Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z7GXtPROOa5EfOp8krSmViGkO4E.roa
File:                     Z7GXtPROOa5EfOp8krSmViGkO4E.roa (raw, json)
Hash identifier:          WhJ+x4llqgQ8o2+7OjmTQliVgfa87T+5dqP07xeR0sY=
Subject key identifier:   67:B1:97:B4:F4:4E:39:AE:44:7C:EA:7C:92:B4:A6:56:21:A4:3B:81
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       020E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z7GXtPROOa5EfOp8krSmViGkO4E.roa
Signing time:             Tue 30 May 2023 16:29:31 +0000
ROA not before:           Tue 30 May 2023 16:29:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.240.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=67B197B4F44E39AE447CEA7C92B4A65621A43B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:37:b7:71:22:4c:77:1a:32:d0:2e:02:88:
                    37:a0:63:36:5d:bb:a6:f8:91:d1:01:a9:77:4c:fb:
                    c2:49:f3:a0:6d:3e:09:a3:93:55:63:e6:59:5e:e4:
                    32:b8:f0:b3:68:ab:10:d6:1f:55:d2:44:9d:70:7e:
                    69:2c:59:61:b7:14:03:8d:86:fd:93:c2:e6:ec:77:
                    81:82:f9:40:e9:ba:92:82:8d:a2:c7:e8:6d:7b:46:
                    a4:7e:bf:47:cf:23:8b:12:02:da:d4:62:a5:74:75:
                    98:3d:a6:05:57:8e:20:25:2f:7c:81:46:2d:f3:40:
                    50:74:04:5b:2c:ef:bc:8f:0b:44:06:5c:ca:04:8f:
                    dc:10:0f:ec:0f:19:3f:e1:fe:2b:71:8f:5f:a1:7b:
                    0c:1b:f1:d5:3a:7a:46:a0:4c:98:3f:75:f7:ce:22:
                    ea:21:f9:38:35:98:e1:c1:84:da:6e:25:b0:29:2d:
                    71:30:82:ab:dc:1c:da:d7:de:15:44:ca:9e:33:56:
                    77:c9:40:9c:b7:e0:22:f8:18:37:b7:e6:cc:a9:c6:
                    c0:94:a1:42:6d:cc:a0:11:d2:ab:6f:b9:3a:e3:5e:
                    2d:6b:90:da:4f:7e:30:35:96:b1:85:44:19:69:4e:
                    3b:ae:9f:66:4d:34:2d:38:23:d9:81:df:d8:f2:a2:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B1:97:B4:F4:4E:39:AE:44:7C:EA:7C:92:B4:A6:56:21:A4:3B:81
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z7GXtPROOa5EfOp8krSmViGkO4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:b2:3e:cd:19:6b:01:7b:61:eb:95:35:60:84:79:35:a5:
         76:17:5f:30:21:49:cd:b0:84:c8:70:d6:93:c5:ff:41:5b:d8:
         a5:4e:62:2e:cd:70:fc:77:c3:5c:b4:82:42:5f:92:d7:88:4e:
         fc:c8:f3:95:bb:de:00:4d:ce:aa:95:ba:4b:e2:34:44:f0:05:
         50:05:ce:4a:d6:c4:96:b8:30:8f:57:08:10:cb:19:ae:be:a6:
         32:77:47:55:0e:6e:f0:ed:b7:1e:73:21:82:b4:6e:ae:1f:99:
         a8:f2:bd:89:4e:cc:60:4b:89:6a:4e:0c:3c:37:3f:5a:34:8e:
         2f:b6:91:e1:fd:61:64:67:14:ea:b6:c0:54:43:55:ab:8b:0d:
         a9:d9:7a:39:f2:69:a1:46:26:09:db:7a:42:3a:1c:b0:94:40:
         fb:14:8e:44:d5:09:13:45:4f:4b:70:47:d9:5e:ec:44:24:e1:
         31:fb:ff:b3:e6:0b:86:1e:e0:38:53:dd:95:b5:63:bd:ef:03:
         8a:68:5f:dc:bf:69:1a:ea:92:ef:9c:ef:aa:27:91:6a:7d:d8:
         a4:ad:8b:7b:52:36:a6:3a:ca:38:c2:2d:ce:6f:69:97:10:c6:
         99:a6:0d:68:8d:66:78:f6:69:c1:26:f4:21:fa:b8:9a:ec:84:
         63:0d:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org