Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jC4xAODvLk8Tmnm-CdZX0pvBCTA.roa
File:                     jC4xAODvLk8Tmnm-CdZX0pvBCTA.roa (raw, json)
Hash identifier:          DKf76EqGrab+U79DDaaakwBKDRBizi95vMsYnjLaAeY=
Subject key identifier:   8C:2E:31:00:E0:EF:2E:4F:13:9A:79:BE:09:D6:57:D2:9B:C1:09:30
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0180
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jC4xAODvLk8Tmnm-CdZX0pvBCTA.roa
Signing time:             Wed 24 May 2023 16:33:24 +0000
ROA not before:           Wed 24 May 2023 16:33:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8C2E3100E0EF2E4F139A79BE09D657D29BC10930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:20:da:e3:73:2b:0b:a0:2d:7d:ec:24:4b:
                    ed:28:99:29:67:b0:55:80:cd:7b:84:a6:0a:cd:9b:
                    5b:59:07:db:46:b3:f9:82:1b:cf:d0:7e:bf:49:01:
                    49:c9:2b:c6:c6:0f:72:9a:ef:0c:22:56:19:12:89:
                    ec:5f:b5:2e:a7:53:74:c5:8f:7c:dc:03:09:e4:9f:
                    04:5b:01:9d:89:7a:d2:9f:82:01:f5:34:2a:47:41:
                    2a:0b:7d:0b:26:18:5c:39:86:73:73:8b:12:14:9b:
                    82:f8:91:95:bb:1b:f8:45:bc:fb:56:23:5f:f8:a7:
                    c1:53:5b:99:be:54:a5:27:ad:d5:ad:1a:d4:93:85:
                    80:21:a8:29:09:b3:1c:0c:16:0c:06:41:d4:0e:54:
                    75:4b:20:ac:88:e2:08:7b:d9:92:2c:9b:10:b1:b4:
                    77:16:72:ec:d6:9b:64:c7:b6:de:8f:9a:a0:f3:0a:
                    5f:f2:97:5b:57:ad:91:c8:88:38:1c:4e:24:70:54:
                    aa:e3:0d:e5:e3:ea:2c:65:13:28:82:fe:4d:97:b4:
                    c5:39:16:13:3e:fb:35:fc:08:33:ed:85:b4:83:c9:
                    67:af:79:af:e4:d9:f2:ce:ce:3a:7e:6d:22:d2:f7:
                    60:fa:14:25:f5:96:c1:11:8b:e8:51:35:10:c3:9d:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:31:00:E0:EF:2E:4F:13:9A:79:BE:09:D6:57:D2:9B:C1:09:30
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jC4xAODvLk8Tmnm-CdZX0pvBCTA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:9b:33:9d:1c:ae:a2:c8:bd:41:db:20:df:2b:67:a8:75:
         41:aa:11:4b:c7:b3:23:99:46:1e:12:23:01:dc:6b:61:43:aa:
         79:b7:98:70:7b:99:2d:ce:72:75:57:ad:d7:41:2a:e1:a4:fe:
         a9:cb:5d:5d:bc:e3:e1:c1:a5:82:1d:b4:1a:16:d2:2a:02:95:
         c0:c9:ba:3d:05:b7:f3:22:c3:61:eb:ff:91:72:23:de:a6:f5:
         09:12:65:db:ab:e4:bc:df:52:97:ae:20:02:17:89:42:89:e5:
         1f:44:99:db:ac:7b:cd:94:2e:e2:2a:71:d3:c9:09:04:09:3c:
         75:1d:3b:c0:03:9c:7f:cb:21:6e:f1:a1:ed:3c:e5:7d:4b:ab:
         8e:e0:6b:68:06:73:d3:6f:1f:66:e9:8a:35:f9:7c:e9:35:2c:
         3f:a4:e2:b6:cb:cd:a6:d6:34:66:3d:ee:6d:eb:20:a4:85:67:
         2f:1d:da:54:53:13:0e:18:85:df:cc:4e:90:1b:a9:d0:f9:d1:
         0d:f6:1b:63:31:e8:9c:15:a4:23:76:70:1f:48:39:00:f0:1a:
         d5:84:bd:9c:01:76:86:b8:6c:31:04:7c:79:b1:d6:60:c6:c7:
         41:cc:2b:39:f1:bb:57:a0:4e:85:b1:80:dd:cb:26:7d:ba:a9:
         24:c1:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org