Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fAoi_N6neRUEPwi2ksl7zrgqRrI.roa
File:                     fAoi_N6neRUEPwi2ksl7zrgqRrI.roa (raw, json)
Hash identifier:          SbRPpweU2XH8+CwQ0zz1sTdnzhg+q4GAm6qmDbNX5E0=
Subject key identifier:   7C:0A:22:FC:DE:A7:79:15:04:3F:08:B6:92:C9:7B:CE:B8:2A:46:B2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0439
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fAoi_N6neRUEPwi2ksl7zrgqRrI.roa
Signing time:             Thu 08 Jun 2023 16:45:56 +0000
ROA not before:           Thu 08 Jun 2023 16:45:56 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.32.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  8 16:45:56 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7C0A22FCDEA77915043F08B692C97BCEB82A46B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:83:ce:40:2b:29:9a:eb:97:71:14:48:50:
                    2b:e1:48:6e:e8:c7:34:b0:63:19:12:65:39:4a:cb:
                    cd:f8:88:e3:0d:6e:0a:e4:72:bd:ac:d7:79:53:2f:
                    2f:05:f8:d3:9b:17:60:15:25:33:21:c3:34:8f:7e:
                    07:2d:15:7e:3e:31:f9:05:c5:9b:d3:94:8d:10:d5:
                    6b:b8:c0:2e:57:db:98:7a:3a:29:96:c8:af:27:b6:
                    9b:f1:2f:1d:4e:4e:85:47:fc:9e:f4:04:cd:35:d5:
                    82:bf:19:77:ca:ec:30:04:c0:5e:80:1a:55:d7:c6:
                    e0:38:ae:7a:4a:90:fa:82:66:1e:2c:32:af:50:96:
                    c4:b4:d1:6c:80:5c:cf:2b:48:02:94:ad:9a:b2:9a:
                    a4:01:30:fe:f5:1a:17:42:52:ea:47:ac:40:46:a0:
                    04:64:04:14:c4:77:66:e4:f2:10:79:d5:07:8c:fd:
                    10:77:f4:12:16:85:76:2e:50:7c:eb:38:42:d8:94:
                    f1:95:37:6e:bd:af:8a:e4:93:dc:73:95:35:84:5e:
                    2b:ef:28:aa:a7:40:4d:bb:cc:3f:be:4a:d2:d7:ec:
                    e8:c5:d7:89:11:18:49:ed:d5:ae:03:41:6d:d0:e3:
                    d6:ff:a7:31:49:c0:7e:10:cb:30:05:3d:25:f2:0c:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:22:FC:DE:A7:79:15:04:3F:08:B6:92:C9:7B:CE:B8:2A:46:B2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fAoi_N6neRUEPwi2ksl7zrgqRrI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:38:1e:e2:19:43:d8:16:05:71:5d:93:0f:90:f1:f3:aa:
         b7:66:66:96:73:d0:9d:5c:1e:04:99:16:b6:58:d8:75:6d:05:
         16:12:f4:9c:99:03:65:63:32:bf:51:af:05:53:e7:b3:bd:5a:
         1f:4b:e2:8a:05:6c:2e:16:d9:d1:08:c1:d7:9b:87:af:1c:9f:
         5e:79:80:7d:e2:b0:df:6a:72:78:ea:0a:86:63:2d:26:61:6e:
         c1:a2:6d:8d:df:b3:ff:6c:a8:94:a3:16:f1:a4:3d:ff:67:84:
         21:d6:e6:9e:39:57:7b:9a:c9:ef:41:6a:43:0d:93:10:0a:11:
         eb:b2:da:41:95:c2:9f:94:58:ab:d4:0f:56:64:4b:5c:08:03:
         f7:60:01:e5:5f:07:7a:c4:41:e1:0a:61:a3:7e:d2:f2:d4:0e:
         b5:d4:88:8c:b7:4a:42:88:a6:f7:28:ed:53:85:52:de:9b:f8:
         12:a8:65:1b:4f:52:50:fe:66:8a:b9:f2:13:89:86:2d:5b:c4:
         0c:88:f1:50:5d:9c:ad:ff:a7:d0:e9:6e:10:18:66:4b:2b:04:
         fc:fd:a6:20:34:7f:ce:be:49:af:89:d6:67:58:18:4b:23:8b:
         50:c4:85:03:38:5f:bd:af:f5:fe:e0:d8:3e:a2:cc:1c:33:da:
         24:e0:08:89
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDgx
NjQ1NTZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDdDMEEyMkZDREVBNzc5
MTUwNDNGMDhCNjkyQzk3QkNFQjgyQTQ2QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi4YPOQCspmuuXcRRIUCvhSG7oxzSwYxkSZTlKy834iOMNbgrk
cr2s13lTLy8F+NObF2AVJTMhwzSPfgctFX4+MfkFxZvTlI0Q1Wu4wC5X25h6OimW
yK8ntpvxLx1OToVH/J70BM011YK/GXfK7DAEwF6AGlXXxuA4rnpKkPqCZh4sMq9Q
lsS00WyAXM8rSAKUrZqymqQBMP71GhdCUupHrEBGoARkBBTEd2bk8hB51QeM/RB3
9BIWhXYuUHzrOELYlPGVN269r4rkk9xzlTWEXivvKKqnQE27zD++StLX7OjF14kR
GEnt1a4DQW3Q49b/pzFJwH4QyzAFPSXyDNxVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfAoi/N6neRUEPwi2ksl7zrgqRrIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2ZBb2lfTjZuZVJVRVB3aTJrc2w3enJncVJySS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYiAwDQYJKoZIhvcNAQELBQADggEBAAzkOB7iGUPYFgVxXZMPkPHzqrdm
ZpZz0J1cHgSZFrZY2HVtBRYS9JyZA2VjMr9RrwVT57O9Wh9L4ooFbC4W2dEIwdeb
h68cn155gH3isN9qcnjqCoZjLSZhbsGibY3fs/9sqJSjFvGkPf9nhCHW5p45V3ua
ye9BakMNkxAKEeuy2kGVwp+UWKvUD1ZkS1wIA/dgAeVfB3rEQeEKYaN+0vLUDrXU
iIy3SkKIpvco7VOFUt6b+BKoZRtPUlD+Zoq58hOJhi1bxAyI8VBdnK3/p9DpbhAY
ZksrBPz9piA0f86+Sa+J1mdYGEsji1DEhQM4X72v9f7g2D6izBwz2iTgCIk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org