Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gYh4Ax4EQJgpkpaVEO0BjVfiiz8.roa
File:                     gYh4Ax4EQJgpkpaVEO0BjVfiiz8.roa (raw, json)
Hash identifier:          YbkHtMNHulfrosNKSz04LxbYd8aBOP1l7syHJ6LLKRQ=
Subject key identifier:   81:88:78:03:1E:04:40:98:29:92:96:95:10:ED:01:8D:57:E2:8B:3F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       012D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gYh4Ax4EQJgpkpaVEO0BjVfiiz8.roa
Signing time:             Wed 24 May 2023 16:30:21 +0000
ROA not before:           Wed 24 May 2023 16:30:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=818878031E0440982992969510ED018D57E28B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:81:0a:ea:f5:99:81:d5:a9:42:f9:08:30:
                    ff:65:f8:77:54:64:fe:ab:7c:bd:5f:f9:b5:e0:8c:
                    de:c7:e4:fa:b6:83:b8:cb:6e:52:74:da:fb:87:fe:
                    0e:73:d0:6a:08:d6:31:cd:3d:61:51:ec:95:ae:3e:
                    ab:91:10:b9:41:8d:35:d4:ef:90:91:9f:59:3b:31:
                    40:94:51:2c:4b:31:a0:34:da:21:bc:62:9f:11:7d:
                    f1:72:f0:08:d2:5f:f8:7c:39:ce:e5:58:4e:49:91:
                    9e:aa:5c:55:23:ce:f1:3a:2e:f0:a6:eb:73:91:e9:
                    97:5c:f7:a2:34:8d:1f:31:f5:53:7b:de:f2:8c:e0:
                    86:23:8b:db:36:61:00:d1:93:a5:5f:66:c1:7b:be:
                    bb:f6:7f:3f:53:f1:7a:0a:c7:f8:fc:9f:35:30:37:
                    2b:87:bc:aa:e0:9a:7a:e1:29:14:86:f9:ae:8c:38:
                    73:07:e2:b5:93:76:1d:32:44:9d:e5:0f:d2:d2:7b:
                    82:6b:c9:ba:81:c4:a1:7f:6a:ba:3b:5b:e9:d1:18:
                    ac:ea:6d:02:61:8a:8e:1e:2c:25:d3:9e:2f:c2:51:
                    1b:90:44:b9:4b:19:aa:bf:35:ab:e1:62:b5:99:49:
                    99:96:e0:05:df:d4:3c:c4:af:8e:fe:2f:69:21:4f:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:78:03:1E:04:40:98:29:92:96:95:10:ED:01:8D:57:E2:8B:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gYh4Ax4EQJgpkpaVEO0BjVfiiz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:ea:6c:2d:69:6f:bf:12:a2:01:15:f5:9a:36:9a:6f:3c:
         40:fc:10:fe:c3:c4:35:6d:86:59:ca:ae:ec:e3:be:4a:63:fe:
         87:bb:b3:86:6c:b9:23:52:2c:48:af:96:49:b3:76:78:3c:8b:
         28:7a:02:ef:8c:06:33:70:92:0a:b9:d6:6b:0f:dc:9e:a5:5a:
         58:62:66:a5:83:6c:c8:ff:ed:6f:a4:aa:c5:42:a5:38:8c:df:
         9c:2a:08:b6:9b:70:51:1e:92:0c:fa:de:19:36:cd:10:3c:39:
         83:2b:be:46:21:16:40:5b:ad:8b:1d:0f:3b:f0:5c:4a:aa:1d:
         72:93:51:65:31:7f:92:4d:eb:c7:af:4c:0f:ca:89:9b:a7:1a:
         3c:b6:37:94:31:cf:57:63:49:ee:55:ed:8a:12:95:6a:fa:99:
         cb:73:ca:b6:60:1c:bc:a3:5d:6a:a7:8c:11:1c:4f:31:59:d6:
         a9:32:0a:4c:49:08:a9:d0:b3:22:cb:75:0b:4e:e2:e7:d6:23:
         6b:58:fb:0d:e0:94:0c:9a:0e:8c:59:61:26:6e:7e:19:30:3a:
         0e:21:d2:2d:26:3d:5f:83:d1:2c:28:51:ff:ef:e2:1b:c8:59:
         a0:44:14:37:10:58:42:55:4b:31:13:6c:0a:f8:1b:2d:1e:3a:
         3e:05:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org