Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cnMuF1sjFqLhSEFezF6MRFzV5Jc.roa
File:                     cnMuF1sjFqLhSEFezF6MRFzV5Jc.roa (raw, json)
Hash identifier:          DI76dOQS2R20hTjgPgl5blS6UNgmfyr0IW1WPQ4rnos=
Subject key identifier:   72:73:2E:17:5B:23:16:A2:E1:48:41:5E:CC:5E:8C:44:5C:D5:E4:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0127
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cnMuF1sjFqLhSEFezF6MRFzV5Jc.roa
Signing time:             Wed 24 May 2023 16:30:19 +0000
ROA not before:           Wed 24 May 2023 16:30:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=72732E175B2316A2E148415ECC5E8C445CD5E497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:37:e8:76:7e:a8:ea:f5:e1:0c:e0:1d:c6:
                    2e:1c:73:32:bb:20:29:f5:16:2f:1b:65:7b:fe:61:
                    eb:22:68:76:99:de:eb:cc:1f:0b:d5:62:5f:bb:ec:
                    d8:09:68:ae:a7:79:bd:9c:b2:ee:26:5b:c0:57:f1:
                    b8:85:19:82:76:f2:67:05:1d:9e:a5:2b:e0:b1:91:
                    d5:41:cc:7c:e2:7f:6e:c8:58:9d:d5:40:c6:db:56:
                    89:76:a4:43:6b:7c:04:ff:b3:e7:51:0a:a6:35:0c:
                    ed:ea:fd:20:0f:eb:c1:ab:79:18:e1:ab:84:5d:e1:
                    02:3a:83:36:92:8c:1d:e3:f4:18:e2:c3:e1:66:45:
                    ce:f3:3e:2a:d1:55:14:03:89:ff:ca:6c:2b:1a:7f:
                    11:db:48:44:bc:4a:b3:8e:05:94:e5:39:d8:d2:cc:
                    2f:b2:f7:a7:b6:28:36:6c:53:49:e4:b6:62:68:67:
                    32:94:7a:63:56:d7:6b:d8:04:85:78:9d:85:11:10:
                    54:c0:f3:bf:a2:d9:4a:5a:e4:f0:14:18:6d:7f:b9:
                    c0:60:4c:ef:6e:80:d7:51:7a:d6:07:30:6c:5f:52:
                    17:76:ec:4d:3d:3a:d1:01:d2:fa:01:f3:f2:60:37:
                    4b:ef:e2:3b:75:e0:e2:60:75:27:f6:02:5f:17:58:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:2E:17:5B:23:16:A2:E1:48:41:5E:CC:5E:8C:44:5C:D5:E4:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cnMuF1sjFqLhSEFezF6MRFzV5Jc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:05:0b:06:8d:f9:f9:9f:6d:3d:d3:62:50:50:7d:29:fe:a8:
         54:67:c8:ba:42:b2:6a:0f:5f:da:20:8e:42:4a:02:e7:2e:f7:
         30:33:8d:d0:89:05:3e:b6:e7:bc:d2:81:8a:44:35:52:12:5d:
         cd:fd:25:1b:5f:8c:80:b7:cc:05:c0:6e:82:84:b1:d5:84:82:
         f8:1a:06:42:73:5d:60:12:e6:b5:34:2d:01:db:1d:a8:3d:b1:
         68:48:5e:ae:3c:4b:c1:dd:32:8c:0f:fd:65:e0:43:71:35:61:
         96:0c:4e:e6:20:b7:aa:30:84:fd:92:e9:63:26:c8:74:b2:70:
         13:86:bd:10:2b:fc:36:56:3b:3b:93:50:b2:8f:12:24:4f:9e:
         4d:4c:43:a8:71:8c:39:d4:cf:dc:38:61:21:f9:51:a4:73:74:
         01:28:02:30:c0:5d:20:03:26:ea:3f:4b:39:56:7d:f2:6d:f0:
         cd:c4:1e:43:69:84:e3:06:14:d6:da:39:e6:5d:1f:6f:88:8b:
         a8:2b:8a:39:a6:0c:d6:47:e6:09:ed:1e:75:0c:9d:e3:c5:54:
         af:55:2b:92:f8:07:45:5a:20:ca:51:80:34:e5:8d:5e:41:d0:
         9d:f1:f2:32:b8:c6:6a:22:65:b1:25:af:27:db:73:6d:19:e6:
         00:db:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org