Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nm52vCG7pzlcMtVLJHB8vLv3Z5M.roa
File:                     nm52vCG7pzlcMtVLJHB8vLv3Z5M.roa (raw, json)
Hash identifier:          dX0zsh9DobiltDxXuDiAuotX5NF5B36XUSc+ZqMfkxg=
Subject key identifier:   9E:6E:76:BC:21:BB:A7:39:5C:32:D5:4B:24:70:7C:BC:BB:F7:67:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nm52vCG7pzlcMtVLJHB8vLv3Z5M.roa
Signing time:             Wed 24 May 2023 16:35:17 +0000
ROA not before:           Wed 24 May 2023 16:35:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.198.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:35:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9E6E76BC21BBA7395C32D54B24707CBCBBF76793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:41:86:41:6e:7c:aa:60:a9:3c:a9:d4:91:
                    98:a3:b9:a6:9e:6d:1c:e7:5e:74:89:15:fb:ab:d2:
                    0a:28:55:77:b5:27:de:4a:22:8b:25:c9:85:f6:30:
                    e7:f1:e5:40:fd:14:9c:96:65:3b:41:aa:69:b3:38:
                    8e:f1:29:0a:5b:50:ed:c7:c4:6a:58:17:47:7e:c4:
                    71:92:2d:f0:35:14:3a:2b:a5:98:9a:4e:be:d3:72:
                    2c:03:50:4e:75:4e:1e:7e:0b:f8:93:0d:8d:88:9c:
                    bd:f9:99:86:1b:e4:94:e8:17:f7:ac:5e:09:dd:c6:
                    95:46:8d:b7:f7:9e:bf:c2:83:6a:f6:ba:91:f8:ed:
                    bb:b7:bb:3a:ff:6c:4b:00:fc:35:44:5a:c0:34:01:
                    53:ce:ce:4a:53:87:11:32:ea:c8:5c:00:e6:c2:d0:
                    9b:52:25:79:1e:92:99:1e:66:5e:2d:66:ab:8a:c7:
                    f0:48:81:90:67:61:b8:6d:75:2e:90:87:01:95:df:
                    c1:d6:2b:83:69:02:d9:e8:83:1a:97:32:80:55:9b:
                    24:6f:bd:8c:30:5c:86:20:fb:ed:2b:95:72:cc:fa:
                    6a:7a:a5:ff:d3:63:f5:3b:91:49:dc:9a:05:02:0a:
                    49:2f:1f:8c:fd:ef:60:0b:ec:64:73:79:4c:10:4b:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:76:BC:21:BB:A7:39:5C:32:D5:4B:24:70:7C:BC:BB:F7:67:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nm52vCG7pzlcMtVLJHB8vLv3Z5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:7b:92:9d:4a:be:f4:e8:bf:59:eb:7a:90:46:fe:27:59:09:
         a4:87:63:99:09:7e:cf:eb:6a:cd:b4:99:43:f6:6f:8e:03:93:
         df:6c:7e:45:39:3f:19:49:8d:c3:b3:92:83:e0:95:b4:74:0b:
         ef:7c:4d:17:e8:54:8d:f0:93:12:bc:22:89:a5:9c:23:71:a4:
         5e:93:03:32:e5:d0:11:bc:0d:22:7f:58:2d:ad:7e:d6:f2:3e:
         60:0b:de:12:7c:e0:f9:8d:ad:45:de:37:5c:4e:46:00:1b:f9:
         38:5b:62:f6:17:13:f7:be:97:b6:14:12:90:e9:ee:1f:04:4f:
         ce:2a:1b:ba:4a:ee:0e:94:b4:04:4c:05:59:4a:3f:a1:3d:78:
         1b:28:5b:55:8d:26:53:a6:b5:2b:7c:0b:f0:51:99:bc:02:68:
         78:d4:86:e9:9f:7b:f2:92:fc:af:a8:84:95:b8:b3:f3:71:a0:
         11:f8:aa:d9:78:6e:20:87:33:29:fd:cf:29:df:4c:23:c9:bc:
         9a:cc:75:5c:a4:42:45:34:06:09:69:4f:2c:6a:35:d6:a9:b0:
         b3:f6:28:b9:00:85:a3:01:2f:db:b4:ea:42:f2:5d:d0:f8:6f:
         07:9f:2a:b9:8d:08:15:35:d2:99:bc:ab:f5:f3:3c:3a:ea:17:
         50:1f:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org