Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dsty7dToGHdpyMGS4bm2rCkY4rg.roa
File:                     dsty7dToGHdpyMGS4bm2rCkY4rg.roa (raw, json)
Hash identifier:          yrl4SFxjTQJdmd3MvM3tTrPVwYHWv6PYbdXOOEAL7uo=
Subject key identifier:   76:CB:72:ED:D4:E8:18:77:69:C8:C1:92:E1:B9:B6:AC:29:18:E2:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       037D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dsty7dToGHdpyMGS4bm2rCkY4rg.roa
Signing time:             Thu 01 Jun 2023 17:57:34 +0000
ROA not before:           Thu 01 Jun 2023 17:57:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=76CB72EDD4E8187769C8C192E1B9B6AC2918E2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:b1:51:9b:af:85:b6:46:4b:ec:6d:98:5b:
                    be:3b:de:1f:ea:c7:27:f4:10:a4:25:4a:2d:26:12:
                    95:6c:81:49:49:18:97:e1:09:77:21:a3:40:6c:7c:
                    2a:53:f0:b5:06:f2:49:3e:8d:68:8d:7b:92:7f:15:
                    84:6e:62:ff:3e:15:29:58:04:5a:ac:ae:3f:fc:43:
                    ce:59:10:a3:38:9b:fe:a4:14:27:6c:5d:3a:be:fb:
                    e2:37:42:dc:b8:9e:cf:32:29:cd:f3:85:e9:33:b0:
                    b2:77:85:bc:0a:d4:0a:2c:30:60:ce:c5:4d:e9:4b:
                    ac:b5:36:8d:cb:d9:c2:2f:4f:6e:83:bb:ac:df:98:
                    9e:1f:fe:67:17:a7:d7:8e:49:4e:1e:bd:75:25:a9:
                    74:5b:1b:5c:77:02:75:55:49:3b:68:18:63:e4:d4:
                    95:ea:ee:71:c1:e6:2c:d4:d2:05:b9:ed:e8:fb:0c:
                    81:1f:d6:5b:e0:4a:ae:c1:93:26:aa:9a:7f:ec:ed:
                    20:14:8e:b0:00:bd:e3:05:bc:16:89:99:c3:9d:86:
                    e6:b6:ff:09:92:34:54:04:e3:10:66:e7:4a:43:b4:
                    60:78:dc:20:f6:c0:4d:95:f7:76:00:4b:1c:bc:db:
                    43:b6:5c:51:2c:46:de:55:af:f3:16:82:b7:29:03:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CB:72:ED:D4:E8:18:77:69:C8:C1:92:E1:B9:B6:AC:29:18:E2:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dsty7dToGHdpyMGS4bm2rCkY4rg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:3f:27:78:1f:bc:f7:06:3e:f9:f6:7a:23:a1:41:3e:d3:
         e6:2b:17:14:1d:d8:b6:57:aa:16:7d:ee:08:4e:76:55:78:f8:
         f5:09:f8:84:da:33:4f:e7:8e:d0:c3:65:b4:85:3c:13:9d:fe:
         e9:9b:d6:67:49:f5:98:6d:1d:94:9d:f3:f2:40:7a:bb:ff:c7:
         ac:2b:b1:24:58:82:b5:58:e6:07:b1:8e:26:57:87:ee:73:a9:
         8b:f7:53:cc:6d:42:db:4a:18:22:50:ca:69:80:ef:6a:1a:a0:
         2d:cc:da:47:50:ab:00:22:d3:6b:11:8c:1c:39:ec:b4:40:71:
         d0:8a:6f:b8:56:0c:98:7b:5d:ef:e9:55:8a:2b:ab:7b:02:44:
         a9:f4:be:94:8b:d6:80:01:51:68:e3:7e:84:ad:e1:7c:0a:cf:
         89:3a:83:54:2c:02:3a:d7:ba:5c:ef:37:6f:49:36:48:a4:6c:
         73:8c:e1:bc:0c:ca:c1:d0:76:de:c7:cf:33:f9:62:e2:8f:09:
         d7:f8:9e:46:1f:37:9a:02:cb:8f:5c:be:6e:7d:95:ab:3e:2d:
         65:e6:ff:aa:dc:e7:6d:2d:d7:16:8d:18:c3:6e:04:46:fa:fe:
         af:2a:90:4e:1b:34:bc:92:09:7b:77:22:7d:da:83:68:d1:84:
         d1:ad:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org