Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X_PYnbdb9hcdr8Uy-bK6NRRgf2I.roa
File:                     X_PYnbdb9hcdr8Uy-bK6NRRgf2I.roa (raw, json)
Hash identifier:          BT1aWoA/MSSkZZDSJPKh8YFOuIcBCI0SV5oIdWf81JQ=
Subject key identifier:   5F:F3:D8:9D:B7:5B:F6:17:1D:AF:C5:32:F9:B2:BA:35:14:60:7F:62
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0217
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X_PYnbdb9hcdr8Uy-bK6NRRgf2I.roa
Signing time:             Tue 30 May 2023 16:30:26 +0000
ROA not before:           Tue 30 May 2023 16:30:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.162.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5FF3D89DB75BF6171DAFC532F9B2BA3514607F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:d9:71:73:d2:06:42:f8:ab:42:b1:4c:4b:
                    e1:e7:c9:04:cc:dd:4b:b1:11:6a:fa:92:4e:c6:6e:
                    25:a2:ca:9d:2b:00:1e:aa:c9:d9:32:c4:96:c6:3f:
                    90:99:bd:d9:1d:da:5a:fb:fa:e8:9e:50:e1:9b:68:
                    ef:b2:7e:2e:d8:f4:f6:7d:68:7d:6e:8e:1b:37:80:
                    95:fa:be:91:5e:a3:fe:53:11:b4:1d:c7:5d:24:7b:
                    24:15:01:2f:dd:f2:1b:c4:14:66:62:69:33:65:1f:
                    f7:78:8e:6b:77:5e:24:85:17:2a:ab:a9:c0:49:2b:
                    bd:20:69:0d:f6:ed:33:df:ed:eb:9d:3d:52:14:9d:
                    fa:3a:ff:84:a2:49:a0:a3:dd:42:2f:19:be:ec:86:
                    0b:14:10:4c:82:ba:72:4b:87:59:08:24:26:fc:9c:
                    3a:ca:12:bf:55:5f:d3:57:82:47:34:20:4c:37:05:
                    c8:5a:5c:76:86:06:e3:79:2c:9f:08:87:a2:bf:4f:
                    db:0d:59:98:a0:0d:40:21:cf:aa:a3:8d:ad:35:64:
                    0a:7a:fb:cf:48:3e:b4:87:b4:a4:d0:58:30:7b:9f:
                    06:03:30:97:a5:be:c3:3e:c0:65:21:aa:b0:bd:5f:
                    62:af:b2:d6:18:94:32:e8:9e:f7:90:1e:80:65:83:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:D8:9D:B7:5B:F6:17:1D:AF:C5:32:F9:B2:BA:35:14:60:7F:62
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X_PYnbdb9hcdr8Uy-bK6NRRgf2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:5d:9e:0f:31:45:3b:a9:b7:c4:d3:1a:e7:54:ef:7a:7c:
         9b:2b:84:b2:ef:fd:50:55:ed:e1:ce:d8:25:29:a8:c8:d3:92:
         bb:8c:5a:67:b3:83:f0:f8:3c:42:37:9e:dc:c7:49:7a:b4:2c:
         01:d5:10:01:6b:09:14:eb:00:a4:dd:12:57:6d:5b:75:7f:4e:
         ca:3f:ca:1f:a9:c9:bf:7f:bd:75:14:df:a5:63:0d:ee:4e:cd:
         32:01:31:c4:6d:91:1e:c3:dc:41:da:1b:9c:0e:9c:3e:d9:5b:
         71:88:2b:b7:c6:8d:39:0f:65:34:d5:0f:e0:d3:3e:69:15:e5:
         f8:8a:06:c2:5c:e4:5d:7b:29:d1:73:b8:95:82:7a:f6:c2:c3:
         ff:35:0b:a5:8d:79:db:cd:fb:bd:3b:66:89:71:f5:b5:d8:60:
         ff:ef:06:98:12:b9:3b:60:53:e1:d5:a9:d8:6b:ff:cc:dc:8e:
         6a:b1:41:b3:e7:b4:ae:86:ca:9a:f7:7f:d1:6a:bc:cd:72:95:
         eb:55:e0:82:4f:4a:70:a0:8c:0c:15:82:39:50:4c:7d:f8:b2:
         9f:30:3a:f9:3d:ce:6e:1a:22:d5:b4:57:d6:eb:2c:0e:99:e2:
         de:fe:fd:ec:10:46:b1:b8:8a:d0:c6:4e:90:69:73:29:31:d4:
         ba:86:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org