Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z7e65sZs7rbfitPU1xsa7y6CQuw.roa
File:                     Z7e65sZs7rbfitPU1xsa7y6CQuw.roa (raw, json)
Hash identifier:          aHV0euHQAtl9n0SEBsXlW8qoS7OTKF3CiZJnk0YP6Mo=
Subject key identifier:   67:B7:BA:E6:C6:6C:EE:B6:DF:8A:D3:D4:D7:1B:1A:EF:2E:82:42:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       35
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z7e65sZs7rbfitPU1xsa7y6CQuw.roa
Signing time:             Mon 27 Mar 2023 16:02:06 +0000
ROA not before:           Mon 27 Mar 2023 16:02:06 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:06 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=67B7BAE6C66CEEB6DF8AD3D4D71B1AEF2E8242EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:5f:3f:9a:1d:bb:cc:e9:60:89:d2:b5:e7:
                    c8:f0:fb:f2:5b:81:16:bd:4c:df:b3:a0:9c:fe:c0:
                    e2:b0:4a:db:50:2e:aa:30:77:52:36:37:49:3a:39:
                    0a:da:d9:3b:1d:cb:92:59:f8:92:d7:57:44:ae:3d:
                    d8:83:40:8c:d5:7e:68:82:0a:d8:3e:35:63:d4:46:
                    95:50:e0:d4:48:73:41:b6:dc:2c:9e:6b:3e:02:90:
                    e0:bb:4d:2c:ed:f4:4f:50:e6:3b:07:41:35:48:39:
                    e1:62:5d:37:b0:21:f9:c7:8c:e0:59:e2:05:dd:60:
                    e6:76:d1:46:c0:90:2e:f5:95:37:03:88:b2:4a:53:
                    ba:d8:c1:af:58:d3:b7:95:2d:6e:19:7b:4c:b8:e5:
                    06:ee:6e:48:b3:f5:ba:f2:6d:42:d3:cc:99:c6:51:
                    46:01:da:3f:1e:51:85:70:5a:76:98:36:6a:30:41:
                    8b:93:3c:65:44:ff:53:18:ef:c8:4b:3f:01:85:fc:
                    01:61:b7:bc:5e:c1:53:4a:07:48:a7:e1:64:4f:ab:
                    ee:79:dd:c9:c8:ef:0e:84:e9:2d:d1:1e:d0:5c:cb:
                    97:fd:ca:dc:87:21:db:97:1e:6c:8f:2a:97:8b:d6:
                    5d:c6:36:6f:fd:90:3c:7b:53:8b:f7:5b:52:3b:d9:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B7:BA:E6:C6:6C:EE:B6:DF:8A:D3:D4:D7:1B:1A:EF:2E:82:42:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z7e65sZs7rbfitPU1xsa7y6CQuw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:3a:16:db:76:3e:58:49:5a:84:6b:cf:fd:76:88:7c:26:b5:
         d6:83:fe:2b:82:20:2e:dd:b8:c0:15:c2:b2:c0:72:2b:15:27:
         43:6f:8e:21:35:84:6a:62:19:3b:eb:e3:e1:0f:29:93:45:22:
         e8:21:b0:4d:a6:47:cb:0a:8b:e9:50:ed:9a:b1:35:f7:a3:c9:
         12:2c:f4:9e:68:78:6d:86:e1:4c:d9:cd:74:e5:6e:c5:ee:31:
         65:5d:ca:a7:79:5d:64:28:5b:2e:12:b4:6a:38:83:cd:fc:0e:
         ff:fa:fe:da:f8:89:1c:d6:05:07:c9:6a:7a:e4:2e:bc:b0:5e:
         8b:47:b8:0d:9a:28:3a:15:84:eb:f2:1f:ac:5a:9f:04:53:82:
         26:e1:d3:ba:63:d9:85:c5:82:1a:d3:f7:ea:8c:f0:30:13:78:
         72:84:c2:ec:a3:9b:8a:c2:c4:61:65:1f:1b:08:d5:1d:42:21:
         12:73:a7:4e:7b:11:ae:29:73:33:60:eb:07:9a:68:6c:33:04:
         97:ea:f5:b6:1f:d8:e0:41:88:a7:1b:95:23:aa:f9:50:13:16:
         04:58:e2:60:e2:f4:04:9c:e6:54:29:f2:c6:fc:0f:7b:b2:75:
         b2:2c:c2:fc:c1:7b:53:af:d9:e6:b7:b1:56:1c:bc:fb:3e:fa:
         0a:f8:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org