Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/giMU2Kqu8LnvYbvucc8QWeTWcHw.roa
File:                     giMU2Kqu8LnvYbvucc8QWeTWcHw.roa (raw, json)
Hash identifier:          H57X6/Lo7bQZ5dbw0eGHndpFLQsvzOwe3r6S3Rmak9U=
Subject key identifier:   82:23:14:D8:AA:AE:F0:B9:EF:61:BB:EE:71:CF:10:59:E4:D6:70:7C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       024C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/giMU2Kqu8LnvYbvucc8QWeTWcHw.roa
Signing time:             Tue 30 May 2023 16:32:28 +0000
ROA not before:           Tue 30 May 2023 16:32:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=822314D8AAAEF0B9EF61BBEE71CF1059E4D6707C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:68:9f:08:d1:3c:93:4a:bc:0c:31:0c:b9:
                    fd:86:d6:42:e5:db:e2:15:f4:45:89:fb:a5:e9:05:
                    de:2f:7e:23:35:9c:d3:ad:63:a3:40:7d:2a:08:06:
                    0a:73:29:2c:ab:6d:cd:4e:64:c8:ef:4d:f2:98:e2:
                    49:01:12:db:58:63:f0:9c:14:52:83:ea:21:63:6c:
                    3d:7a:c4:b8:19:a6:a5:02:42:68:47:c4:2d:67:4c:
                    08:d4:9b:35:55:c6:53:7f:ab:2a:50:de:da:15:91:
                    a6:6e:05:f1:15:a2:92:8e:fd:29:88:9a:29:ec:c1:
                    bb:8c:65:f2:0f:eb:fe:1b:2e:9a:74:e1:87:02:98:
                    65:6e:3b:50:ee:88:b4:bf:5d:34:5e:cc:45:25:a1:
                    c9:a3:92:8f:92:2e:3d:92:44:3b:f1:fd:e3:ca:8a:
                    df:f5:95:b7:fd:c4:7f:f1:9a:0b:80:09:6f:99:94:
                    eb:16:66:b8:6a:a1:b6:96:25:82:c2:64:36:d4:ea:
                    46:92:c4:f5:9b:65:90:51:a1:47:d6:15:f2:72:2c:
                    86:5b:f0:af:4e:8b:60:a5:bc:f9:aa:e4:98:cb:3c:
                    de:36:fe:de:c0:17:68:65:7e:13:4d:36:9e:7b:6b:
                    a7:03:d1:ab:ce:77:8a:19:a3:db:8b:c3:63:f4:60:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:14:D8:AA:AE:F0:B9:EF:61:BB:EE:71:CF:10:59:E4:D6:70:7C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/giMU2Kqu8LnvYbvucc8QWeTWcHw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:dd:2d:17:cc:f4:40:09:64:e3:9a:29:bc:8c:b3:fb:ac:
         c7:b9:76:be:8b:76:df:63:e1:0b:2f:e2:45:ef:ce:d5:ac:d6:
         1d:ab:c2:0e:9c:e2:51:28:91:ce:07:71:31:14:02:6c:44:f5:
         23:b4:fa:47:69:87:58:a5:31:af:d7:eb:b0:65:41:43:12:f3:
         e6:22:a4:48:61:4c:7d:e9:9f:e9:b3:3c:4e:d8:7b:1b:c6:66:
         54:f9:7a:6f:4f:cd:2a:e0:6a:6e:ec:40:a9:41:99:0d:92:b3:
         50:dc:a2:bd:ef:14:36:70:a9:1b:2e:a6:1a:dc:bd:8a:26:47:
         89:54:42:00:1c:f6:bf:5b:51:4a:f9:2e:e3:e5:59:83:3f:51:
         5c:71:b3:f6:c8:ab:6a:a9:bd:dd:f0:eb:9e:8b:ef:47:49:d9:
         d9:e0:86:af:12:a7:41:c7:c5:29:2a:36:9f:b7:62:71:db:5f:
         08:35:0b:4b:5b:ac:64:a9:9f:8c:17:6d:46:3b:22:d4:2e:f6:
         ab:58:e0:c1:17:26:b0:46:b7:65:a6:c3:e7:60:35:13:98:95:
         99:08:7d:47:99:7a:9e:7a:92:e6:54:53:2e:69:6b:5b:81:55:
         6d:3f:84:e4:a4:9d:17:2f:68:94:73:ca:6e:11:00:c2:7f:1a:
         f0:0c:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org