Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_PIx4Hi3EycIJs9zReHa7vyaoM4.roa
File:                     _PIx4Hi3EycIJs9zReHa7vyaoM4.roa (raw, json)
Hash identifier:          cKY4mMMLMG+DJ1lvatGVfSMYLFzEwqudeNAr99+Ifvw=
Subject key identifier:   FC:F2:31:E0:78:B7:13:27:08:26:CF:73:45:E1:DA:EE:FC:9A:A0:CE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       42
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_PIx4Hi3EycIJs9zReHa7vyaoM4.roa
Signing time:             Mon 27 Mar 2023 16:04:20 +0000
ROA not before:           Mon 27 Mar 2023 16:04:20 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.4.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:20 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FCF231E078B713270826CF7345E1DAEEFC9AA0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:75:cd:f1:56:e9:8e:cb:0d:91:a1:0f:ec:
                    da:f4:a0:21:14:e1:2f:f6:7e:e0:fa:05:91:4c:9f:
                    5a:2b:4f:a0:87:b3:12:37:73:58:8c:d7:16:aa:b3:
                    2d:21:2c:63:d2:98:e8:a8:a3:7c:08:0a:5e:5c:b9:
                    cd:22:ce:46:3b:14:f2:0f:ae:69:20:48:ea:0e:cd:
                    13:ad:79:c4:e6:8e:b9:5a:bc:6e:05:90:63:5a:11:
                    a4:e0:fc:82:df:f5:c2:53:19:10:8e:8e:93:de:d8:
                    75:0f:69:50:3c:b0:12:30:62:3c:89:10:dd:cb:62:
                    8a:19:3d:12:f4:46:92:f0:98:29:15:d1:0f:e1:f1:
                    74:50:93:e6:79:3e:18:52:0a:c8:6f:17:93:fb:1b:
                    7f:da:40:31:47:fd:b7:a9:25:5c:09:d5:ed:b6:a9:
                    3f:38:f5:43:50:2a:bc:7a:41:8a:42:03:fc:df:67:
                    cd:25:03:6b:d4:13:43:80:b8:08:4d:6d:67:76:d8:
                    59:6b:e7:fe:0a:f3:b3:f1:9b:93:e8:af:88:1c:24:
                    a5:45:b7:f9:a9:1f:2a:d4:64:40:21:dd:d1:71:2c:
                    bc:a4:d8:99:ae:92:3e:8c:82:39:9a:d9:00:bd:8d:
                    dc:7a:ba:c0:38:8b:1d:25:4a:88:aa:d5:08:d3:6e:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F2:31:E0:78:B7:13:27:08:26:CF:73:45:E1:DA:EE:FC:9A:A0:CE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_PIx4Hi3EycIJs9zReHa7vyaoM4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:4c:da:3b:14:cf:e8:91:c5:30:3d:7e:51:26:2a:61:dd:
         fe:38:20:f2:fd:82:e5:2f:58:5e:b8:d3:0f:e6:11:f4:9f:36:
         e7:3e:7f:fc:2c:46:65:54:b8:79:61:55:c8:6c:09:8c:85:43:
         03:ff:fd:13:08:fb:77:99:1f:c6:60:e1:66:97:18:b8:f7:eb:
         e4:89:cc:41:a1:34:16:91:3a:31:60:51:d8:bc:f0:61:83:73:
         01:cb:23:a0:80:35:5a:09:08:1e:48:bc:f5:3e:96:37:ca:9f:
         20:dc:b2:15:d4:0d:69:ef:0e:c8:a8:1b:8e:cf:a3:f2:22:17:
         40:83:38:86:ba:d0:f2:0f:e6:0c:31:4d:ce:dd:84:9c:7d:9a:
         4b:c8:b3:5b:21:d6:82:6b:86:68:6e:91:08:c0:e9:ca:e1:b1:
         29:0d:b0:5f:f8:a8:ef:65:fa:07:6e:a1:f1:29:d7:ab:a7:65:
         0c:26:4e:f6:6e:76:b3:97:2b:25:e0:0d:0f:5c:96:90:47:83:
         f1:83:0d:ed:89:33:7a:bc:6e:58:bb:3b:e0:d1:cf:13:9b:ca:
         08:bc:78:c3:57:ca:03:a8:7c:08:e4:8e:bf:83:ee:5a:42:22:
         dc:21:38:6b:cf:ff:72:41:45:79:cb:98:45:6a:82:a2:d3:22:
         38:d0:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org