Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dSC_wZPJBCPU7X6YyB-j_djhlRc.roa
File:                     dSC_wZPJBCPU7X6YyB-j_djhlRc.roa (raw, json)
Hash identifier:          vgKkhXjcCgjzP/2CN1M3h8r/l5NwZ1kvvAdLxSpmDiI=
Subject key identifier:   75:20:BF:C1:93:C9:04:23:D4:ED:7E:98:C8:1F:A3:FD:D8:E1:95:17
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       83
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dSC_wZPJBCPU7X6YyB-j_djhlRc.roa
Signing time:             Wed 29 Mar 2023 16:04:49 +0000
ROA not before:           Wed 29 Mar 2023 16:04:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:04:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7520BFC193C90423D4ED7E98C81FA3FDD8E19517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:0b:11:7f:52:b1:77:a1:b3:10:7f:fa:c4:
                    12:6d:0e:22:7b:b2:73:41:83:40:bb:d4:6e:32:ed:
                    c1:6b:a9:ba:37:80:0b:5b:9d:08:da:ce:6b:2f:87:
                    30:bd:fa:04:fe:7f:84:eb:61:5b:18:85:14:2e:5f:
                    b2:66:aa:0f:75:f4:62:d3:a5:ae:27:ba:ae:e7:f3:
                    92:41:a7:94:4f:99:5d:18:3c:24:8d:e4:cf:39:c6:
                    54:cd:7e:36:5d:4b:20:26:09:f6:1c:e6:aa:07:46:
                    06:9e:a9:01:69:95:64:ea:82:0c:0c:a6:0d:16:34:
                    bb:b2:e9:c5:16:33:0d:a7:02:54:84:d5:d4:d5:b7:
                    43:e3:3e:d5:87:f7:f4:23:fd:8b:a2:e2:ec:13:84:
                    80:67:73:d1:ac:92:89:44:2f:89:47:9d:2f:8a:67:
                    c6:65:04:33:a9:69:56:f1:34:f7:9a:6a:a0:d6:ce:
                    ef:3d:02:49:89:a1:c9:1a:63:a0:56:2e:e3:c8:12:
                    ea:30:ad:a4:9b:6e:1f:5a:e9:f2:96:88:77:9d:f7:
                    e3:65:9f:b2:67:b6:8a:83:fb:02:73:f7:04:27:6f:
                    19:5a:21:78:21:20:80:e9:9f:40:b0:8a:30:6a:9b:
                    74:70:7a:d6:a7:a6:b1:87:5c:69:e6:87:db:e2:ab:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:20:BF:C1:93:C9:04:23:D4:ED:7E:98:C8:1F:A3:FD:D8:E1:95:17
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dSC_wZPJBCPU7X6YyB-j_djhlRc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:aa:db:59:80:7e:8f:04:2a:69:99:42:c3:1e:16:b9:f7:
         d1:a5:64:c2:44:15:90:ce:f6:e8:f8:ae:04:fb:a8:fa:eb:e3:
         35:a8:4a:b6:29:aa:30:9e:a5:8a:83:a7:2b:4f:c2:1d:6d:77:
         3d:50:dc:6f:91:6b:d9:51:70:a0:6e:ca:7b:7e:f5:10:12:03:
         59:3c:d7:52:d0:52:8e:e8:d7:51:36:f3:ad:49:b5:fa:8d:15:
         ca:68:f5:77:56:13:46:4a:9c:41:b2:2f:e7:7c:8a:2e:fe:6e:
         40:5a:ce:35:7e:8c:75:30:d1:6e:70:cf:a8:bf:1d:b7:72:14:
         98:56:2f:1d:5c:49:28:29:18:5a:8f:cf:8e:e9:b4:f5:f0:a7:
         ca:39:40:e8:8a:4c:03:98:af:d1:a5:dc:06:db:97:05:fa:9e:
         ce:d2:07:15:e1:17:fc:9c:fb:af:4c:cf:89:a4:98:4c:b8:42:
         b6:6e:28:97:f3:3e:83:b6:3e:f0:eb:79:50:49:e6:f0:84:ab:
         53:eb:2a:b7:d2:dd:02:8f:b1:10:94:d4:79:62:25:e6:10:43:
         15:ff:68:1c:bf:d5:45:b7:db:02:9f:41:84:66:82:fb:5e:59:
         15:0a:79:41:d4:b0:9f:9d:88:a4:e6:4a:79:a7:2e:1e:23:ab:
         78:1b:3a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org