Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cw1Lwhb73gqUPOWz8FfR9ZaHf70.roa
File:                     cw1Lwhb73gqUPOWz8FfR9ZaHf70.roa (raw, json)
Hash identifier:          Yo9zDJlOphQQ9Y717S7Zvjis9XwM/YGbPcysr0tIVrE=
Subject key identifier:   73:0D:4B:C2:16:FB:DE:0A:94:3C:E5:B3:F0:57:D1:F5:96:87:7F:BD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cw1Lwhb73gqUPOWz8FfR9ZaHf70.roa
Signing time:             Wed 24 May 2023 16:40:30 +0000
ROA not before:           Wed 24 May 2023 16:40:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.82.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=730D4BC216FBDE0A943CE5B3F057D1F596877FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:7f:08:05:2d:23:f0:d5:6c:47:1f:f2:8d:
                    f4:5f:76:9a:55:ab:b2:91:02:44:46:e1:87:98:6e:
                    ab:b0:76:a3:02:48:60:a5:2b:11:8b:2b:80:67:40:
                    62:1f:8a:16:95:4b:f7:0b:fc:7f:a8:bc:58:af:bf:
                    1c:e4:1d:12:51:74:cd:35:9b:3b:e7:3c:9b:09:d2:
                    3e:69:d1:fe:11:d5:34:35:1b:80:0f:3a:49:9b:83:
                    a4:09:35:6c:ce:46:04:7b:d3:3d:db:8f:cd:85:ae:
                    ca:58:84:31:37:1d:b1:84:dc:ea:18:8c:f5:78:de:
                    fe:aa:d2:93:17:7e:63:15:ca:c2:14:21:3f:54:b2:
                    f2:1b:7d:77:e0:de:06:22:54:bf:52:60:d0:a1:2d:
                    71:42:b6:36:ca:39:28:1b:99:50:95:58:7c:30:f5:
                    bd:fd:02:5c:0b:99:13:c6:b2:91:78:cd:ab:b3:ab:
                    59:9f:fc:e4:70:d5:6c:d8:9b:0b:f2:22:6c:ae:a4:
                    66:77:22:af:cc:8a:00:4b:f5:77:20:86:9a:d0:e6:
                    a0:63:43:1d:44:9d:e1:57:22:12:33:67:48:df:09:
                    12:9e:91:70:0d:20:a6:63:6d:64:8a:3a:27:b5:be:
                    93:17:49:0e:4d:3e:0b:c2:af:9c:ce:a3:38:b3:85:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0D:4B:C2:16:FB:DE:0A:94:3C:E5:B3:F0:57:D1:F5:96:87:7F:BD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cw1Lwhb73gqUPOWz8FfR9ZaHf70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:8e:9d:c6:1c:4b:6d:39:2b:b6:e1:d2:36:2d:cb:0e:8c:7b:
         e8:5d:2b:d0:1e:91:e2:e4:4a:f4:5d:9d:1c:e8:24:8b:c5:7a:
         4d:9d:6e:a2:ed:c4:b4:7c:4e:30:06:30:c9:1f:56:9f:8f:0d:
         79:7a:42:fb:83:84:c8:6a:ed:f9:ac:87:7b:49:a7:95:d9:e5:
         a1:94:92:3b:56:19:94:e5:69:4a:ac:43:1e:52:45:19:92:71:
         dd:92:84:53:94:b7:13:96:d9:62:a2:4b:c8:9d:1e:0c:ed:c0:
         2c:f6:7d:06:15:d9:84:d7:c8:c7:e2:8c:77:5b:0c:e1:ff:a2:
         4e:1d:a8:c8:2e:34:e5:a3:f3:2d:01:e8:17:1b:82:62:75:6f:
         88:46:c3:7b:f9:22:33:2c:1e:a4:ab:89:a5:0e:50:07:57:86:
         47:10:df:c4:21:19:c0:db:7f:da:59:7f:87:b6:03:2c:58:b7:
         ce:49:2b:3b:33:46:c3:80:9d:21:19:b9:60:8f:be:c8:c0:46:
         24:2c:4d:23:7f:f1:20:d3:8d:98:09:24:cc:7d:c5:0f:98:48:
         1a:dc:03:98:68:7d:ea:3e:95:38:93:82:74:ef:df:fb:a1:42:
         0f:fe:2b:8b:2a:2b:e6:95:75:73:e3:1a:92:0c:06:18:f3:5f:
         f6:1b:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org