Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iwbyluTZfOVO1AeZ8mnMAPHgI5Y.roa
File:                     iwbyluTZfOVO1AeZ8mnMAPHgI5Y.roa (raw, json)
Hash identifier:          Gie+q3F8SY90fh74kKQY5PPa7e5BsHjkwG+/QkJkkJ4=
Subject key identifier:   8B:06:F2:96:E4:D9:7C:E5:4E:D4:07:99:F2:69:CC:00:F1:E0:23:96
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01AA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iwbyluTZfOVO1AeZ8mnMAPHgI5Y.roa
Signing time:             Wed 24 May 2023 16:35:20 +0000
ROA not before:           Wed 24 May 2023 16:35:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:35:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8B06F296E4D97CE54ED40799F269CC00F1E02396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:76:63:3e:4e:ac:c2:45:89:34:6b:f6:48:
                    0a:d4:2c:65:2a:7b:4c:69:d9:31:58:c9:fc:e9:ed:
                    17:36:95:6e:64:57:95:f4:9f:32:8e:cf:43:95:43:
                    e4:77:22:f0:c5:8f:49:b8:6b:f7:c9:76:54:93:00:
                    62:14:2b:54:82:9a:f5:47:ce:6e:7e:07:66:1c:87:
                    e7:2a:d8:0b:b7:d3:ab:59:2f:d9:b4:2c:69:8f:d1:
                    7d:77:fe:dc:92:c0:7c:b3:6e:d2:2f:57:da:f7:a0:
                    e8:58:eb:bb:05:1b:02:29:56:f9:e3:2d:39:bc:e4:
                    7e:0a:51:46:32:45:97:d7:b8:df:97:37:96:5e:0a:
                    00:0f:20:3e:64:c1:b8:57:bb:df:8e:28:26:01:2f:
                    0c:f3:56:f0:30:89:dd:9f:be:69:ba:5c:a1:10:11:
                    b6:ff:8e:45:80:de:73:cf:ae:2b:ea:2d:8e:48:bc:
                    c8:bf:10:05:1c:f2:73:4e:21:2f:1e:9c:20:84:e1:
                    42:79:3c:28:43:35:ba:86:78:d2:d5:6d:cd:7e:30:
                    6f:fc:27:2e:b0:d7:e1:fb:00:83:2c:f9:4e:d5:b8:
                    12:dc:38:23:10:9c:04:82:53:f1:16:3a:70:c4:33:
                    9d:8c:65:fa:41:8c:ba:c5:e2:ec:2c:4e:fd:e8:f0:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:F2:96:E4:D9:7C:E5:4E:D4:07:99:F2:69:CC:00:F1:E0:23:96
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iwbyluTZfOVO1AeZ8mnMAPHgI5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:7f:ca:7e:53:9e:e8:5a:c1:6d:bb:37:92:ef:b5:8a:9a:
         02:c1:8a:e1:d7:a1:ca:7b:45:f8:ba:58:34:f4:90:f5:45:ff:
         81:bc:27:4c:6b:a2:b7:49:cc:81:c0:f7:77:09:34:c1:b6:80:
         0a:d6:b5:ba:a1:9f:d8:0c:8a:9e:9e:45:78:46:f5:fc:47:53:
         f7:bd:c7:8f:11:a5:a2:50:95:13:7c:7b:d6:94:49:19:c1:9d:
         5e:71:a5:55:13:a9:20:6a:99:c7:ca:03:c6:d0:ae:fd:2f:fe:
         0d:75:7e:72:55:12:2a:07:15:39:48:25:fe:06:4f:04:6a:f6:
         79:40:f1:af:ec:5d:4d:d5:5a:e0:1f:a6:85:28:6d:15:a2:7c:
         1d:b5:71:59:6b:0e:5f:92:df:4f:32:ac:74:7d:59:c5:16:cf:
         19:cf:0e:e4:fb:a5:85:23:80:14:d6:0c:ae:63:d4:ed:2b:5b:
         26:17:aa:23:9e:1a:54:55:cd:8f:a6:45:2d:24:ce:00:c8:51:
         20:0a:26:e2:b4:e7:77:40:43:2c:f6:93:92:f3:18:03:81:84:
         5a:b2:8e:7c:2f:0e:46:1a:e8:c5:a9:c2:07:e6:b6:99:58:e3:
         47:d5:38:21:b9:a2:e7:d8:f0:11:89:c1:51:c7:db:b9:0b:b7:
         d2:f7:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org