Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jnMXyi2e_dQlOVdcW4Ia9V2nOCo.roa
File:                     jnMXyi2e_dQlOVdcW4Ia9V2nOCo.roa (raw, json)
Hash identifier:          BPj0YgR/1IQbV9HjNvvBre6BaWYp8cTUWyqfWZPeknk=
Subject key identifier:   8E:73:17:CA:2D:9E:FD:D4:25:39:57:5C:5B:82:1A:F5:5D:A7:38:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0371
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jnMXyi2e_dQlOVdcW4Ia9V2nOCo.roa
Signing time:             Thu 01 Jun 2023 17:57:30 +0000
ROA not before:           Thu 01 Jun 2023 17:57:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8E7317CA2D9EFDD42539575C5B821AF55DA7382A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:39:4e:0c:54:3b:9a:8e:fa:30:ec:1d:72:32:
                    69:46:4c:8f:76:4d:aa:cc:7a:0c:c4:f8:84:6a:06:
                    08:92:40:4a:75:57:a2:93:70:ab:be:75:52:c3:0e:
                    bb:de:9c:8c:c4:3d:e1:74:f4:e7:53:5e:a1:40:ba:
                    33:7c:3d:7c:46:14:ba:35:3e:51:70:43:8f:b5:ac:
                    12:c2:77:7e:55:69:31:02:6e:9b:2c:2c:6c:3e:51:
                    98:7d:a0:0f:b3:44:8e:aa:58:99:e9:af:d3:7c:33:
                    34:b6:76:8a:76:b6:75:e3:19:9a:d3:f2:8b:20:6f:
                    65:c8:78:2f:f9:73:88:ea:fe:5f:0a:ed:13:03:f3:
                    c5:92:ea:50:9d:cf:9f:f3:37:a3:10:f0:c3:8a:08:
                    21:22:78:07:49:26:ed:b4:15:28:14:eb:1d:56:ee:
                    03:67:e5:97:95:18:aa:94:2d:66:b1:61:ee:52:39:
                    65:ff:e3:10:3d:4d:a9:b8:9a:ab:b1:67:0f:7c:d7:
                    ac:cd:9b:05:f0:08:23:6c:4f:7e:aa:47:c0:ab:ff:
                    d7:fa:c8:4d:36:cc:be:71:63:d9:09:18:4d:73:f6:
                    f0:d5:be:9d:4e:4e:ca:fb:f1:ff:2d:7a:b1:3a:f7:
                    d9:0c:87:17:5e:3a:43:20:1f:cb:dd:8b:df:c9:c7:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:17:CA:2D:9E:FD:D4:25:39:57:5C:5B:82:1A:F5:5D:A7:38:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jnMXyi2e_dQlOVdcW4Ia9V2nOCo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:30:6c:a9:61:90:bd:ea:8e:0c:aa:97:35:ed:89:00:a9:22:
         37:46:98:c0:36:6a:b4:59:28:e0:85:a1:84:1e:0e:d7:4f:69:
         1a:9d:d9:f9:4c:f8:48:f6:33:5b:b3:4a:32:c0:04:2a:3e:9d:
         cb:f8:97:d5:a3:66:bb:c2:ce:c4:d5:8b:37:b2:35:ed:8d:e8:
         71:e0:ce:ff:67:9e:e9:c4:90:27:df:18:93:10:56:a8:e7:46:
         2a:69:d6:79:4b:87:44:fe:de:5f:2e:9a:38:bb:ce:77:31:46:
         42:13:5d:93:e5:bd:1a:a2:88:2b:7c:01:86:dc:a6:37:74:51:
         0c:ba:dc:b4:dc:d6:79:f0:53:81:46:ae:89:32:f4:77:09:15:
         8c:b0:d9:2f:c3:75:9f:75:ec:e8:75:66:d0:d6:3e:a1:81:c2:
         6f:e6:79:44:30:1f:83:33:40:8f:e4:84:8d:aa:65:2a:4b:be:
         b1:fc:61:9e:ac:ed:a7:81:c4:3d:fd:c4:00:2d:c8:91:ef:36:
         42:b3:79:6e:47:0b:d1:06:ed:a4:a0:be:4f:e8:f9:ce:8a:79:
         42:6e:df:d9:25:60:38:e3:41:93:73:ec:0a:74:74:54:1d:cb:
         25:d9:9c:47:23:f0:dc:45:34:04:dc:9a:70:3c:cd:60:b0:f1:
         01:ae:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org