Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/erdjOSWEGylLKn-nsz6RkFPFr9U.roa
File:                     erdjOSWEGylLKn-nsz6RkFPFr9U.roa (raw, json)
Hash identifier:          2bJ+dYV1xL8cVtrpItA7m+pG/F3sNh8171ul84D24Os=
Subject key identifier:   7A:B7:63:39:25:84:1B:29:4B:2A:7F:A7:B3:3E:91:90:53:C5:AF:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01E4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/erdjOSWEGylLKn-nsz6RkFPFr9U.roa
Signing time:             Wed 24 May 2023 16:40:40 +0000
ROA not before:           Wed 24 May 2023 16:40:40 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:40 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7AB7633925841B294B2A7FA7B33E919053C5AFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:e5:03:3c:79:ac:e6:3a:5e:6c:88:d0:3c:
                    37:37:64:cc:8a:78:be:79:f8:81:0c:0b:a5:ea:90:
                    27:53:c6:6d:63:62:aa:0c:e9:63:c7:be:ea:02:35:
                    35:d0:ae:cb:d6:15:67:a1:96:f5:91:fa:c8:74:65:
                    3b:21:4a:50:76:15:de:e7:2e:82:69:57:fb:6d:38:
                    f6:fc:47:e5:fc:90:83:3a:44:39:dc:fa:f8:df:0b:
                    a8:bb:03:fc:b1:46:75:e4:b3:a4:54:d4:d0:29:ec:
                    95:2d:61:3c:43:8a:b7:df:90:34:fe:e6:13:a3:2b:
                    85:70:8b:02:d0:86:4d:37:fd:a6:dd:16:8e:c5:38:
                    35:d6:b6:67:c5:66:60:32:84:3d:76:ad:11:d9:65:
                    19:1a:f4:06:b6:ad:95:ab:8c:86:c8:03:8d:84:85:
                    26:b3:ab:17:c9:02:22:02:74:f6:c5:34:a4:28:fe:
                    d4:9b:cd:39:8d:bd:e5:c9:5f:4d:24:f0:7d:9b:cf:
                    92:8d:f8:0a:73:36:fa:ec:69:a8:75:f4:27:87:19:
                    f1:4d:9a:3c:57:61:86:29:8b:aa:92:ae:bb:5a:fa:
                    e7:58:5a:22:9e:8f:dc:c9:5f:69:8b:4d:23:2f:b9:
                    b4:fa:a0:f4:6e:97:9a:da:d6:60:36:6a:2c:50:20:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:63:39:25:84:1B:29:4B:2A:7F:A7:B3:3E:91:90:53:C5:AF:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/erdjOSWEGylLKn-nsz6RkFPFr9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:f1:b5:53:97:10:ec:3f:0b:b6:05:11:2d:1f:ff:d6:28:
         cd:49:72:57:15:f4:83:58:0f:3a:1a:5e:f6:2f:39:83:c4:2d:
         03:9f:69:fa:2a:cc:32:ea:27:76:29:44:77:23:e5:5e:bc:70:
         2c:c4:46:1f:e1:c8:19:b3:2b:83:46:da:cd:ff:f8:6f:47:e4:
         60:b5:65:fe:f2:66:02:3d:9d:e7:3a:e7:48:51:b5:4b:74:1f:
         91:35:5d:23:39:49:0e:d6:0f:41:1d:c3:80:cc:52:3d:cb:45:
         20:46:ac:3e:f0:3e:d3:70:3e:a0:bd:c5:f6:3c:e5:99:8e:83:
         88:5c:c8:33:1f:ae:4a:f6:98:97:1f:11:33:80:a2:eb:68:a2:
         ed:04:d9:50:a9:43:ba:e9:38:58:24:28:fe:5b:29:b1:2c:b8:
         0c:c2:e5:1a:8b:1f:79:ca:5c:da:94:35:2d:cf:13:63:fa:55:
         df:c0:80:7f:8f:16:21:f1:3c:e1:d4:dc:1e:81:62:6b:61:d6:
         0f:de:a3:c3:c4:85:19:17:30:22:60:a1:c4:eb:02:e0:8d:d0:
         a4:36:92:6d:12:06:38:b9:d4:48:5c:17:ea:58:42:27:0f:57:
         75:e7:14:40:8b:f3:3a:1c:4c:47:16:ee:9a:05:19:b8:12:40:
         86:26:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org