Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/foqvxnboZ5jaGZyiR9RJBo-gMbQ.roa
File:                     foqvxnboZ5jaGZyiR9RJBo-gMbQ.roa (raw, json)
Hash identifier:          KdmP0HkX+mbX4ehrTKsXlbskir4bCIJat0kdK4umuEI=
Subject key identifier:   7E:8A:AF:C6:76:E8:67:98:DA:19:9C:A2:47:D4:49:06:8F:A0:31:B4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/foqvxnboZ5jaGZyiR9RJBo-gMbQ.roa
Signing time:             Wed 24 May 2023 16:03:03 +0000
ROA not before:           Wed 24 May 2023 16:03:03 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.166.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:03:03 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7E8AAFC676E86798DA199CA247D449068FA031B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:29:7c:74:e1:81:34:b5:68:88:70:91:fa:
                    96:49:22:a5:f6:d9:09:22:0b:03:90:52:ea:8a:9a:
                    d6:a8:05:f8:b7:7b:13:7c:32:50:5f:44:b8:3a:13:
                    4a:e7:2a:5c:c5:cc:1e:84:6b:5a:bb:da:6a:74:4c:
                    a6:ba:24:54:d5:6c:f4:ac:ab:c4:f6:a1:07:4d:59:
                    38:01:77:2f:79:0d:2f:98:51:14:cf:10:30:e5:62:
                    23:c7:8b:72:50:76:6f:6b:83:15:4c:a0:6c:a1:4c:
                    10:e8:f8:03:b0:a5:d3:09:d7:fd:3b:58:16:1b:10:
                    b6:3e:4f:0b:58:ec:5d:63:31:99:f2:c1:33:30:4d:
                    95:cb:ed:77:f7:fb:cc:14:0c:31:5b:ee:f9:78:5d:
                    04:e3:59:02:ad:8b:d8:b4:3d:8c:7c:c4:81:dc:7d:
                    18:3d:af:30:83:5d:30:1e:01:9f:57:e4:73:63:b7:
                    31:69:37:21:c0:ad:0f:27:ef:a8:bf:2e:70:0b:6e:
                    d6:7d:a7:20:f2:a4:45:d6:69:e6:13:17:5d:23:e9:
                    dc:e0:8e:41:c7:8c:80:0e:c7:22:0e:95:f5:34:9b:
                    c5:56:ac:df:1a:49:22:73:22:41:dd:ce:db:bf:d2:
                    de:6f:b7:cb:d3:76:e1:7c:85:74:72:a6:9f:e3:48:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8A:AF:C6:76:E8:67:98:DA:19:9C:A2:47:D4:49:06:8F:A0:31:B4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/foqvxnboZ5jaGZyiR9RJBo-gMbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:b1:11:3a:97:80:e5:e3:b1:bd:77:2f:22:58:c6:67:52:
         17:32:66:33:19:ca:f8:36:f3:2b:95:15:ec:e8:dd:3f:ef:44:
         0c:dc:64:45:74:c8:b7:46:6c:02:49:3c:61:f3:12:3e:40:f0:
         f5:c1:4f:f3:17:0f:df:2a:7b:a5:ec:62:1f:2d:b5:fa:d7:7a:
         c1:af:75:15:8f:29:08:f3:0b:57:80:b7:c9:b0:0b:0b:fa:e7:
         81:c2:99:e1:5a:fd:2e:07:97:de:75:ac:13:c7:7e:97:a0:00:
         3b:c5:7e:9e:d3:71:ad:a5:a3:82:9f:f8:ec:da:1d:51:3b:4a:
         a9:3d:4d:fd:70:88:85:ca:14:a3:9c:42:2d:30:4e:32:e1:73:
         ff:0e:2d:6f:0a:ff:d3:90:9b:d0:ee:89:9f:df:60:54:4e:4e:
         90:9d:f7:55:70:a2:7d:2a:d7:93:da:6e:7e:30:e5:75:5b:68:
         7c:76:c0:1a:3a:92:0d:92:94:e5:eb:f4:86:11:e3:74:b0:f3:
         60:82:40:38:0a:d2:64:cb:7a:af:ab:65:0a:a5:3d:42:70:0e:
         a2:0e:e7:6c:fc:6e:d1:be:99:ed:fd:93:9d:de:1d:36:73:b2:
         a8:be:72:4c:3b:76:f5:ab:06:96:e7:fc:3e:b0:cb:73:e0:6e:
         20:c2:42:d3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjAzMDNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDdFOEFBRkM2NzZFODY3
OThEQTE5OUNBMjQ3RDQ0OTA2OEZBMDMxQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Qil8dOGBNLVoiHCR+pZJIqX22QkiCwOQUuqKmtaoBfi3exN8
MlBfRLg6E0rnKlzFzB6Ea1q72mp0TKa6JFTVbPSsq8T2oQdNWTgBdy95DS+YURTP
EDDlYiPHi3JQdm9rgxVMoGyhTBDo+AOwpdMJ1/07WBYbELY+TwtY7F1jMZnywTMw
TZXL7Xf3+8wUDDFb7vl4XQTjWQKti9i0PYx8xIHcfRg9rzCDXTAeAZ9X5HNjtzFp
NyHArQ8n76i/LnALbtZ9pyDypEXWaeYTF10j6dzgjkHHjIAOxyIOlfU0m8VWrN8a
SSJzIkHdztu/0t5vt8vTduF8hXRypp/jSJzDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfoqvxnboZ5jaGZyiR9RJBo+gMbQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2ZvcXZ4bmJvWjVqYUdaeWlSOVJKQm8tZ01iUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYqYwDQYJKoZIhvcNAQELBQADggEBABHssRE6l4Dl47G9dy8iWMZnUhcy
ZjMZyvg28yuVFezo3T/vRAzcZEV0yLdGbAJJPGHzEj5A8PXBT/MXD98qe6XsYh8t
tfrXesGvdRWPKQjzC1eAt8mwCwv654HCmeFa/S4Hl951rBPHfpegADvFfp7Tca2l
o4Kf+OzaHVE7Sqk9Tf1wiIXKFKOcQi0wTjLhc/8OLW8K/9OQm9DuiZ/fYFROTpCd
91Vwon0q15Pabn4w5XVbaHx2wBo6kg2SlOXr9IYR43Sw82CCQDgK0mTLeq+rZQql
PUJwDqIO52z8btG+me39k53eHTZzsqi+ckw7dvWrBpbn/D6wy3PgbiDCQtM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org