Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/msPUACu_JC09Z4Ih_dSU6Av-D18.roa
File:                     msPUACu_JC09Z4Ih_dSU6Av-D18.roa (raw, json)
Hash identifier:          /FzxDC6jWVkIg90NvYZgXX0M8jwwEXiShZJsw3o0a1Q=
Subject key identifier:   9A:C3:D4:00:2B:BF:24:2D:3D:67:82:21:FD:D4:94:E8:0B:FE:0F:5F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       011F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msPUACu_JC09Z4Ih_dSU6Av-D18.roa
Signing time:             Wed 24 May 2023 16:30:16 +0000
ROA not before:           Wed 24 May 2023 16:30:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.196.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9AC3D4002BBF242D3D678221FDD494E80BFE0F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:3f:f2:86:19:ff:b1:4d:47:bc:d5:61:83:
                    f7:56:90:3a:82:ea:bb:90:84:c2:d3:68:e5:f8:b6:
                    0a:97:ec:99:1c:8f:ba:e7:c6:c8:44:27:f6:b0:38:
                    fc:04:53:9a:2e:f9:47:c4:a4:3f:9b:24:cd:04:4c:
                    0a:84:97:fb:b8:fe:af:9a:5e:8a:94:d8:24:03:0d:
                    6e:f3:1e:84:10:fc:ba:8e:ca:08:c4:a5:f3:d6:a1:
                    38:04:18:2c:95:ba:2d:7a:a0:55:32:99:3d:da:2c:
                    8e:c8:60:c1:55:10:4b:cc:f6:6f:70:f4:28:19:1d:
                    ad:1a:2f:73:19:7d:37:2e:70:42:fb:ef:19:d3:45:
                    78:fd:6a:75:10:3d:2a:31:2e:e4:8d:95:d8:c3:c9:
                    a4:ff:28:52:52:87:1f:d3:3f:58:bc:c6:68:64:07:
                    ae:50:99:5e:24:b8:b0:62:c5:24:1f:61:ff:50:79:
                    f5:21:13:03:36:fb:07:e5:32:b8:67:1d:94:4b:29:
                    68:31:c6:4c:cc:3b:12:5b:4a:3b:54:d8:b2:3e:a6:
                    8a:68:f5:76:38:8f:52:0c:e8:f0:01:fd:2a:75:e9:
                    4f:5c:28:9b:fe:81:48:8b:23:23:25:2d:e2:bb:e6:
                    cd:05:ce:37:97:9f:34:65:62:fe:40:c0:d4:27:74:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:D4:00:2B:BF:24:2D:3D:67:82:21:FD:D4:94:E8:0B:FE:0F:5F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msPUACu_JC09Z4Ih_dSU6Av-D18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:67:85:0b:9f:92:26:e6:e7:81:5a:0f:12:cf:01:9c:b8:19:
         4b:db:f5:06:5e:e0:81:21:5f:f1:9c:ad:b9:e2:1b:6e:fd:3c:
         e5:ed:2a:78:a3:4e:8e:85:b2:e0:60:0a:ed:fc:50:3c:06:e6:
         89:38:cd:9a:d6:01:b5:16:43:46:50:b7:c7:f2:08:ac:ee:db:
         fc:65:0b:3c:23:46:ea:24:60:bd:c2:06:2e:e3:6a:4d:19:16:
         4a:5f:a0:de:c7:75:c5:58:3f:43:d3:79:d9:0b:a8:6b:da:c5:
         42:48:31:84:3a:90:d7:b3:ba:32:53:d5:51:0d:ef:2e:16:db:
         f4:c0:7a:51:c9:00:32:28:b3:3f:85:45:c8:55:dc:3e:3d:17:
         fa:d1:9f:30:ad:f0:dc:30:ed:dc:64:ef:c0:99:88:a6:42:66:
         f2:ec:ec:2b:4a:b0:b7:b5:da:c2:70:02:88:6e:28:4e:51:1d:
         a4:a1:f8:3d:e3:bb:be:60:07:62:19:7e:8f:c4:ed:eb:3d:e6:
         8c:f3:46:59:33:fc:65:f1:af:45:4c:e6:c7:b9:bd:5a:2b:41:
         03:ca:26:e4:23:28:6b:9a:46:50:2e:9a:b3:1b:0e:5a:53:8b:
         fd:34:e4:2d:2c:18:00:d8:c4:c0:e7:dc:f9:a8:13:f2:4b:0a:
         d6:a0:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org