Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jVneT8BY8d1rlijJ5mYtp74OPsc.roa
File:                     jVneT8BY8d1rlijJ5mYtp74OPsc.roa (raw, json)
Hash identifier:          H6dEyYVHcHclXc5KX+v9V+V8aUi/AKHVgZP44QaqPMw=
Subject key identifier:   8D:59:DE:4F:C0:58:F1:DD:6B:96:28:C9:E6:66:2D:A7:BE:0E:3E:C7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       91
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jVneT8BY8d1rlijJ5mYtp74OPsc.roa
Signing time:             Wed 29 Mar 2023 16:04:59 +0000
ROA not before:           Wed 29 Mar 2023 16:04:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:04:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8D59DE4FC058F1DD6B9628C9E6662DA7BE0E3EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:6f:cf:dc:29:2c:e8:25:0b:14:2c:80:f2:
                    a1:8c:28:91:fd:b8:1b:ab:01:ad:11:a3:05:10:8b:
                    88:96:be:92:dc:55:f5:75:a7:c7:76:5c:aa:84:b3:
                    52:35:92:c1:e0:f1:42:c2:ce:a6:23:79:84:21:a0:
                    e4:e1:66:17:81:fc:9c:63:81:03:b9:c7:43:d6:f2:
                    05:7d:63:c3:2e:5b:aa:d2:50:85:50:43:67:5e:0f:
                    5d:5c:cd:ae:d4:53:d9:a9:84:7b:1d:2a:02:7e:cc:
                    79:0e:65:e5:02:b1:18:2c:b9:21:fc:2d:89:da:53:
                    6c:12:90:13:92:d2:d1:a6:a4:f6:99:fb:8a:15:39:
                    4d:ce:36:de:b1:28:52:71:f4:e9:1d:5d:2c:ec:9a:
                    19:00:3e:6e:37:c3:4b:9b:cd:c8:f9:2d:60:6b:b7:
                    a8:62:f2:06:80:10:20:c4:bb:7e:e0:01:f6:d8:58:
                    b2:9d:56:60:83:b1:d3:c5:a0:e7:58:b5:83:3a:28:
                    f1:d7:b7:d3:cf:e8:26:25:c7:ae:0f:ad:34:cc:33:
                    d3:45:19:77:1b:8a:7d:cb:d0:ce:39:c1:db:65:d2:
                    09:94:bd:84:18:13:6c:37:e0:14:8a:d6:cb:55:b1:
                    2c:84:6f:2e:46:59:d8:55:69:d7:4a:70:2f:73:06:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:DE:4F:C0:58:F1:DD:6B:96:28:C9:E6:66:2D:A7:BE:0E:3E:C7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jVneT8BY8d1rlijJ5mYtp74OPsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:1b:bf:04:67:ee:47:26:fb:84:17:f6:32:e4:e3:ba:71:
         0d:b1:7d:3f:b4:7d:eb:12:53:97:fe:80:19:06:d8:ad:3a:42:
         b1:2a:83:d5:01:c4:02:5e:2d:f4:1f:ac:ac:82:5c:cf:70:ab:
         d9:f1:9a:1f:7e:f6:ea:33:2e:89:4a:15:3a:8a:a7:9b:de:d5:
         5c:ed:8e:83:c8:4c:fb:9e:15:42:4f:ba:83:7c:03:b7:8c:b0:
         92:24:d6:fc:f3:31:e1:46:25:4c:32:02:95:91:b2:5a:de:40:
         20:7e:b4:64:90:1f:85:01:57:3c:34:bd:36:1b:90:0d:3c:92:
         80:76:3f:ff:41:9a:09:d4:05:fa:4c:ae:27:8f:61:df:d8:32:
         ed:89:31:16:f3:7b:a1:8b:8c:02:58:30:7f:34:3a:cf:e6:92:
         62:00:1d:77:a2:e0:8c:4e:40:b5:c1:d9:6b:a6:24:a2:73:b6:
         70:f4:90:b6:e0:28:97:cd:30:61:d9:a4:79:b7:4e:44:29:63:
         21:7e:9a:b8:e1:5d:27:3b:ce:4e:47:2e:fb:54:ca:4d:5b:a4:
         99:8f:77:83:0c:7d:49:f9:6b:98:01:e0:12:8b:1b:f0:1a:07:
         26:66:6b:69:20:02:bc:55:bd:9d:89:27:97:ed:9c:5c:a2:fc:
         5c:ae:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org