Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ6BbOkLPzoOfbWqc2UEJbMX8jU.roa
File:                     gJ6BbOkLPzoOfbWqc2UEJbMX8jU.roa (raw, json)
Hash identifier:          T4qZHDC9IoWv6xL2jLVYKEhdM/qv2K0LAwkZqmLnkdY=
Subject key identifier:   80:9E:81:6C:E9:0B:3F:3A:0E:7D:B5:AA:73:65:04:25:B3:17:F2:35
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       4E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ6BbOkLPzoOfbWqc2UEJbMX8jU.roa
Signing time:             Mon 27 Mar 2023 16:04:25 +0000
ROA not before:           Mon 27 Mar 2023 16:04:25 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:25 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=809E816CE90B3F3A0E7DB5AA73650425B317F235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:c4:84:09:54:75:c9:10:25:69:c1:ca:75:
                    d6:d8:10:ae:71:18:33:27:fa:4f:c1:bd:51:2c:13:
                    bf:62:df:72:e7:7e:e7:c5:8c:4e:61:b9:e9:87:26:
                    9f:91:8b:45:06:75:cc:a5:1d:30:21:9b:9f:d4:0e:
                    a9:d5:06:af:a1:95:a9:f7:29:07:15:ef:9c:32:0e:
                    c2:dc:55:de:c4:b2:c6:28:46:56:17:46:7b:23:5a:
                    05:8a:26:54:79:7d:b9:a1:61:fd:06:65:a6:eb:63:
                    40:2d:49:86:10:89:47:e0:be:31:b1:b4:db:0d:19:
                    8c:81:47:ab:46:a8:23:c4:5d:fb:ec:90:d2:9b:8a:
                    5b:de:cd:93:1f:8c:83:a3:62:05:25:f1:80:41:58:
                    cf:dd:67:4d:be:db:e9:bb:0b:fd:8b:a9:04:5e:c3:
                    38:fe:5f:d5:ce:6e:5d:86:47:8b:a4:a8:aa:0a:e4:
                    ed:78:ee:24:7f:8c:fc:87:6a:8a:81:d3:ae:2e:00:
                    97:bb:90:5c:5d:27:a8:09:00:b1:a2:30:e9:ed:45:
                    a6:0a:6a:4a:aa:32:01:d7:1c:42:67:25:5c:7e:96:
                    6e:db:c8:41:bd:b3:77:5d:51:25:05:4b:f8:bd:df:
                    00:b1:c1:39:77:53:41:09:ef:67:02:43:7d:7b:df:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9E:81:6C:E9:0B:3F:3A:0E:7D:B5:AA:73:65:04:25:B3:17:F2:35
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ6BbOkLPzoOfbWqc2UEJbMX8jU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:f1:41:bb:de:ae:9f:ec:1e:af:0b:57:4d:bf:d3:ac:79:
         f8:e1:f8:11:9a:bd:5e:d8:33:e0:21:97:dd:f7:6a:d2:44:e2:
         c0:85:cb:40:b5:92:c9:51:07:60:84:94:07:f7:15:c8:a4:ad:
         90:dc:5b:d4:38:30:5d:c3:99:35:9a:86:e4:62:75:cf:d7:49:
         51:96:67:bf:ab:d9:f4:f5:eb:10:f7:c8:5f:a0:60:85:7a:66:
         38:ea:90:7d:ae:ad:4f:aa:3e:36:93:6f:dd:06:a1:e0:8f:f0:
         cb:d9:b8:d0:57:a7:ca:45:c5:f5:4c:8d:93:7e:69:2f:37:79:
         3f:94:7d:f5:6e:f0:62:9d:31:73:7a:11:ba:80:cd:1d:fc:37:
         08:bc:a1:b6:90:bb:95:59:56:81:80:ec:10:8b:66:d8:f6:20:
         ee:81:f8:73:f8:6e:68:69:cf:26:04:bc:43:5a:08:c5:25:a4:
         a0:ea:6f:59:1e:fb:33:7b:91:07:0e:cc:98:f6:33:52:ad:a1:
         f8:0c:0d:27:2d:71:5e:d6:03:0e:0b:7a:cf:3e:3f:19:60:d4:
         cd:c8:64:9f:30:6f:46:bd:57:53:6d:f1:20:df:fd:2e:25:35:
         e1:91:92:a7:d2:75:ae:b6:b5:69:0b:c9:0a:51:bf:ca:c8:cf:
         5f:5b:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org