Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lLrB3ChJq05-pIxWPpBWnVIArSU.roa
File:                     lLrB3ChJq05-pIxWPpBWnVIArSU.roa (raw, json)
Hash identifier:          a81A7lHd+bbKCpnBUEMjkKeUhLVrIXasZ+2M38d5vYI=
Subject key identifier:   94:BA:C1:DC:28:49:AB:4E:7E:A4:8C:56:3E:90:56:9D:52:00:AD:25
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03C5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lLrB3ChJq05-pIxWPpBWnVIArSU.roa
Signing time:             Tue 06 Jun 2023 16:02:58 +0000
ROA not before:           Tue 06 Jun 2023 16:02:58 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.198.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:02:58 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=94BAC1DC2849AB4E7EA48C563E90569D5200AD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:f4:07:9e:dd:72:a0:df:d7:1f:e0:02:e5:
                    3e:d8:a5:5a:fe:39:d9:d8:d5:02:aa:af:c6:84:d5:
                    21:38:38:a8:73:e4:99:3f:b9:66:f1:43:8d:11:49:
                    3e:14:03:38:5a:c4:b6:03:60:1e:0f:f6:c6:fa:c4:
                    c1:bc:8a:89:52:e1:39:dd:55:19:5e:50:49:96:fd:
                    90:31:d4:8f:60:76:35:2f:d1:99:78:cb:7c:f8:0d:
                    bc:59:d1:bf:22:fd:cd:c0:79:8d:ff:e2:4d:27:cd:
                    4c:8b:dd:62:c4:cd:28:5c:27:d8:ba:73:ac:8e:b5:
                    c4:bb:85:50:be:e2:69:d6:3d:10:bb:8b:fe:d1:bc:
                    e9:e0:fd:6e:31:05:a5:38:bc:e4:b9:25:59:5b:2d:
                    ac:31:1f:54:7d:ca:51:ad:0d:ed:9c:b7:4c:0c:f2:
                    d5:d0:db:7f:4b:e0:ac:90:6f:fc:ac:ac:05:90:d4:
                    c7:66:37:ec:ad:e5:bd:90:14:2c:3c:27:63:1f:1d:
                    e6:0c:40:5d:f0:4b:4f:17:75:ad:25:f5:b1:77:40:
                    94:3c:ff:fe:9f:75:34:00:f2:97:57:fb:c0:06:c7:
                    b9:0e:c4:68:31:8b:40:2c:e3:79:7a:34:c4:4c:67:
                    08:9e:8d:24:41:94:1b:cc:ce:1e:ff:66:df:13:50:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:C1:DC:28:49:AB:4E:7E:A4:8C:56:3E:90:56:9D:52:00:AD:25
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lLrB3ChJq05-pIxWPpBWnVIArSU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:e5:44:f8:d6:fb:57:f6:fc:6d:f0:f5:58:80:9d:b4:25:72:
         97:2d:20:b3:bc:2c:1b:a4:d3:84:07:ec:73:34:fc:c3:1d:b2:
         73:60:1a:1f:ca:e1:25:6b:26:84:e9:24:43:27:34:72:21:98:
         45:00:5b:cc:c9:59:5e:13:37:3c:7b:4c:f1:f3:66:84:d9:5e:
         a3:d5:df:20:f3:f9:51:4d:a6:3a:99:03:78:f5:67:c7:02:44:
         ee:41:48:3a:52:d5:3a:65:41:37:f5:ec:d8:81:22:e1:57:23:
         01:dc:ce:db:71:d7:49:2d:5e:be:41:cf:88:fb:cf:2a:c6:08:
         b2:6e:64:09:60:a9:5d:5b:3b:b2:5d:fb:63:32:f4:80:40:1f:
         9b:d8:d1:06:0b:cd:12:0a:86:90:fe:71:79:51:06:e9:ff:ed:
         49:32:1b:46:a3:0c:42:be:c2:58:6b:c4:28:57:45:0c:36:75:
         1f:77:e6:06:ff:91:ad:ef:67:88:d6:34:79:fd:89:b7:39:58:
         97:13:86:35:f5:f3:77:43:5a:21:01:7e:6a:98:60:c9:48:d3:
         cf:39:3e:ea:83:f3:e0:17:69:ff:c2:16:65:45:70:7c:94:1d:
         d9:8f:50:b4:68:52:83:ae:4c:d2:73:3b:6e:ea:89:d0:ad:5a:
         d5:57:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org