Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nF7Zw6xynLeZYTJfcpfHEdCARKo.roa
File:                     nF7Zw6xynLeZYTJfcpfHEdCARKo.roa (raw, json)
Hash identifier:          yZzkt5d23amrkqDHhaiy8WHZfXL0AKc/em/ZsweaEh8=
Subject key identifier:   9C:5E:D9:C3:AC:72:9C:B7:99:61:32:5F:72:97:C7:11:D0:80:44:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       94
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nF7Zw6xynLeZYTJfcpfHEdCARKo.roa
Signing time:             Wed 29 Mar 2023 16:05:00 +0000
ROA not before:           Wed 29 Mar 2023 16:05:00 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.162.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:00 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9C5ED9C3AC729CB79961325F7297C711D08044AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:27:a5:76:ff:51:9c:1d:67:9b:b1:a6:cf:ac:
                    ec:60:42:a8:d8:5d:69:f8:3c:1a:af:14:5a:b8:a7:
                    f5:4a:4c:11:c9:12:1e:b0:6f:68:59:e7:c5:96:4c:
                    36:86:b9:e1:bb:ca:7e:04:c8:1f:4c:e4:82:e8:f1:
                    35:8a:fb:d3:ca:8f:dd:10:f4:5e:94:a6:ee:dd:51:
                    83:91:34:28:69:4a:56:37:f7:eb:d7:7a:76:9f:7a:
                    86:ee:af:5d:6e:b8:b7:bb:3b:9d:0d:f3:f9:24:ed:
                    30:0f:f1:62:98:e4:34:2d:03:06:c7:30:38:27:ea:
                    70:fa:b8:b0:87:d9:77:75:d4:7d:ea:bd:b9:68:7f:
                    76:05:15:79:d6:ac:5b:82:82:84:fe:96:c0:18:85:
                    c9:d9:68:b8:66:e1:d7:4b:7a:3d:e7:12:f3:54:be:
                    23:d2:ce:f1:07:8e:79:7d:19:03:65:bf:59:96:b9:
                    74:c4:6a:63:24:26:df:f8:30:54:41:2e:5b:26:e1:
                    f0:75:e5:a7:8d:a2:b5:53:13:2d:06:61:5d:16:e6:
                    f2:32:82:e8:c0:4c:dc:c6:0e:33:0c:d0:13:61:50:
                    ea:14:d0:72:61:6d:22:c8:83:1f:06:7d:f3:b1:4d:
                    f7:94:d6:99:2c:0e:ae:74:3c:fa:e0:77:39:34:66:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:D9:C3:AC:72:9C:B7:99:61:32:5F:72:97:C7:11:D0:80:44:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nF7Zw6xynLeZYTJfcpfHEdCARKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:36:51:f3:79:45:8e:c6:21:88:da:2d:42:ef:17:5e:bc:
         1c:2c:90:c0:df:d7:fd:70:bc:53:d9:9f:85:14:c1:10:fc:22:
         99:0d:0a:8b:4d:bc:81:0d:2c:93:06:15:8f:1d:f9:28:1a:d1:
         ce:10:61:82:e3:b1:4f:b9:f2:fd:dc:1c:76:98:1b:77:21:bb:
         f3:a9:1e:8a:79:92:34:bc:63:fe:ff:46:63:1b:3d:af:93:20:
         30:40:bc:ec:88:1b:3d:58:2b:34:16:8e:2f:c4:37:af:6c:83:
         86:e0:17:01:d1:60:f8:8f:70:47:21:e7:86:30:2a:1a:7c:21:
         75:44:43:bb:ac:98:7c:21:ed:fa:20:9e:19:5a:3b:bc:55:4d:
         e1:e3:13:5e:f4:de:54:98:c0:4b:d3:35:e5:f9:7a:4d:af:bc:
         34:d8:64:8b:84:8a:a4:13:5b:4d:a6:51:ae:e7:39:e7:a3:a7:
         d6:ac:98:63:14:e1:76:fc:b3:af:d7:ff:30:b4:e8:c2:7b:33:
         11:17:f2:d8:20:75:86:f4:cf:cb:d5:86:3d:4f:46:5e:96:43:
         4e:b6:d5:cf:60:a8:c4:25:ca:99:31:06:85:9a:e4:3b:28:db:
         6e:c0:2d:59:ef:37:d1:e1:ed:f1:35:65:ae:73:1b:53:c9:a6:
         3a:dd:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org