    b8:d5:53:16:84:69:db:e2:4b:22:fe:b3:2c:00:a0:
                    3e:69:18:7d:19:a9:b4:03:85:17:70:77:53:e4:03:
                    7b:82:cb:e4:0a:7f:a6:22:89:e5:3c:c0:cc:6d:b4:
                    37:53:24:5b:60:c8:56:56:a3:35:e5:cc:83:7f:50:
                    b6:25:de:af:2b:c2:c0:2a:3a:2c:2c:20:a9:76:85:
                    e8:41:26:c3:40:66:2b:97:e5:40:40:a8:af:f7:a1:
                    41:8f:88:ee:7f:d3:64:e2:0e:5a:f4:e1:1c:84:db:
                    0c:9e:85:0a:07:73:51:92:64:82:08:f8:74:19:d4:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:68:A8:36:ED:8C:D4:38:6D:94:2A:AC:E3:34:16:7D:B9:43:A9:57
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XWioNu2M1DhtlCqs4zQWfblDqVc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:37:dc:2f:5b:10:51:0c:97:ba:25:d6:e4:c0:69:17:15:1c:
         e0:64:79:f7:54:c0:a3:33:15:83:93:d6:68:58:bd:f8:20:25:
         ab:8f:57:bc:f5:5e:dd:ef:88:2c:14:8d:07:04:9c:12:f5:c4:
         f3:32:67:b3:7a:30:50:26:82:8f:e4:0c:83:62:37:f2:17:74:
         11:89:d0:80:77:d3:eb:c1:09:b6:f5:f1:37:4f:96:66:31:e1:
         50:47:6f:8c:52:fc:61:6d:d0:3d:8f:eb:4e:34:c5:d7:35:b6:
         72:a4:81:0b:a8:60:bb:65:5c:cb:81:1a:fe:de:84:28:90:13:
         5a:9e:92:25:35:0e:88:38:fd:82:7f:70:b0:cb:2b:be:43:55:
         57:d3:2c:bb:f7:27:a1:1b:0f:64:96:34:04:11:6f:db:be:9a:
         34:37:7a:a8:cc:a6:93:0b:27:23:16:db:b2:60:c9:bb:ab:3a:
         3f:f6:49:e3:e4:cb:cf:06:9f:fc:c1:96:75:91:c7:14:ea:08:
         00:9a:da:6e:f6:5e:e0:46:d5:a6:66:5e:c3:65:1b:9c:8b:08:
         8a:82:a6:5e:d0:8e:d6:49:e5:36:3c:1a:c3:a1:a8:98:f3:3d:
         f1:35:1e:35:c0:97:d6:b9:c4:b0:83:60:7c:c1:3a:78:48:f6:
         e9:04:8c:e5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU2MzBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDVENjhBODM2RUQ4Q0Q0
Mzg2RDk0MkFBQ0UzMzQxNjdEQjk0M0E5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC32u0GLuut5tOG1Nl8aFrw0WMDtyPPYbPxIkpALLU3Q3Tw15Sd
Z5RPDJvXJECy7/+gwEIuHzW1cSSH3LwyaN8/5bwrFVqDs4esYDkn5UnztlFlv4gy
UCguzSswwZJ2mHuYz6sKSxyqMBWk7s8PGzPHRbfAJ7fCoIm5xpyWYUAtL0c5XWok
5LjVUxaEadviSyL+sywAoD5pGH0ZqbQDhRdwd1PkA3uCy+QKf6YiieU8wMxttDdT
JFtgyFZWozXlzIN/ULYl3q8rwsAqOiwsIKl2hehBJsNAZiuX5UBAqK/3oUGPiO5/
02TiDlr04RyE2wyehQoHc1GSZIII+HQZ1NtTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXWioNu2M1DhtlCqs4zQWfblDqVcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1hXaW9OdTJNMURodGxDcXM0elFXZmJsRHFWYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3S8UwDQYJKoZIhvcNAQELBQADggEBABQ33C9bEFEMl7ol1uTAaRcVHOBk
efdUwKMzFYOT1mhYvfggJauPV7z1Xt3viCwUjQcEnBL1xPMyZ7N6MFAmgo/kDINi
N/IXdBGJ0IB30+vBCbb18TdPlmYx4VBHb4xS/GFt0D2P6040xdc1tnKkgQuoYLtl
XMuBGv7ehCiQE1qekiU1Dog4/YJ/cLDLK75DVVfTLLv3J6EbD2SWNAQRb9u+mjQ3
eqjMppMLJyMW27JgyburOj/2SePky88Gn/zBlnWRxxTqCACa2m72XuBG1aZmXsNl
G5yLCIqCpl7QjtZJ5TY8GsOhqJjzPfE1HjXAl9a5xLCDYHzBOnhI9ukEjOU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org