Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa
File:                     ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa (raw, json)
Hash identifier:          LFaTFzfw/SYh5cNxJnKxOgycZu/fSSyZAKNQ227U1m0=
Subject key identifier:   65:33:F1:63:5C:04:F2:B3:58:C2:DC:76:E6:36:79:8D:27:3A:4D:5D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa
Signing time:             Tue 30 May 2023 17:18:25 +0000
ROA not before:           Tue 30 May 2023 17:18:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:18:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6533F1635C04F2B358C2DC76E636798D273A4D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:d3:91:d8:f1:69:21:bc:57:a1:2e:9f:cf:
                    90:e8:f7:9f:f1:95:b4:90:52:07:9f:78:77:c5:0d:
                    67:b9:29:49:53:37:4d:6e:aa:10:bc:b3:ab:0f:e7:
                    4f:be:80:7c:3d:61:cf:71:0f:fc:47:9c:eb:d3:d9:
                    28:f4:8f:4f:90:b3:bb:93:e0:d1:99:4b:bf:8b:2a:
                    b5:d5:73:50:e5:52:8a:16:fe:78:46:6e:6e:51:61:
                    8d:77:23:d8:0a:4a:26:b0:5b:9f:0b:4c:f8:e8:2a:
                    8f:15:3d:da:8b:a0:d5:02:11:71:0f:a6:32:f6:b7:
                    9d:dd:a7:b8:06:98:7a:3d:7a:24:41:8c:cb:41:6d:
                    0b:fa:00:28:08:81:e8:81:e9:47:d1:e4:f1:66:64:
                    65:32:54:7f:8c:c5:21:71:a4:d7:b9:bd:75:fd:bd:
                    ce:d4:c2:71:32:ca:f3:1f:a1:a8:e7:44:0f:c6:68:
                    34:c6:be:dc:4e:97:74:f3:37:9f:fe:9e:dc:c6:d8:
                    ca:bd:7c:e1:82:d5:61:88:55:fc:b0:8f:fc:e5:8e:
                    7e:f0:65:b9:c5:6f:7e:8f:23:af:67:50:24:3a:48:
                    54:35:9c:e9:dc:6f:ec:c9:6a:b6:28:93:c8:fd:e5:
                    9f:e8:04:45:56:91:5f:e5:f5:d0:fc:e6:a4:af:cf:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:F1:63:5C:04:F2:B3:58:C2:DC:76:E6:36:79:8D:27:3A:4D:5D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTPxY1wE8rNYwtx25jZ5jSc6TV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:90:e1:56:ad:d1:38:a7:13:2f:73:40:d1:fd:04:42:38:9f:
         3c:86:7f:9a:85:48:bb:bb:08:10:c6:90:e5:f7:30:5b:1e:70:
         f6:96:30:a9:ff:44:2c:5a:3d:3f:19:db:fe:30:71:20:de:67:
         96:a7:b0:64:df:33:5b:e0:e7:ae:26:8f:05:2e:3b:d3:4f:2d:
         04:29:08:99:23:51:74:99:c8:94:df:0d:c0:fb:d4:96:c4:43:
         94:70:29:f4:e2:54:4d:5e:ba:ed:81:76:38:69:91:c6:ca:74:
         72:6c:7f:10:1d:70:6b:23:97:82:89:1f:75:43:46:fb:1f:75:
         22:59:dc:90:17:c9:5d:9c:1f:78:99:68:01:9f:13:6d:4f:c9:
         f0:e8:90:c2:88:9b:6c:8f:04:2b:ca:0d:a8:cd:1d:78:0a:d0:
         cb:5b:5f:82:97:a4:54:e0:e5:a0:17:ae:2b:11:43:90:02:57:
         55:73:de:54:0d:25:2f:31:ef:57:87:27:04:9c:5a:17:db:b4:
         a4:13:30:4e:c3:96:d5:7d:01:ff:4e:6a:4a:6a:3e:fe:da:69:
         0f:1c:af:fb:a8:85:c0:03:12:5b:49:c0:e3:a8:a1:95:c9:7e:
         a9:98:8a:2f:0c:3c:78:47:3e:b2:21:81:05:6e:01:db:35:bb:
         96:0d:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org