Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dIkqfnVfDSzOtUMYL72PZSJZVqg.roa
File:                     dIkqfnVfDSzOtUMYL72PZSJZVqg.roa (raw, json)
Hash identifier:          7nGQXMFEMJYbA4LfI+qtB0ETGbU2W/KwC6Eo7hpOTmQ=
Subject key identifier:   74:89:2A:7E:75:5F:0D:2C:CE:B5:43:18:2F:BD:8F:65:22:59:56:A8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       013A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dIkqfnVfDSzOtUMYL72PZSJZVqg.roa
Signing time:             Wed 24 May 2023 16:31:10 +0000
ROA not before:           Wed 24 May 2023 16:31:10 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:10 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=74892A7E755F0D2CCEB543182FBD8F65225956A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:a2:5d:68:6c:d9:1c:ff:d9:f3:7b:a6:df:
                    f1:63:c1:8c:b1:dc:72:f6:b4:ae:cc:5a:c1:6e:52:
                    89:da:99:f6:8f:55:0d:f1:c2:87:16:69:cf:de:50:
                    c9:ed:51:9f:14:9b:64:f9:a1:ce:08:96:82:e0:ce:
                    1e:a0:a6:3b:64:af:b4:ac:13:c6:4c:f5:2f:83:fa:
                    f7:fe:31:4d:f0:4a:c3:4a:4a:f7:b7:13:67:bb:c0:
                    e2:c3:2d:70:78:5d:45:b6:c5:df:8d:0a:85:15:7b:
                    ae:ff:5b:4e:80:c5:82:12:b3:62:af:0e:b6:42:55:
                    70:9c:61:47:97:c1:fd:b8:13:ff:f2:00:6e:69:1c:
                    e6:e0:c1:85:1f:6d:14:29:c4:5f:de:2c:62:62:ce:
                    75:00:f2:90:7e:e6:82:af:9d:af:b2:b7:96:b7:73:
                    93:60:fb:27:50:a7:a3:6d:a2:72:ad:b4:00:74:ab:
                    e9:6e:31:c3:13:b7:30:21:6e:0b:dc:74:d7:7d:6d:
                    f1:44:12:ec:00:2d:44:05:a9:8b:eb:e4:5a:c1:fc:
                    5e:84:2f:1a:da:fc:31:7c:68:e8:76:e2:4a:c3:b1:
                    b3:11:08:d5:83:bb:6e:7f:23:e9:12:78:36:e3:73:
                    c0:d4:85:12:c1:f9:74:58:12:3a:09:e9:76:e8:e4:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:2A:7E:75:5F:0D:2C:CE:B5:43:18:2F:BD:8F:65:22:59:56:A8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dIkqfnVfDSzOtUMYL72PZSJZVqg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:03:43:6c:50:17:c7:a3:a4:a4:06:e5:47:a6:85:3c:68:ee:
         c8:5b:e1:2d:ad:54:fc:53:c0:aa:4e:87:4b:db:80:1b:93:a2:
         0f:26:0c:3b:b5:5d:d0:5e:1e:6a:0f:cc:5a:c1:0b:3c:90:89:
         db:aa:b4:02:ae:d9:5a:69:a3:b6:ed:ab:8e:45:df:8f:f6:ca:
         4a:08:2c:66:04:bf:e7:4e:17:ab:38:cf:6d:f4:a5:13:d4:76:
         df:57:51:3a:0e:de:48:d6:08:67:ba:52:5a:9c:29:91:09:64:
         14:e0:d6:2b:91:65:c5:8a:81:7f:9c:8e:89:34:d3:cd:8b:82:
         5a:fa:40:b8:a0:59:bf:6c:f2:f6:a8:e7:89:38:be:a0:4f:ae:
         7d:13:45:e1:57:57:2a:07:33:8a:f3:56:fb:22:aa:00:74:a2:
         41:18:95:ab:5e:90:04:cb:1d:e2:91:76:9c:3f:52:41:a7:bf:
         8f:19:e4:6d:85:50:f6:15:25:f2:18:8a:6c:37:13:13:b3:40:
         22:54:89:33:6f:80:dc:7a:04:44:b6:32:6c:e2:fa:67:b1:1b:
         dc:aa:06:36:b3:21:0b:38:2b:d3:8b:f8:2a:f1:a1:47:03:d5:
         18:b4:e2:14:54:88:9e:44:77:f1:bb:0d:98:72:8c:22:42:24:
         d3:1b:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org