Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_hiyzcRCfjsuW3sT5kAAyfVnARs.roa
File:                     _hiyzcRCfjsuW3sT5kAAyfVnARs.roa (raw, json)
Hash identifier:          IsVSC6BoE8cJqantfeAkdM3I0KP+QQ42fTU5D4ShDMQ=
Subject key identifier:   FE:18:B2:CD:C4:42:7E:3B:2E:5B:7B:13:E6:40:00:C9:F5:67:01:1B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_hiyzcRCfjsuW3sT5kAAyfVnARs.roa
Signing time:             Tue 30 May 2023 16:29:20 +0000
ROA not before:           Tue 30 May 2023 16:29:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FE18B2CDC4427E3B2E5B7B13E64000C9F567011B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:81:0d:15:ed:f7:f1:1c:39:5c:4b:5a:a9:
                    f6:a2:8a:49:aa:9f:ee:bf:c3:b0:c7:4f:47:90:0a:
                    6c:ed:5b:09:a2:82:be:a0:96:fb:5e:78:38:27:29:
                    ce:8f:cb:30:15:ae:93:0f:aa:17:95:d0:62:21:66:
                    73:ea:d0:08:12:be:87:84:7b:87:82:ff:7b:bf:40:
                    a2:ba:3c:78:6b:49:5c:4a:25:fb:0d:24:dc:1e:e5:
                    b1:1c:65:ba:ae:17:60:42:f8:c2:98:23:fa:64:8f:
                    6f:23:68:c2:78:ec:82:bb:14:5d:e5:30:13:45:d4:
                    65:d4:0c:44:fd:bb:17:14:f9:c6:87:64:ff:4f:49:
                    17:44:5f:ec:4f:b0:1e:33:a1:fb:e5:0c:10:2e:be:
                    9d:91:0e:ac:87:40:de:29:03:4d:0e:98:de:81:4e:
                    d4:bc:8a:2e:68:bb:cd:74:ee:68:02:bd:26:86:46:
                    62:e8:8c:93:d5:48:c8:0b:19:86:7f:ca:22:36:3c:
                    fd:fb:1d:3d:97:a8:bb:15:c6:b6:a5:22:bf:eb:8a:
                    5e:98:52:12:89:5a:7d:3a:be:93:3d:fb:4c:99:7f:
                    a3:f4:87:dd:76:d7:79:50:30:eb:85:a6:61:a4:af:
                    79:2c:2e:03:32:b6:91:47:75:4b:2f:89:5a:3b:5c:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:B2:CD:C4:42:7E:3B:2E:5B:7B:13:E6:40:00:C9:F5:67:01:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_hiyzcRCfjsuW3sT5kAAyfVnARs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:76:7f:0b:04:4f:68:ff:9e:b5:3c:c5:f7:7b:eb:cd:7a:
         f3:df:eb:8b:42:8e:77:91:4a:30:2e:ed:40:d5:0a:71:b5:46:
         a9:49:dc:7e:64:7c:b3:3c:2a:7f:79:8e:21:66:e8:40:30:91:
         bd:1f:a6:c2:72:a3:0e:36:a7:08:cd:ef:87:c5:50:15:ef:22:
         0f:bb:5a:54:55:38:c5:17:47:5a:12:32:d7:b6:d8:11:5d:c8:
         a1:f5:7b:ae:15:af:3a:5a:1f:45:4d:18:8f:1f:12:2e:a8:87:
         9b:bd:fb:99:2a:53:5d:29:35:89:d5:3b:9f:59:51:59:1a:47:
         02:bd:af:ca:54:89:9d:ad:2e:24:ea:a4:d8:e1:38:3f:11:e7:
         75:f5:81:16:2d:5d:d4:ee:69:db:48:2a:64:d3:4f:6f:71:8c:
         55:6a:35:24:1a:bc:0d:42:ba:c4:21:fb:42:71:53:94:42:c0:
         86:3c:cf:c9:b6:3d:a4:63:1c:b5:fd:96:21:7d:48:c7:ca:c2:
         db:5f:66:65:d3:2b:57:a7:44:65:f2:6a:03:29:0d:9b:a9:2e:
         a7:7f:e3:0e:07:67:0b:9f:ad:91:84:24:fd:74:47:9b:64:9e:
         53:dd:23:0c:c3:08:fb:e8:8c:8a:45:20:e4:38:f4:4d:41:98:
         c6:28:f6:bc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjI5MjBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZFMThCMkNEQzQ0MjdF
M0IyRTVCN0IxM0U2NDAwMEM5RjU2NzAxMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIvYENFe338Rw5XEtaqfaiikmqn+6/w7DHT0eQCmztWwmigr6g
lvteeDgnKc6PyzAVrpMPqheV0GIhZnPq0AgSvoeEe4eC/3u/QKK6PHhrSVxKJfsN
JNwe5bEcZbquF2BC+MKYI/pkj28jaMJ47IK7FF3lMBNF1GXUDET9uxcU+caHZP9P
SRdEX+xPsB4zofvlDBAuvp2RDqyHQN4pA00OmN6BTtS8ii5ou8107mgCvSaGRmLo
jJPVSMgLGYZ/yiI2PP37HT2XqLsVxralIr/ril6YUhKJWn06vpM9+0yZf6P0h912
13lQMOuFpmGkr3ksLgMytpFHdUsviVo7XDDNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/hiyzcRCfjsuW3sT5kAAyfVnARswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L19oaXl6Y1JDZmpzdVczc1Q1a0FBeWZWbkFScy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxbnwwDQYJKoZIhvcNAQELBQADggEBAJPrdn8LBE9o/561PMX3e+vNevPf
64tCjneRSjAu7UDVCnG1RqlJ3H5kfLM8Kn95jiFm6EAwkb0fpsJyow42pwjN74fF
UBXvIg+7WlRVOMUXR1oSMte22BFdyKH1e64VrzpaH0VNGI8fEi6oh5u9+5kqU10p
NYnVO59ZUVkaRwK9r8pUiZ2tLiTqpNjhOD8R53X1gRYtXdTuadtIKmTTT29xjFVq
NSQavA1CusQh+0JxU5RCwIY8z8m2PaRjHLX9liF9SMfKwttfZmXTK1enRGXyagMp
DZupLqd/4w4HZwufrZGEJP10R5tknlPdIwzDCPvojIpFIOQ49E1BmMYo9rw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org