Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_hh7Nmzm-5-UaQQKJhM4ZwDwTHA.roa
File:                     _hh7Nmzm-5-UaQQKJhM4ZwDwTHA.roa (raw, json)
Hash identifier:          H+JGOLw9/f+tcAS8HxdmFDYG+X7wKiwWpV2jDgGy9O0=
Subject key identifier:   FE:18:7B:36:6C:E6:FB:9F:94:69:04:0A:26:13:38:67:00:F0:4C:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       024F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_hh7Nmzm-5-UaQQKJhM4ZwDwTHA.roa
Signing time:             Tue 30 May 2023 16:32:29 +0000
ROA not before:           Tue 30 May 2023 16:32:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.101.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FE187B366CE6FB9F9469040A2613386700F04C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:0c:fa:b1:22:f8:3a:c8:1c:0b:cf:ee:2b:
                    92:e0:36:35:5a:48:9d:56:ed:a5:f8:20:a1:4e:4b:
                    84:04:61:e3:4a:97:b6:cb:57:51:0c:39:b2:6a:46:
                    17:55:c5:32:d3:01:57:66:a4:44:49:54:c1:62:67:
                    95:20:8f:05:8d:77:71:e0:16:c5:f7:04:6d:77:3e:
                    85:43:f5:15:09:58:1c:6e:31:c8:80:74:30:f0:75:
                    53:06:6a:2b:5a:14:a0:88:62:1a:c2:14:f0:23:70:
                    1f:8b:f0:03:7e:ad:3e:78:bf:7f:ff:3d:a6:b9:34:
                    e0:9f:0b:a6:17:89:bc:25:de:e2:d9:c5:15:b1:20:
                    fb:77:4b:66:03:c8:05:c6:f5:7d:fb:72:a0:f2:60:
                    70:1a:e7:70:fd:9e:34:55:72:e2:22:03:54:fe:72:
                    6a:1a:37:7e:f3:9a:53:d7:0a:42:3d:c1:b0:80:e6:
                    3e:ed:e3:18:66:0f:8d:c0:36:74:88:f0:46:b0:e4:
                    8d:a2:f3:d3:6d:98:40:5b:e5:0a:7b:70:62:b7:29:
                    b4:61:97:a1:97:80:52:24:35:af:e1:16:f6:52:ec:
                    ab:b5:38:27:78:d3:63:12:95:92:36:83:b8:40:b1:
                    5e:5d:fd:15:0a:07:b3:d9:d9:cd:2d:8f:27:9e:4c:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:7B:36:6C:E6:FB:9F:94:69:04:0A:26:13:38:67:00:F0:4C:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_hh7Nmzm-5-UaQQKJhM4ZwDwTHA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.101.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         53:16:d8:71:2c:d8:60:92:ef:93:74:2a:97:87:d2:b1:06:85:
         7d:bf:08:16:ba:45:f0:1e:a2:a9:03:c0:a0:f1:58:f9:ec:86:
         74:86:a6:19:22:28:b6:ad:87:ad:00:a7:cd:98:d5:b4:35:8e:
         21:90:35:09:b9:e6:41:42:9e:f7:69:0c:11:c4:5f:93:1b:41:
         08:d2:74:79:29:ca:b2:7c:a1:e0:a8:07:fa:19:65:d8:ec:e8:
         0a:d8:5f:73:33:0e:37:f6:b6:b5:ea:c0:d9:3e:ba:a3:2e:d0:
         f1:e7:09:d3:45:bb:a4:41:c0:1d:2e:ef:ea:65:18:78:fa:81:
         f6:60:2a:33:cf:8a:51:c9:a2:d5:7b:7a:a5:04:14:3b:92:44:
         7c:4e:e0:8d:56:69:81:c0:bc:9f:55:e1:6e:c2:8c:05:16:51:
         3c:9c:a0:0b:34:b1:9d:b3:63:5b:c3:67:ac:fb:c3:46:03:70:
         79:19:fd:14:a3:b1:ab:b1:f5:c9:6b:ba:23:2b:2d:55:c9:85:
         62:ee:2e:9a:e5:4a:4b:0a:a2:cd:9a:20:04:87:e3:1b:db:c0:
         04:5a:29:bb:33:d5:46:a6:4c:f9:89:cb:14:e7:b1:8a:cc:d5:
         c2:44:61:1d:52:e6:d0:ca:b8:47:f1:99:e1:36:77:f1:89:70:
         46:b9:b9:82
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjMyMjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZFMTg3QjM2NkNFNkZC
OUY5NDY5MDQwQTI2MTMzODY3MDBGMDRDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu9wz6sSL4OsgcC8/uK5LgNjVaSJ1W7aX4IKFOS4QEYeNKl7bL
V1EMObJqRhdVxTLTAVdmpERJVMFiZ5UgjwWNd3HgFsX3BG13PoVD9RUJWBxuMciA
dDDwdVMGaitaFKCIYhrCFPAjcB+L8AN+rT54v3//Paa5NOCfC6YXibwl3uLZxRWx
IPt3S2YDyAXG9X37cqDyYHAa53D9njRVcuIiA1T+cmoaN37zmlPXCkI9wbCA5j7t
4xhmD43ANnSI8Eaw5I2i89NtmEBb5Qp7cGK3KbRhl6GXgFIkNa/hFvZS7Ku1OCd4
02MSlZI2g7hAsV5d/RUKB7PZ2c0tjyeeTH/FAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/hh7Nmzm+5+UaQQKJhM4ZwDwTHAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L19oaDdObXptLTUtVWFRUUtKaE00WndEd1RIQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcxZYAwDQYJKoZIhvcNAQELBQADggEBAFMW2HEs2GCS75N0KpeH0rEGhX2/
CBa6RfAeoqkDwKDxWPnshnSGphkiKLath60Ap82Y1bQ1jiGQNQm55kFCnvdpDBHE
X5MbQQjSdHkpyrJ8oeCoB/oZZdjs6ArYX3MzDjf2trXqwNk+uqMu0PHnCdNFu6RB
wB0u7+plGHj6gfZgKjPPilHJotV7eqUEFDuSRHxO4I1WaYHAvJ9V4W7CjAUWUTyc
oAs0sZ2zY1vDZ6z7w0YDcHkZ/RSjsaux9clruiMrLVXJhWLuLprlSksKos2aIASH
4xvbwARaKbsz1UamTPmJyxTnsYrM1cJEYR1S5tDKuEfxmeE2d/GJcEa5uYI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org