Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cx9X_RQPMeNR-nslEBGArvHFjV0.roa
File:                     cx9X_RQPMeNR-nslEBGArvHFjV0.roa (raw, json)
Hash identifier:          9gefo0odVAoZ+IC+FtFTWyxW9oUX1/h0F/C61zzOwQ8=
Subject key identifier:   73:1F:57:FD:14:0F:31:E3:51:FA:7B:25:10:11:80:AE:F1:C5:8D:5D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02C8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cx9X_RQPMeNR-nslEBGArvHFjV0.roa
Signing time:             Tue 30 May 2023 17:17:39 +0000
ROA not before:           Tue 30 May 2023 17:17:39 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:39 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=731F57FD140F31E351FA7B25101180AEF1C58D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:9f:7d:e7:70:fe:53:dd:2a:15:6c:4f:b3:
                    ab:c5:74:08:f1:75:9a:de:ed:2e:12:fa:af:e4:45:
                    4f:60:45:47:bf:64:29:36:42:7d:42:c6:fd:0d:93:
                    a0:1e:c2:46:c8:74:0d:b4:99:1e:4f:fa:bc:34:ee:
                    aa:62:dd:c9:ca:81:ac:25:62:1a:4f:a5:37:41:20:
                    fb:af:92:31:49:7d:c8:23:c7:b4:90:e6:b0:67:78:
                    60:ae:01:4c:eb:87:bb:7b:56:59:f7:2a:28:a6:dc:
                    18:94:ae:87:ad:25:14:5f:27:1b:7d:34:09:d9:df:
                    f6:68:bb:bd:c5:5b:ca:d5:db:af:fb:90:51:dd:34:
                    d6:36:d1:42:57:b5:46:f7:75:7e:f2:db:57:2d:61:
                    e3:4b:78:f2:9d:8a:17:2f:d7:ad:9a:fc:51:33:19:
                    f1:d3:5e:ac:d8:3b:2c:5e:aa:e4:8e:65:f7:de:01:
                    3b:ea:17:85:e9:dd:ca:5f:5b:a5:5c:7d:56:4c:20:
                    68:7f:f8:e4:38:1e:35:5f:ea:e6:2d:23:b2:f3:2a:
                    de:f3:79:88:10:f7:dd:06:68:2f:fd:f9:b4:2b:24:
                    49:9e:cb:d7:bf:38:00:ba:93:db:4d:ab:6b:df:54:
                    70:2c:a7:a5:55:62:3a:03:7c:b5:3b:a4:fc:da:38:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1F:57:FD:14:0F:31:E3:51:FA:7B:25:10:11:80:AE:F1:C5:8D:5D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cx9X_RQPMeNR-nslEBGArvHFjV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:9c:95:5f:01:78:00:ad:46:4d:e0:38:c0:a0:dd:78:c6:1a:
         8b:a1:c4:1f:d5:81:38:d7:12:06:1b:63:b2:58:a5:bd:bf:1f:
         02:60:4b:fb:cb:e2:b5:a6:df:ba:aa:2c:d8:f0:ea:eb:a0:dc:
         ee:c6:fb:69:6d:00:c3:6f:1f:7b:b6:9b:8a:23:c9:46:b7:1b:
         cc:20:77:61:16:1f:ca:f2:1c:8f:f5:10:fb:7a:34:75:75:ef:
         46:80:85:a2:4c:d6:37:a0:88:cf:df:7f:9a:ed:ea:1b:bd:71:
         97:ce:87:6a:a2:51:0c:22:ee:3d:69:a9:24:e8:8b:06:df:c8:
         38:31:5b:42:59:9a:05:62:2b:c6:c6:2b:30:a6:48:51:05:18:
         84:01:78:29:c6:88:9c:84:55:eb:ee:5a:a2:5c:42:61:4c:1f:
         ea:38:6f:96:d0:05:60:5d:75:15:54:41:0a:31:4d:e5:99:37:
         6b:8c:69:ef:03:71:d2:a4:68:a1:bc:29:6c:71:a9:b1:97:de:
         e6:e4:af:eb:5e:9c:bc:5d:4c:16:12:5d:b8:fc:89:fd:d3:b0:
         b9:0f:06:9b:35:c4:26:38:ab:ae:36:11:1e:01:6a:22:5d:46:
         47:bd:94:81:d4:d6:b9:b4:c3:3f:00:ff:46:38:d2:22:fb:e3:
         84:30:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org