Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_yXnwEWR4XGYCtbGEYOMtsmboVM.roa
File:                     _yXnwEWR4XGYCtbGEYOMtsmboVM.roa (raw, json)
Hash identifier:          DeipOqZbk17y0kE9Z348hdriW1MwqTT3ey6LmtlgaqM=
Subject key identifier:   FF:25:E7:C0:45:91:E1:71:98:0A:D6:C6:11:83:8C:B6:C9:9B:A1:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03ED
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_yXnwEWR4XGYCtbGEYOMtsmboVM.roa
Signing time:             Tue 06 Jun 2023 16:03:46 +0000
ROA not before:           Tue 06 Jun 2023 16:03:46 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.218.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:46 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FF25E7C04591E171980AD6C611838CB6C99BA153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:a8:dd:91:87:6f:f7:5d:1f:c8:c5:a4:9d:
                    6f:57:0b:83:54:e5:99:42:02:4d:03:3c:27:cc:8b:
                    55:71:b5:6f:c8:02:43:09:a8:01:c7:13:90:fd:96:
                    f3:af:51:39:a3:db:91:06:b7:94:28:ab:ee:86:b8:
                    75:c1:19:89:e4:4b:8a:e5:b6:32:f9:5a:7b:49:b8:
                    22:5e:81:59:59:a6:4b:2c:9c:60:4a:f5:63:55:f7:
                    c0:99:8b:a2:e9:5a:59:19:ab:78:a2:ea:94:70:05:
                    08:91:1f:9e:fa:f9:09:9b:a9:d1:2b:89:c8:3e:43:
                    e4:8a:5b:83:4a:da:c9:ed:97:0b:47:ed:a6:a0:f1:
                    0e:a4:2f:a3:7c:08:ad:51:a9:00:8d:fc:57:ca:2c:
                    41:d9:3a:99:28:23:35:d4:2f:e7:ee:5e:ca:cb:77:
                    25:cb:9a:bc:03:b8:78:c0:7b:e8:b0:e8:5e:0e:14:
                    f9:27:be:20:23:a3:8f:0c:0d:87:b0:05:83:d2:a2:
                    da:11:da:e9:76:bd:44:3c:33:ad:fd:b1:f0:39:95:
                    fa:b4:f7:76:7a:64:77:a6:2d:ae:68:42:c4:39:72:
                    2a:b2:17:32:02:4c:ad:d4:86:c9:46:85:d7:46:98:
                    85:76:f6:9f:23:47:1f:bf:00:96:73:72:5f:54:41:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:25:E7:C0:45:91:E1:71:98:0A:D6:C6:11:83:8C:B6:C9:9B:A1:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_yXnwEWR4XGYCtbGEYOMtsmboVM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:af:d8:64:d1:95:b2:66:ce:d2:1f:12:29:69:31:50:da:
         30:84:1d:07:ec:68:f6:27:6c:08:67:6c:e3:8b:b5:00:21:1c:
         a0:c1:3b:57:4c:4a:aa:5f:c8:35:37:6c:a9:59:6d:50:f7:94:
         d6:e9:5d:d9:a4:8c:d6:db:f0:87:0a:e4:64:98:cd:75:50:0f:
         28:86:d2:c3:ab:6a:fd:10:ee:1d:0f:d2:7c:0f:2a:83:0c:61:
         34:61:0a:ae:9f:39:6f:67:cd:b6:e1:19:b5:ca:5c:40:31:ef:
         d6:93:d5:59:b5:13:c4:23:87:30:47:12:6f:e3:5a:20:c7:31:
         32:4e:d1:f9:7b:ab:01:84:16:99:76:98:b4:ce:b5:21:fa:ab:
         26:ce:44:cc:d2:8e:de:0a:e4:1f:72:53:1e:f8:ef:cd:13:12:
         a4:43:38:3e:ac:94:28:42:e8:d4:43:18:50:8f:e5:61:e8:07:
         59:8e:bf:1b:ec:11:46:7d:7c:c4:28:28:02:cf:bc:6d:50:ff:
         9f:2d:7e:b7:02:98:b6:9b:a5:86:85:6c:70:55:4f:36:bc:09:
         95:97:be:bd:6c:7a:26:1e:c9:44:92:f4:c6:3a:1b:33:f9:2a:
         e8:28:fc:43:b0:c3:50:b5:30:66:4b:1c:f9:18:df:4c:2b:50:
         67:a3:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org