Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m8NNBjLrOYJUvGepDTmH4E1q09E.roa
File:                     m8NNBjLrOYJUvGepDTmH4E1q09E.roa (raw, json)
Hash identifier:          Ezib9v8lJ9ddTrQomddwnqkIUsV9/VQlzIHG8wEb3M8=
Subject key identifier:   9B:C3:4D:06:32:EB:39:82:54:BC:67:A9:0D:39:87:E0:4D:6A:D3:D1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0301
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m8NNBjLrOYJUvGepDTmH4E1q09E.roa
Signing time:             Thu 01 Jun 2023 16:05:25 +0000
ROA not before:           Thu 01 Jun 2023 16:05:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.74.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9BC34D0632EB398254BC67A90D3987E04D6AD3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:54:2b:9c:60:69:e2:3e:fe:b6:21:bd:5c:
                    a7:44:e9:e9:ca:6a:99:52:2a:c1:0b:94:a7:03:8d:
                    3f:7b:55:38:87:4b:0b:af:f7:13:e8:f7:7a:74:c7:
                    e4:b1:a6:76:cb:07:60:ba:5a:58:34:43:56:41:70:
                    3a:43:d7:d7:69:10:26:0b:7e:78:d9:af:0c:15:d8:
                    fc:35:20:f5:79:c8:37:10:07:3e:aa:ec:b6:ff:80:
                    af:a0:33:4e:55:ce:7b:2b:15:d9:ce:89:5f:2c:ad:
                    3a:37:97:80:23:33:9c:89:30:c0:a9:59:bf:d9:00:
                    95:73:a8:fc:11:ea:f0:88:e2:16:32:d9:66:4a:28:
                    79:30:f8:cc:d7:d9:2b:e3:67:a6:b8:95:d4:c5:12:
                    56:c9:ac:50:13:cb:51:2c:cf:79:90:a4:20:9a:0a:
                    24:6c:c1:92:24:b9:b5:a4:33:3f:91:2d:ff:9d:27:
                    da:c3:e4:30:2f:21:b8:64:1b:a1:e3:d2:09:80:1a:
                    1e:63:c2:78:9d:c6:52:8f:4a:1c:0a:a7:9b:56:f8:
                    af:8d:78:44:69:a1:ba:18:d1:7c:8c:ce:ff:f0:80:
                    5f:69:4b:9f:c6:58:c8:65:c4:bb:4d:95:e4:42:7b:
                    5a:03:1a:41:36:73:04:91:68:22:c1:e9:7c:c2:30:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C3:4D:06:32:EB:39:82:54:BC:67:A9:0D:39:87:E0:4D:6A:D3:D1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m8NNBjLrOYJUvGepDTmH4E1q09E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:c8:50:04:14:90:54:50:0e:88:89:11:04:b6:ab:1b:b0:a4:
         aa:88:6a:3f:22:b0:fa:be:d4:d6:45:eb:ac:d6:98:1d:4a:c1:
         a5:2e:bd:c9:7d:09:9f:0a:b7:6c:92:aa:41:0c:f9:74:db:6f:
         62:61:c2:53:9d:16:09:fb:76:7c:e5:3e:a6:87:d4:45:06:dd:
         bf:f1:f6:9d:9c:32:8b:17:90:a9:4d:0e:4c:c1:84:6b:d9:c8:
         a1:f3:d9:f5:d1:61:fc:30:77:64:7f:e7:99:82:4b:8d:47:fd:
         1a:c4:39:03:db:77:1d:03:ad:2e:6e:d4:b4:f2:6e:e7:97:77:
         9a:38:4e:aa:66:5d:b8:63:36:21:91:28:01:1a:c3:d9:0d:2e:
         b9:45:5b:e1:aa:f1:34:5f:d0:f8:fb:8d:75:c2:40:f0:65:bb:
         18:32:91:ca:59:07:f3:de:86:39:c6:fb:a5:56:56:aa:10:05:
         04:4e:84:2f:5a:3d:5e:99:28:37:0d:75:04:21:c6:61:9a:39:
         eb:61:0f:8b:ff:7f:37:ac:8e:6f:6b:9e:ce:48:b8:12:80:53:
         8f:71:91:1b:12:b0:12:3e:ce:dd:52:d5:20:dc:2f:f9:58:bb:
         7d:fe:e5:ee:0a:21:d0:98:c4:9b:95:51:25:01:4d:50:35:ff:
         ec:c6:bc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org