Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cV1ZUqXReV05eRHl0wtxpzlCPtU.roa
File:                     cV1ZUqXReV05eRHl0wtxpzlCPtU.roa (raw, json)
Hash identifier:          QZR4qX0uA1cndlZ/L9JSTU5fxTBUXr1u3u9eMGdhLm0=
Subject key identifier:   71:5D:59:52:A5:D1:79:5D:39:79:11:E5:D3:0B:71:A7:39:42:3E:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cV1ZUqXReV05eRHl0wtxpzlCPtU.roa
Signing time:             Wed 29 Mar 2023 16:05:49 +0000
ROA not before:           Wed 29 Mar 2023 16:05:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.166.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=715D5952A5D1795D397911E5D30B71A739423ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:fe:cb:ba:4f:88:76:f1:cc:9f:d7:2c:4c:
                    ff:e2:2e:5d:af:bf:57:59:72:40:34:b8:87:de:33:
                    47:df:f9:0d:07:ac:41:09:a0:bf:66:ce:1e:f7:16:
                    f9:75:10:53:85:fb:4a:3f:4a:bc:78:87:66:94:3f:
                    0a:4c:21:9d:7a:17:11:6d:cc:cd:7b:a9:4a:c9:5a:
                    d3:a1:d2:17:4c:db:7e:fb:2b:15:ac:59:34:e3:3d:
                    5b:3c:df:00:6e:74:04:62:c2:d8:d5:85:97:96:6f:
                    51:fd:5e:be:15:35:0a:78:c0:a3:ac:ec:06:9d:b3:
                    f9:70:32:ee:0a:c0:d0:af:e3:16:f0:6b:68:31:8b:
                    72:0a:67:a7:23:e9:c3:07:c5:4f:e3:c8:68:ac:21:
                    a7:03:13:3d:58:1b:a4:56:3f:bc:3e:ab:06:74:0b:
                    ba:57:18:f6:aa:22:4d:f5:2d:bc:3b:cc:55:88:df:
                    ac:52:02:3c:7a:88:e6:e7:38:70:31:e2:9b:85:13:
                    a9:93:92:9b:94:23:44:69:d3:fc:08:01:d8:17:8a:
                    85:b5:24:6e:31:6e:db:d3:44:5a:1a:76:bb:dc:86:
                    f6:52:93:fd:78:34:4f:dc:de:8a:7d:83:fd:26:62:
                    c7:11:7d:7c:fd:69:f3:90:7d:60:28:5a:01:5f:d5:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5D:59:52:A5:D1:79:5D:39:79:11:E5:D3:0B:71:A7:39:42:3E:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cV1ZUqXReV05eRHl0wtxpzlCPtU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:d2:62:9b:f8:3a:09:dc:54:3d:34:5b:55:04:d3:22:ed:5e:
         4d:b0:71:ba:8e:3c:68:66:dc:a8:e3:37:b1:50:7c:df:05:ce:
         63:83:55:13:9e:fa:32:7e:bd:81:8b:6c:24:21:a3:bb:f4:06:
         2e:91:df:c6:66:0f:6b:bf:4f:03:69:ef:3f:d6:02:2f:54:d1:
         9b:6f:6c:21:7b:3f:06:f4:fa:c0:b1:fb:ad:41:11:06:7d:53:
         45:df:59:3d:f4:82:07:d8:9c:ae:46:00:eb:92:dd:9c:a1:71:
         5e:1e:b9:57:78:4e:85:9a:ed:59:43:5d:c8:cb:9c:3d:bc:ce:
         d6:d5:c3:91:25:12:ac:88:dd:aa:5e:df:c5:a7:0b:0e:8e:72:
         92:24:ba:f1:f7:3b:39:a9:a9:a4:f9:84:59:a6:cb:d9:d2:5f:
         fe:73:18:b5:9c:9b:b6:28:9b:c0:69:9c:b8:7f:47:82:d2:b7:
         46:40:03:e9:da:6b:ab:2c:58:b8:b0:d6:6b:0f:e4:9b:3f:d0:
         66:f6:17:37:87:62:dc:c8:12:13:ef:ef:37:94:9b:b7:86:ba:
         48:26:67:36:24:62:2d:7e:f9:3a:ed:f0:be:bf:5a:47:9c:89:
         f7:23:1a:7d:6d:a3:01:6f:c0:8a:16:19:a6:39:f2:77:24:f7:
         02:c7:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org