Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/g2DdFtCI6AQSED4fLDX6ofaUMr0.roa
File:                     g2DdFtCI6AQSED4fLDX6ofaUMr0.roa (raw, json)
Hash identifier:          roz4MekDj1Ci7Eh4O5xJP2HHuJX1tHQaf/a0Tz2uTQc=
Subject key identifier:   83:60:DD:16:D0:88:E8:04:12:10:3E:1F:2C:35:FA:A1:F6:94:32:BD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g2DdFtCI6AQSED4fLDX6ofaUMr0.roa
Signing time:             Thu 01 Jun 2023 16:04:38 +0000
ROA not before:           Thu 01 Jun 2023 16:04:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.12.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8360DD16D088E80412103E1F2C35FAA1F69432BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:b0:5a:26:52:4d:48:01:70:df:a0:e9:dd:
                    6c:74:44:42:7b:ac:be:91:d0:54:a7:91:0f:94:73:
                    ea:f6:a0:94:e0:0b:37:58:91:f6:37:3c:2f:c3:79:
                    36:e1:ce:e5:aa:ab:24:92:7f:4e:fa:fd:9c:36:39:
                    77:e0:77:ee:a7:e3:75:8e:c5:5c:bc:92:ae:3a:c6:
                    cf:d6:c6:a6:ac:26:a1:dc:d0:3c:88:2a:f7:e0:40:
                    0e:c5:dd:73:10:3b:89:4c:ea:2f:72:1b:2e:90:3e:
                    72:90:9f:a7:12:79:4c:16:1e:c4:91:07:5d:6e:6d:
                    17:33:fe:d8:81:90:12:f6:c6:ec:d6:15:9f:af:2d:
                    ef:2c:f4:3c:f1:d2:bb:7a:81:1c:88:67:fb:af:99:
                    8f:c6:1d:4d:89:71:2e:47:e0:ef:ca:d4:e6:08:25:
                    96:a0:4c:2a:59:c9:fb:0e:94:5e:a8:2d:b4:84:8a:
                    32:72:a2:61:fb:28:fc:af:60:f0:53:aa:b3:81:4a:
                    8c:65:ba:86:d1:06:27:4f:37:47:30:2d:9b:01:94:
                    1b:06:4c:71:94:9c:2d:f6:fd:3f:21:40:b9:6a:67:
                    81:1b:a3:a1:ae:53:3b:5e:7d:3c:92:09:8f:64:93:
                    e5:81:e7:8d:11:77:2b:6e:da:c7:9b:28:f0:a4:01:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:60:DD:16:D0:88:E8:04:12:10:3E:1F:2C:35:FA:A1:F6:94:32:BD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g2DdFtCI6AQSED4fLDX6ofaUMr0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:d6:98:d1:33:93:23:a8:04:e8:d3:4f:9d:9d:39:77:5a:
         6d:e9:0d:9d:91:70:17:22:39:1f:b0:40:43:0f:e6:dc:40:62:
         35:dc:c8:79:64:f4:13:ca:83:5f:13:fb:86:03:d5:b8:94:a3:
         f2:e1:67:32:66:b3:a2:f6:c4:fc:ac:47:fd:b4:3f:21:d6:0d:
         e9:fd:40:69:f4:03:5b:7f:60:42:0b:1b:c3:d2:c8:86:7c:cf:
         a0:4e:bc:46:50:95:f6:36:df:74:fb:90:83:90:0d:aa:74:db:
         cb:52:32:e9:b9:08:8a:d6:86:f2:b5:23:47:19:8d:ba:00:8d:
         23:45:8e:c9:6d:ed:4a:93:fa:7e:e0:da:95:b1:8a:9f:c8:80:
         3b:61:26:3c:fa:aa:79:c1:1b:ca:55:a0:10:56:38:86:9e:56:
         1e:54:3d:76:30:f6:94:6d:a8:3c:e6:26:cb:4a:a1:b3:00:38:
         52:70:80:74:90:00:89:7d:3a:55:e5:cd:fa:96:5b:d2:d4:59:
         8f:a0:4b:e8:f7:09:41:70:e0:b7:7f:8f:2b:a5:08:fe:dc:22:
         c8:25:62:ee:bc:7f:e0:06:b2:43:1c:8e:51:5a:1f:5d:2c:2e:
         0a:ef:b5:cb:79:91:6b:aa:86:9e:9f:5e:a3:5a:b9:67:7a:7f:
         95:e6:7c:40
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA0MzhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDgzNjBERDE2RDA4OEU4
MDQxMjEwM0UxRjJDMzVGQUExRjY5NDMyQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/sLBaJlJNSAFw36Dp3Wx0REJ7rL6R0FSnkQ+Uc+r2oJTgCzdY
kfY3PC/DeTbhzuWqqySSf076/Zw2OXfgd+6n43WOxVy8kq46xs/WxqasJqHc0DyI
KvfgQA7F3XMQO4lM6i9yGy6QPnKQn6cSeUwWHsSRB11ubRcz/tiBkBL2xuzWFZ+v
Le8s9Dzx0rt6gRyIZ/uvmY/GHU2JcS5H4O/K1OYIJZagTCpZyfsOlF6oLbSEijJy
omH7KPyvYPBTqrOBSoxluobRBidPN0cwLZsBlBsGTHGUnC32/T8hQLlqZ4Ebo6Gu
UztefTySCY9kk+WB540Rdytu2sebKPCkAU9lAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUg2DdFtCI6AQSED4fLDX6ofaUMr0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2cyRGRGdENJNkFRU0VENGZMRFg2b2ZhVU1yMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYAwwDQYJKoZIhvcNAQELBQADggEBAL0A1pjRM5MjqATo00+dnTl3Wm3p
DZ2RcBciOR+wQEMP5txAYjXcyHlk9BPKg18T+4YD1biUo/LhZzJms6L2xPysR/20
PyHWDen9QGn0A1t/YEILG8PSyIZ8z6BOvEZQlfY233T7kIOQDap028tSMum5CIrW
hvK1I0cZjboAjSNFjslt7UqT+n7g2pWxip/IgDthJjz6qnnBG8pVoBBWOIaeVh5U
PXYw9pRtqDzmJstKobMAOFJwgHSQAIl9OlXlzfqWW9LUWY+gS+j3CUFw4Ld/jyul
CP7cIsglYu68f+AGskMcjlFaH10sLgrvtct5kWuqhp6fXqNauWd6f5XmfEA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org