Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mN5GMuwdYs2qHV7UPiY9toiT0rY.roa
File:                     mN5GMuwdYs2qHV7UPiY9toiT0rY.roa (raw, json)
Hash identifier:          MKGXBb4+x1SeyOg3EytwasF69+1iNmVcaBLxuIJKEIw=
Subject key identifier:   98:DE:46:32:EC:1D:62:CD:AA:1D:5E:D4:3E:26:3D:B6:88:93:D2:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0146
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mN5GMuwdYs2qHV7UPiY9toiT0rY.roa
Signing time:             Wed 24 May 2023 16:31:14 +0000
ROA not before:           Wed 24 May 2023 16:31:14 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:14 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=98DE4632EC1D62CDAA1D5ED43E263DB68893D2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:78:75:9b:07:24:ef:4a:c5:34:76:a4:6a:
                    20:b9:ed:e0:49:a1:fb:d5:f7:37:ac:51:14:b9:d6:
                    c3:b2:d1:42:af:08:f5:cd:20:e4:76:4e:85:2d:fe:
                    e7:e9:02:8c:fe:36:b8:e7:53:fa:57:55:75:d1:d7:
                    08:6b:f2:db:10:ef:dc:14:d1:80:b8:39:37:c9:3c:
                    c0:d6:4b:11:78:7c:bb:05:eb:4b:34:6f:44:89:c4:
                    c4:2b:bd:62:f3:f6:ac:73:20:cf:4c:1b:9f:18:e3:
                    76:e1:ce:a5:32:94:b5:6b:ba:f2:f4:90:d3:33:2b:
                    05:9d:47:01:6e:2c:25:3a:72:d8:89:12:67:1a:39:
                    99:ba:03:a8:b1:de:ae:ec:13:b0:0d:6c:03:af:3c:
                    d4:8f:57:fb:33:40:82:2f:34:4f:c7:53:40:04:18:
                    81:b0:62:0e:fd:e2:7e:50:fc:2a:e4:f1:f3:2e:b4:
                    c2:b1:35:ec:cf:ed:ae:9d:39:e7:b1:e0:55:f3:8b:
                    41:b4:79:e7:fb:2f:f1:33:04:41:bd:78:ba:41:c0:
                    cf:1b:7f:d6:5f:b8:8a:b2:2a:1f:c4:65:7d:2f:d8:
                    a0:89:74:3e:f1:e3:db:78:cc:54:59:4e:c7:f0:d8:
                    14:3d:4c:0e:ca:dc:52:b1:d2:9b:e0:32:61:36:e7:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DE:46:32:EC:1D:62:CD:AA:1D:5E:D4:3E:26:3D:B6:88:93:D2:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mN5GMuwdYs2qHV7UPiY9toiT0rY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:c5:29:cd:09:2c:6b:63:9c:8c:41:22:80:3c:08:a7:0f:d0:
         0f:6e:dc:37:f4:fb:b2:97:26:5c:23:e6:53:bd:96:44:49:98:
         6f:95:3a:27:71:a4:2c:7b:10:ac:88:2e:34:07:6e:c2:72:14:
         dc:68:b3:51:71:e7:95:fb:a8:81:99:6e:b9:df:3f:71:86:3a:
         4d:9a:0b:4f:4a:a4:a3:49:d1:e9:00:ec:d9:e9:62:09:90:ae:
         d9:f3:20:49:fe:13:f4:9b:17:cd:0d:fe:e8:57:09:fa:74:a7:
         92:86:1e:6f:52:ee:1f:42:c8:31:05:e8:a2:f5:85:e4:74:6b:
         10:fd:5f:68:9a:8a:a8:cd:31:e4:10:8a:81:5a:9d:9e:24:34:
         eb:45:16:9b:6c:71:6a:69:44:dc:55:b9:4c:9e:ce:e3:88:54:
         91:8f:17:f0:0a:9f:b5:39:ef:c7:81:ca:ba:c7:f0:6d:b3:b4:
         b5:28:38:0c:5f:72:e8:05:c4:fd:fc:de:58:3f:0f:8e:b3:81:
         52:3a:a8:e5:59:77:66:e3:46:c5:7c:fe:0f:ea:7f:2e:7c:cf:
         a1:97:4e:f2:a9:2c:1b:4f:7b:f6:d9:8e:b0:e8:31:45:88:81:
         df:9a:88:40:49:a5:2c:b7:5b:a6:ec:12:78:ff:1f:88:25:3a:
         28:85:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org