Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_GtW7m_-P6vIR60i8NPnFGRI5YI.roa
File:                     _GtW7m_-P6vIR60i8NPnFGRI5YI.roa (raw, json)
Hash identifier:          MHf3iO9gOa6/0yJlq/DXsqS4oXquxWMDFTLbGefmXRc=
Subject key identifier:   FC:6B:56:EE:6F:FE:3F:AB:C8:47:AD:22:F0:D3:E7:14:64:48:E5:82
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0320
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_GtW7m_-P6vIR60i8NPnFGRI5YI.roa
Signing time:             Thu 01 Jun 2023 16:07:24 +0000
ROA not before:           Thu 01 Jun 2023 16:07:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.84.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:07:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FC6B56EE6FFE3FABC847AD22F0D3E7146448E582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:0e:e3:88:5b:9e:cc:b1:6b:5b:b8:38:f5:
                    52:d9:1e:e2:2f:b8:66:6c:32:c6:c8:31:96:72:ff:
                    05:6c:84:b1:8c:af:a8:71:04:2c:85:7c:80:bc:cd:
                    79:81:49:6a:96:47:e9:d5:84:a0:de:98:5e:07:43:
                    3e:7e:53:7a:40:73:c9:04:2a:de:ee:e5:1f:8b:4d:
                    9d:86:e4:fe:ba:d2:0d:14:d1:6a:e8:0d:96:20:dc:
                    c9:e0:62:21:d6:07:a4:8e:a5:5e:55:61:e9:b9:a7:
                    28:b9:8f:98:eb:1c:33:1f:ae:2d:95:05:35:d7:db:
                    99:b1:74:e7:5e:41:f8:41:89:5f:84:40:64:db:d6:
                    83:3f:7b:12:59:84:be:03:79:3c:8e:3b:e1:27:15:
                    4d:92:04:2a:10:fc:28:5d:dd:e8:e4:58:d6:59:f1:
                    48:08:6b:aa:c1:d9:e7:66:32:a9:4b:c5:f3:90:d6:
                    5d:93:b5:78:27:b9:b6:a8:ac:d3:e3:94:86:b9:67:
                    30:a0:3e:ae:17:a5:d2:f0:57:5c:87:90:cf:b4:5d:
                    cc:e7:c4:d1:b9:f4:92:5d:30:aa:e2:39:61:e8:db:
                    a5:0e:f2:f3:eb:7d:0b:4b:86:6a:d7:c8:61:d6:df:
                    53:19:bd:74:e3:dd:6b:57:60:cb:7f:b3:64:4e:38:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:56:EE:6F:FE:3F:AB:C8:47:AD:22:F0:D3:E7:14:64:48:E5:82
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_GtW7m_-P6vIR60i8NPnFGRI5YI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:f4:6a:36:30:1f:57:89:83:a8:b3:fe:c2:fe:2d:8e:66:69:
         f5:95:fa:b4:91:b0:ef:96:1b:4e:3c:e7:93:cd:c3:3f:77:bc:
         09:2c:11:ac:d5:67:b9:19:15:2c:b3:f1:f8:54:5a:42:9e:52:
         57:29:26:cd:90:cc:5e:70:d7:cd:54:ef:ef:17:c8:a5:80:d9:
         af:1f:7d:97:5a:8f:65:bd:f3:5e:fb:38:bd:b4:f3:25:30:54:
         7c:69:9b:31:51:e1:4b:fc:a5:01:44:be:99:04:37:bc:08:85:
         34:d5:15:6d:e3:2a:2d:ea:5c:c1:5f:5a:cb:f4:62:8d:56:e3:
         af:52:2d:89:5a:35:9e:ff:b5:2e:4e:96:58:cc:c5:88:2e:9b:
         29:2c:24:bc:6c:68:4a:53:d7:1e:74:fe:34:d8:d0:8c:99:e3:
         4b:0d:1a:31:ee:cb:f0:bd:55:89:3f:9e:be:9e:b6:ca:ad:0c:
         0c:54:3b:5e:2e:69:11:20:fa:4b:23:02:34:7c:a5:36:54:5d:
         23:7c:91:78:6a:da:34:4b:f6:8e:17:c8:5e:ba:a7:0f:fa:47:
         2f:c9:b6:e3:e7:96:90:0c:bd:eb:30:ad:24:a8:04:d8:98:d4:
         4e:51:d9:87:a9:ec:38:e4:60:02:c4:29:32:3a:d3:d1:06:9b:
         e8:8e:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org