Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiuwIwoqHsPxcwax7Sh5qEsFL1o.roa
File:                     YiuwIwoqHsPxcwax7Sh5qEsFL1o.roa (raw, json)
Hash identifier:          NeEap3VMc3AQjRXWn10SDtkarYPMOHbodukirw+vv8E=
Subject key identifier:   62:2B:B0:23:0A:2A:1E:C3:F1:73:06:B1:ED:28:79:A8:4B:05:2F:5A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0105
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiuwIwoqHsPxcwax7Sh5qEsFL1o.roa
Signing time:             Wed 24 May 2023 16:05:04 +0000
ROA not before:           Wed 24 May 2023 16:05:04 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.162.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:05:04 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=622BB0230A2A1EC3F17306B1ED2879A84B052F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:b6:35:c5:f7:e0:15:39:9b:31:3b:41:2e:
                    46:e2:e0:91:28:03:d0:3c:54:81:cb:00:ea:ff:ad:
                    26:34:29:aa:aa:09:41:3d:29:c7:c3:87:bf:c7:6d:
                    dc:ad:6a:e2:bf:e2:72:26:7e:74:d8:3e:6a:a4:13:
                    bc:55:4c:df:31:99:7a:7e:b8:9e:b0:b7:37:fd:53:
                    7b:5a:db:ca:55:46:88:cf:ec:ee:b3:c9:d6:21:72:
                    ba:de:86:20:f4:b9:67:d2:89:6c:74:e3:82:d6:39:
                    9e:bd:02:93:28:61:c9:47:d8:3e:9d:58:83:c2:58:
                    19:99:4f:05:b9:9a:5b:14:f3:91:c3:04:32:8f:b3:
                    40:d0:62:91:df:1a:9d:5e:ae:8f:1c:c2:ef:6b:95:
                    ea:be:62:7a:89:8b:ab:f9:2e:66:22:14:78:81:d6:
                    cf:be:09:cb:75:ad:6d:7b:2d:35:6f:b0:6f:63:b2:
                    97:5f:d0:83:be:89:f5:a2:e0:93:6d:d2:88:81:55:
                    d2:90:4a:90:43:53:af:f4:b3:30:68:62:81:e4:71:
                    5f:21:82:ae:cc:84:34:26:fc:43:7a:69:3a:62:4d:
                    64:b0:35:ac:ed:65:bf:be:00:8d:fd:d2:b5:82:2a:
                    a4:e9:8d:46:6a:69:04:28:50:d8:65:1d:80:48:9d:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2B:B0:23:0A:2A:1E:C3:F1:73:06:B1:ED:28:79:A8:4B:05:2F:5A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YiuwIwoqHsPxcwax7Sh5qEsFL1o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:05:99:4d:b7:fa:49:27:50:34:65:43:6d:8c:03:35:75:d9:
         ac:0e:b5:1b:43:74:45:15:3a:f5:b3:4c:99:6e:c7:66:52:3a:
         4a:99:57:dc:89:95:04:16:33:2a:06:08:9b:35:64:d6:2f:07:
         7d:a8:7b:77:f6:c8:11:b9:bc:db:f2:91:7a:92:a1:29:1f:2f:
         4b:47:69:d0:35:97:55:de:ee:a8:15:d2:cb:23:8d:72:39:90:
         64:2f:97:41:d2:36:0a:e2:64:34:5e:1b:b5:28:9e:b6:77:0b:
         23:5f:94:6c:66:c1:95:d8:f9:d7:5c:cc:bd:d8:9e:cc:ca:66:
         25:6c:81:84:7e:0f:e3:4b:1e:dd:3c:28:1e:2d:4e:30:1d:ab:
         f7:d9:db:58:fc:6d:45:05:9d:8e:aa:99:7f:4b:11:8a:e3:2a:
         95:bc:9e:d7:03:4e:00:fb:c0:01:6c:3b:db:59:b7:64:17:8c:
         0d:1a:50:5f:96:41:ae:a3:52:e3:b6:19:f7:a3:94:4f:f6:3c:
         54:e2:64:95:e5:4d:cc:eb:08:1b:bc:f9:35:af:43:16:5b:ea:
         b8:f6:03:a2:68:f2:b6:13:74:f1:e5:3d:88:e6:f2:e0:06:24:
         94:c5:b2:8e:55:8d:dc:51:a0:5f:3b:ac:2e:78:7d:8e:a3:c8:
         7a:63:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org