Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dWIR9tMAATQoDt7Y4VP7lq79Ols.roa
File:                     dWIR9tMAATQoDt7Y4VP7lq79Ols.roa (raw, json)
Hash identifier:          M0aBIuEDXzYvHg/HHtz6SGyU3Ir4EBAHy5I29edihEM=
Subject key identifier:   75:62:11:F6:D3:00:01:34:28:0E:DE:D8:E1:53:FB:96:AE:FD:3A:5B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02FD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dWIR9tMAATQoDt7Y4VP7lq79Ols.roa
Signing time:             Thu 01 Jun 2023 16:05:23 +0000
ROA not before:           Thu 01 Jun 2023 16:05:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.122.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=756211F6D3000134280EDED8E153FB96AEFD3A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:17:78:0e:fc:79:52:a8:cf:ba:43:38:87:
                    92:57:21:f8:2c:fb:52:a8:0f:01:73:06:94:c4:39:
                    b9:84:31:69:71:bb:cf:0b:a0:37:1a:c6:f8:05:05:
                    58:03:36:d5:20:e6:09:54:77:39:47:9b:2a:77:db:
                    e3:96:07:bd:93:49:2b:c7:5f:f8:3b:51:e8:69:18:
                    bc:7f:1c:3d:38:9e:f9:14:34:a3:68:e9:b1:5f:ba:
                    87:32:d1:21:da:14:a3:38:cf:03:88:8c:47:2c:4f:
                    91:84:4b:55:37:54:ad:08:10:e0:e4:44:46:48:c1:
                    b6:53:8a:21:55:9e:fd:cc:3b:29:d5:7d:7a:8e:b2:
                    bc:82:e6:49:bd:b7:f3:29:06:42:b4:ef:af:f2:32:
                    ba:c5:b0:6e:e8:0e:52:59:9c:d0:c6:36:99:92:23:
                    3e:12:b3:17:fc:19:8a:ff:f5:95:dd:72:78:a8:2d:
                    fe:d5:e7:42:e0:a8:cc:b0:28:9b:a1:46:0c:fb:2d:
                    af:34:e5:ec:de:fe:42:06:1c:57:45:b1:65:98:39:
                    21:be:db:a2:04:6d:35:f7:bd:de:86:fc:d5:6e:b7:
                    59:6d:16:55:cd:f1:9c:05:20:69:6f:c3:30:91:c9:
                    c2:f5:33:57:9c:a1:49:22:83:3a:af:2c:a2:44:7c:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:62:11:F6:D3:00:01:34:28:0E:DE:D8:E1:53:FB:96:AE:FD:3A:5B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dWIR9tMAATQoDt7Y4VP7lq79Ols.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c6:c9:34:f4:1a:4a:6e:f8:22:f7:89:25:92:14:3b:37:66:
         79:4c:d0:58:8f:d9:39:e9:d3:eb:72:4f:8b:63:09:f9:83:a8:
         4e:6f:5b:32:fc:df:8a:ed:b5:fd:54:c6:1a:35:9d:c3:23:37:
         95:ce:e4:9b:79:ef:2f:3d:2c:84:ae:1c:74:aa:98:22:22:13:
         77:99:14:35:49:98:90:29:3c:50:d5:ad:32:c1:7a:ca:52:28:
         79:8a:9a:4c:77:1a:59:a0:15:ca:3f:9c:4a:ab:5b:e3:aa:17:
         a6:8b:41:4b:22:b4:72:0b:02:ff:1a:3e:96:d7:1d:d3:cc:9b:
         ac:ed:3a:5a:08:0d:00:0e:66:20:db:47:40:a8:2b:27:8b:58:
         c7:09:4b:8b:9b:27:1b:a0:75:89:eb:f9:c2:e8:81:50:fd:19:
         b0:1c:3c:72:2e:ef:de:ed:2d:2e:28:b7:4f:95:e8:e0:e1:51:
         0c:a6:fb:30:b5:41:20:85:ca:70:12:b6:44:23:94:a5:31:3c:
         70:73:98:53:45:fb:a7:f8:3a:95:26:5c:31:d2:27:18:14:83:
         98:e1:eb:ab:84:ab:59:9a:fe:c9:52:da:3d:8a:98:1a:ad:4b:
         2d:39:6a:f1:96:ba:5d:4c:93:7a:03:10:7f:5c:4a:fd:e2:eb:
         9f:3a:50:2f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc1NjIxMUY2RDMwMDAx
MzQyODBFREVEOEUxNTNGQjk2QUVGRDNBNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCexRd4Dvx5UqjPukM4h5JXIfgs+1KoDwFzBpTEObmEMWlxu88L
oDcaxvgFBVgDNtUg5glUdzlHmyp32+OWB72TSSvHX/g7UehpGLx/HD04nvkUNKNo
6bFfuocy0SHaFKM4zwOIjEcsT5GES1U3VK0IEODkREZIwbZTiiFVnv3MOynVfXqO
sryC5km9t/MpBkK076/yMrrFsG7oDlJZnNDGNpmSIz4Ssxf8GYr/9ZXdcnioLf7V
50LgqMywKJuhRgz7La805eze/kIGHFdFsWWYOSG+26IEbTX3vd6G/NVut1ltFlXN
8ZwFIGlvwzCRycL1M1ecoUkigzqvLKJEfC0VAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdWIR9tMAATQoDt7Y4VP7lq79OlswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2RXSVI5dE1BQVRRb0R0N1k0VlA3bHE3OU9scy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYnowDQYJKoZIhvcNAQELBQADggEBABzGyTT0Gkpu+CL3iSWSFDs3ZnlM
0FiP2Tnp0+tyT4tjCfmDqE5vWzL834rttf1Uxho1ncMjN5XO5Jt57y89LISuHHSq
mCIiE3eZFDVJmJApPFDVrTLBespSKHmKmkx3GlmgFco/nEqrW+OqF6aLQUsitHIL
Av8aPpbXHdPMm6ztOloIDQAOZiDbR0CoKyeLWMcJS4ubJxugdYnr+cLogVD9GbAc
PHIu797tLS4ot0+V6ODhUQym+zC1QSCFynAStkQjlKUxPHBzmFNF+6f4OpUmXDHS
JxgUg5jh66uEq1ma/slS2j2KmBqtSy05avGWul1Mk3oDEH9cSv3i6586UC8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org