Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xxj19qzMgdHiA8Ud0vfD-WDqKQw.roa
File:                     Xxj19qzMgdHiA8Ud0vfD-WDqKQw.roa (raw, json)
Hash identifier:          igMEa7LRP9W+UqKpEDVuQn5rjmSKLqiAownhVJwPI/o=
Subject key identifier:   5F:18:F5:F6:AC:CC:81:D1:E2:03:C5:1D:D2:F7:C3:F9:60:EA:29:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       43
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xxj19qzMgdHiA8Ud0vfD-WDqKQw.roa
Signing time:             Mon 27 Mar 2023 16:04:21 +0000
ROA not before:           Mon 27 Mar 2023 16:04:21 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:21 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5F18F5F6ACCC81D1E203C51DD2F7C3F960EA290C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:f6:18:ba:71:98:c5:43:06:e5:92:bc:25:
                    fb:39:59:42:64:74:fc:c2:90:7e:57:18:5c:43:ee:
                    7a:d9:75:34:27:b8:30:10:cd:c4:1f:05:1d:34:d5:
                    ad:9c:8f:0b:e9:ee:61:2b:9f:b1:c5:39:01:78:74:
                    08:fe:4f:a0:78:81:5f:87:9b:8e:04:4f:a5:6a:94:
                    6b:aa:b5:a5:b7:84:2b:92:f9:da:1c:ab:ed:57:d8:
                    78:ca:cf:b6:5b:39:d4:f6:7d:30:95:3a:3c:2c:15:
                    8d:3f:0a:61:e3:db:1a:c6:c5:dc:9a:b1:74:ea:1e:
                    fc:aa:b0:53:e6:56:40:08:09:3c:fd:6b:a9:1e:7c:
                    81:c8:35:29:16:a6:43:17:19:2e:e5:a5:c3:26:ac:
                    cd:42:1d:50:f2:c2:13:a4:ad:62:66:cd:b5:1c:22:
                    4f:17:c1:a6:8f:aa:e1:9d:5f:14:41:e8:97:b0:3f:
                    4d:c6:7b:fb:22:33:6c:0e:3e:a4:f0:a9:89:a7:39:
                    78:a2:46:55:54:20:0c:d9:4d:2c:06:de:0c:4e:9c:
                    0b:d9:28:c7:7f:fb:7b:03:e2:cc:f9:82:dd:56:a1:
                    91:06:57:4e:05:a6:76:13:30:3c:3e:44:c9:5c:79:
                    d4:70:55:9b:4d:44:a2:db:10:8c:28:d6:e8:69:24:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:F5:F6:AC:CC:81:D1:E2:03:C5:1D:D2:F7:C3:F9:60:EA:29:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xxj19qzMgdHiA8Ud0vfD-WDqKQw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:de:38:06:99:62:f2:e2:f3:a0:9a:cd:a9:de:78:87:81:
         47:ab:0c:f2:cc:15:42:fa:91:47:57:25:96:27:f2:29:f1:cb:
         d2:3d:2c:d4:ff:da:74:f0:ad:57:52:58:b7:d6:d4:7e:28:f6:
         4f:38:b8:22:18:f3:b1:cc:cb:02:1d:37:dc:33:02:99:ff:74:
         46:d9:cd:cb:93:29:dc:1c:44:d0:b2:48:13:6a:72:c7:46:a4:
         0f:07:86:e2:c6:7b:b5:68:47:f4:16:16:41:21:ef:25:cd:39:
         52:69:27:26:01:67:a9:c8:db:55:85:d2:c5:bb:fe:7b:5d:8e:
         70:53:69:47:be:40:9d:9d:17:d8:98:d4:1d:8c:d0:48:a2:ec:
         d9:1c:6c:35:39:97:c8:c8:45:49:08:f2:22:6b:f4:14:1e:94:
         38:4d:a1:ef:e3:de:a7:e6:a8:68:a1:4b:7a:0b:b2:4f:ad:f1:
         e1:0e:c6:11:65:0c:45:1d:05:23:5d:da:c5:79:80:fa:70:9f:
         78:04:b9:23:f7:2d:20:4c:e4:9c:47:79:de:68:de:09:5a:f5:
         fa:f4:2c:b8:bf:09:30:a9:1d:e3:13:ec:10:d8:c2:fd:e9:b7:
         33:2c:90:dc:14:8d:e3:57:d8:1f:c4:52:17:d3:9e:b8:e8:e7:
         eb:64:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org