Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eptNF3V9HTjnh56w8hos5Q1trRU.roa
File:                     eptNF3V9HTjnh56w8hos5Q1trRU.roa (raw, json)
Hash identifier:          Ur6uYyZtCD2aHizaDeOetAAccnvmMqPOlyR9vqE5QAw=
Subject key identifier:   7A:9B:4D:17:75:7D:1D:38:E7:87:9E:B0:F2:1A:2C:E5:0D:6D:AD:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0292
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eptNF3V9HTjnh56w8hos5Q1trRU.roa
Signing time:             Tue 30 May 2023 16:36:28 +0000
ROA not before:           Tue 30 May 2023 16:36:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7A9B4D17757D1D38E7879EB0F21A2CE50D6DAD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8f:eb:d5:c8:ae:ce:10:1b:b6:7f:97:fe:29:
                    e0:cc:5d:b5:a2:ff:96:12:2d:9f:62:97:50:60:ae:
                    e1:0c:37:6d:9b:42:3c:37:70:b1:9a:e0:cb:d1:4d:
                    a5:be:7e:59:ac:d4:f9:b1:eb:9d:82:12:79:cc:57:
                    63:32:95:57:6d:6f:52:6f:1b:fd:e1:81:01:31:4b:
                    ff:5e:1e:fa:3e:19:44:25:9f:63:b5:b6:05:83:f5:
                    cf:46:0a:1c:c7:89:3d:57:38:6c:b9:f9:51:f6:a2:
                    c2:16:59:8c:f4:cf:08:c3:f1:33:d7:fa:eb:54:9e:
                    86:c8:a2:dc:43:37:4d:85:de:5c:76:4b:9a:7a:7b:
                    b3:0c:e6:ef:19:54:e6:11:62:a2:b1:0e:99:8b:6f:
                    71:e3:60:e3:4f:38:e9:9e:73:b5:aa:68:3e:56:bd:
                    21:fc:41:31:2b:63:c4:f6:fd:41:a9:95:0c:72:8d:
                    ec:28:a0:59:ca:70:88:4e:f2:e7:e3:f7:80:1d:44:
                    bf:c7:2f:7f:02:f3:b7:50:2c:c9:ba:a5:3f:54:3e:
                    97:27:77:5a:0e:c1:da:de:d9:9e:d2:7d:2f:f5:bb:
                    52:0b:c1:a4:73:d0:b3:7e:e8:3e:fa:c4:fa:9e:9e:
                    d1:3a:fa:aa:b5:a4:2b:00:49:f7:00:21:a6:b3:ae:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9B:4D:17:75:7D:1D:38:E7:87:9E:B0:F2:1A:2C:E5:0D:6D:AD:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eptNF3V9HTjnh56w8hos5Q1trRU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:ab:6a:7b:bf:16:7b:91:df:ec:d4:9d:ef:f7:07:57:a2:
         e6:a4:d9:7e:ee:b9:d4:03:76:69:9c:27:c0:d3:7b:31:b8:76:
         e1:5a:cd:8c:81:d1:24:78:f5:92:83:00:ce:d2:1d:fb:f7:2a:
         a8:54:9c:29:aa:2f:7b:e4:34:4e:03:94:46:d9:e8:a0:a5:cd:
         71:fe:a5:6b:60:c3:03:e4:63:69:41:f7:5a:09:03:ae:61:9f:
         64:55:e1:12:94:aa:ea:1c:f4:a6:4f:cc:e2:ef:7a:34:03:19:
         8f:6f:bc:58:da:99:75:b1:bb:2c:cf:0b:75:c1:1d:0f:be:2f:
         4b:86:47:2f:dc:67:16:e6:4e:0d:5d:dc:f8:c1:22:d8:7a:5a:
         cc:4f:9e:e2:a4:11:15:ec:a9:a6:eb:9d:ef:88:4d:36:e5:8b:
         c4:64:8c:59:7f:2a:03:c7:6c:a5:33:22:ca:b6:04:07:0a:8b:
         a9:7c:d3:2c:2d:80:02:25:62:7a:3d:c4:ed:03:53:64:b4:64:
         c9:6f:08:9b:b4:4e:53:7b:de:b8:26:29:ca:00:b2:bf:3b:27:
         4a:d7:40:71:83:a4:0b:68:4a:42:3f:f8:8b:0c:40:d5:ef:2a:
         81:d5:17:00:1a:4d:fa:d7:f2:4f:4d:1d:44:9c:c4:99:29:d6:
         4d:13:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org