Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/euI0Egh_cGeaVvxJSkiFuQnkTkQ.roa
File:                     euI0Egh_cGeaVvxJSkiFuQnkTkQ.roa (raw, json)
Hash identifier:          WTToPxLu0U/BNzbq94IJfkdm4LY1fZXr0s+wypXZeXU=
Subject key identifier:   7A:E2:34:12:08:7F:70:67:9A:56:FC:49:4A:48:85:B9:09:E4:4E:44
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       023A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/euI0Egh_cGeaVvxJSkiFuQnkTkQ.roa
Signing time:             Tue 30 May 2023 16:32:20 +0000
ROA not before:           Tue 30 May 2023 16:32:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7AE23412087F70679A56FC494A4885B909E44E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:7c:53:d1:1c:f0:a0:8d:50:53:9a:81:3f:
                    75:78:8f:57:60:5a:a5:1c:d4:64:e4:4b:d8:46:78:
                    b8:5b:1f:93:dc:b3:d2:94:3a:e2:3b:2b:95:5d:5c:
                    ff:a5:dd:9e:f1:8f:62:7e:e2:91:04:97:9d:26:af:
                    9a:6e:8a:bd:25:4b:7c:ec:53:9f:e0:75:aa:79:17:
                    2b:fb:1d:70:09:3d:13:e6:cb:f2:f1:61:3a:c4:50:
                    15:5c:e9:6e:45:e0:0f:5c:13:4f:59:80:42:c9:ab:
                    48:1c:39:06:30:28:df:f4:d9:70:4e:bc:c7:25:9b:
                    11:fe:d5:f5:5c:cc:01:21:22:bb:e4:73:eb:c5:41:
                    54:d5:0e:75:d2:03:c8:94:c0:b9:60:f4:0e:f1:12:
                    a1:73:39:e5:6e:dc:01:cb:d8:47:99:fa:04:f4:20:
                    6a:6c:d5:fc:f8:92:0e:b4:d5:82:97:df:82:7b:33:
                    d7:9a:29:4c:46:c8:da:5d:3e:7e:81:d5:e2:6f:17:
                    e2:a3:cb:81:40:98:a2:60:ee:60:18:63:a1:f4:87:
                    95:d2:34:10:1f:c3:20:66:b7:39:58:f2:b6:9f:dd:
                    03:58:5e:98:88:eb:cc:c3:25:99:b8:d5:c9:a2:1c:
                    eb:61:e7:82:74:91:35:55:6e:fc:39:c0:4e:be:76:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:34:12:08:7F:70:67:9A:56:FC:49:4A:48:85:B9:09:E4:4E:44
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/euI0Egh_cGeaVvxJSkiFuQnkTkQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:7d:cc:fc:5c:6b:ba:a5:84:dd:db:19:ad:bb:5c:d0:80:36:
         0d:17:9e:47:6c:95:c1:f5:23:48:14:47:6f:7e:37:a2:db:f6:
         1a:bd:3e:b2:4e:15:d6:81:84:a2:67:58:ec:2e:53:f5:cd:0c:
         e4:74:d6:99:58:1a:ef:c9:ba:d0:2a:69:a0:06:d3:37:07:d4:
         81:43:7f:a1:ee:d3:34:59:e4:a0:6d:f1:cd:ad:ae:79:d6:06:
         d1:3a:66:84:51:b0:7e:3c:63:33:13:1e:66:94:83:46:c7:b8:
         df:9f:20:53:c0:ca:0a:8f:56:f9:22:3c:a0:04:e7:0a:e3:fd:
         a5:c6:ba:94:b9:59:bd:05:60:34:88:d7:90:7e:dc:8d:94:7b:
         e4:9c:fe:87:a4:8e:59:75:d3:1f:ba:b9:91:df:a1:d4:41:e6:
         4b:2d:bf:f2:ee:25:63:5e:f5:d6:6a:da:d0:92:b5:f9:79:b2:
         db:dc:4b:d9:4c:26:3e:15:57:a1:d9:11:d2:8b:8c:41:cd:ac:
         3b:92:ba:7e:3c:53:b9:85:5b:e0:67:58:29:9e:0f:f8:df:eb:
         dd:db:79:c6:52:7c:71:3c:98:37:03:0e:9c:bf:0e:86:b3:aa:
         7a:66:77:63:aa:06:47:45:b0:a6:92:14:20:fe:c6:00:3d:38:
         0a:d5:22:ca
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjMyMjBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDdBRTIzNDEyMDg3Rjcw
Njc5QTU2RkM0OTRBNDg4NUI5MDlFNDRFNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDyXxT0RzwoI1QU5qBP3V4j1dgWqUc1GTkS9hGeLhbH5Pcs9KU
OuI7K5VdXP+l3Z7xj2J+4pEEl50mr5puir0lS3zsU5/gdap5Fyv7HXAJPRPmy/Lx
YTrEUBVc6W5F4A9cE09ZgELJq0gcOQYwKN/02XBOvMclmxH+1fVczAEhIrvkc+vF
QVTVDnXSA8iUwLlg9A7xEqFzOeVu3AHL2EeZ+gT0IGps1fz4kg601YKX34J7M9ea
KUxGyNpdPn6B1eJvF+Kjy4FAmKJg7mAYY6H0h5XSNBAfwyBmtzlY8raf3QNYXpiI
68zDJZm41cmiHOth54J0kTVVbvw5wE6+dlfzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeuI0Egh/cGeaVvxJSkiFuQnkTkQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2V1STBFZ2hfY0dlYVZ2eEpTa2lGdVFua1RrUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBT6wwDQYJKoZIhvcNAQELBQADggEBAAV9zPxca7qlhN3bGa27XNCANg0X
nkdslcH1I0gUR29+N6Lb9hq9PrJOFdaBhKJnWOwuU/XNDOR01plYGu/JutAqaaAG
0zcH1IFDf6Hu0zRZ5KBt8c2trnnWBtE6ZoRRsH48YzMTHmaUg0bHuN+fIFPAygqP
VvkiPKAE5wrj/aXGupS5Wb0FYDSI15B+3I2Ue+Sc/oekjll10x+6uZHfodRB5kst
v/LuJWNe9dZq2tCStfl5stvcS9lMJj4VV6HZEdKLjEHNrDuSun48U7mFW+BnWCme
D/jf693becZSfHE8mDcDDpy/Doazqnpmd2OqBkdFsKaSFCD+xgA9OArVIso=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org