Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kewH86kT3QIcHzS5hDDEIAi87nY.roa
File:                     kewH86kT3QIcHzS5hDDEIAi87nY.roa (raw, json)
Hash identifier:          NU2HSuCaQRAxtkbL74IXogST8BFBeXZCCd7TwX7YiIc=
Subject key identifier:   91:EC:07:F3:A9:13:DD:02:1C:1F:34:B9:84:30:C4:20:08:BC:EE:76
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       76
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kewH86kT3QIcHzS5hDDEIAi87nY.roa
Signing time:             Mon 27 Mar 2023 16:11:58 +0000
ROA not before:           Mon 27 Mar 2023 16:11:58 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.110.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:11:58 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=91EC07F3A913DD021C1F34B98430C42008BCEE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:55:8e:98:6d:0f:e6:0d:a2:19:21:22:f7:
                    0b:a7:d2:a3:8f:d1:51:e9:73:c3:5f:18:7e:76:95:
                    13:7d:39:b5:4a:7a:64:bc:b4:ac:a0:ae:f9:5d:c7:
                    fa:6d:81:81:1f:d1:a2:d6:e6:5d:ca:a2:32:4e:8a:
                    a5:e8:1c:24:e2:2c:4f:d5:b0:d4:64:41:a1:04:fe:
                    d4:e1:67:0f:03:1a:88:60:c0:97:8b:60:45:36:5a:
                    b2:64:6b:e9:3c:50:a8:1e:05:75:2a:10:03:92:1b:
                    50:f0:ef:d5:b5:ad:ee:99:04:c0:7c:6d:4b:e8:4a:
                    3e:eb:af:0a:cc:76:d5:9e:3f:09:a0:9f:ee:14:99:
                    67:e8:a2:c2:97:71:3c:08:41:68:8c:0b:2f:0f:93:
                    e2:99:74:bf:fb:eb:86:10:43:97:ca:1e:e1:a5:6b:
                    64:d4:ef:e7:aa:5d:8c:4d:e5:b9:45:62:15:f1:b2:
                    2b:55:5b:79:e0:3b:28:ff:59:67:41:1c:e8:45:24:
                    e7:34:fb:fd:aa:d9:57:e1:5d:67:c9:3a:27:a5:d9:
                    69:c7:55:93:04:6b:08:db:c0:35:f1:50:d2:4a:41:
                    53:ea:d7:73:1c:d2:74:0f:13:3f:c1:ca:06:96:8c:
                    94:8d:64:b2:db:f2:8a:6f:ff:22:ef:7e:2f:80:c1:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EC:07:F3:A9:13:DD:02:1C:1F:34:B9:84:30:C4:20:08:BC:EE:76
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kewH86kT3QIcHzS5hDDEIAi87nY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:7c:7c:91:14:8d:70:8a:ec:23:96:28:81:52:ac:80:62:8d:
         ee:e6:e1:d6:e0:a6:0e:f6:32:54:c5:77:b4:2d:ae:e1:e0:da:
         1f:99:65:9c:ad:2d:0a:72:79:01:56:68:30:a8:3c:c5:f3:cc:
         06:06:af:ac:21:d5:6f:2d:0c:e0:85:a1:53:c8:3b:80:25:b9:
         30:9f:43:51:05:9f:09:79:12:69:79:34:1c:51:07:4f:74:38:
         e5:24:fc:f8:40:a7:da:a9:a8:ae:a1:e0:d6:f9:46:33:bd:0d:
         38:8e:f7:cc:5c:60:51:9b:ba:91:9f:a4:80:e3:3c:77:14:4d:
         a4:a9:e7:35:b4:aa:4c:0f:fc:37:4e:2d:49:09:58:ec:5c:c4:
         28:10:a2:7e:49:47:a7:ec:70:2e:e1:e2:78:a0:cf:8a:49:c3:
         17:cd:d3:7c:46:b3:f5:02:5c:c1:0b:d5:ef:8c:3b:11:10:0e:
         90:9c:48:67:19:3e:59:e7:1e:00:e7:87:55:05:9a:be:75:29:
         54:bb:a1:35:5f:e8:8c:83:21:0b:a2:53:ae:c8:b7:74:84:ff:
         64:4a:99:73:fc:7c:76:07:55:fb:66:7b:48:84:09:67:d8:4e:
         46:4c:30:96:c4:97:4f:de:c0:89:70:59:29:d1:1e:50:9c:15:
         98:a3:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org