Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nrkrNbf2MsJqIaTD81FDs7AaGjY.roa
File:                     nrkrNbf2MsJqIaTD81FDs7AaGjY.roa (raw, json)
Hash identifier:          bdlEcZcv7tqcJm7tQyntf+jmArkiNlvLCq5EqYXDBw0=
Subject key identifier:   9E:B9:2B:35:B7:F6:32:C2:6A:21:A4:C3:F3:51:43:B3:B0:1A:1A:36
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       64
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nrkrNbf2MsJqIaTD81FDs7AaGjY.roa
Signing time:             Mon 27 Mar 2023 16:04:33 +0000
ROA not before:           Mon 27 Mar 2023 16:04:33 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:33 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9EB92B35B7F632C26A21A4C3F35143B3B01A1A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:47:db:66:d2:f4:e3:64:50:a5:a7:eb:ed:
                    8f:26:3c:1a:ff:59:f8:64:73:ee:dc:da:80:83:b8:
                    e8:20:ef:7e:8c:27:22:b9:0a:5a:e5:43:0d:b4:39:
                    bd:da:2f:3a:d1:0a:73:f1:8a:96:63:e3:27:64:a8:
                    5e:16:bf:ee:f3:b6:a0:7d:5f:4c:63:29:7b:e2:8c:
                    92:3a:fc:b6:0c:05:da:75:4e:e1:be:02:ad:ef:9d:
                    ab:56:36:2a:2d:92:1a:f2:67:9d:7f:70:cf:96:73:
                    69:5f:9e:c0:4a:d8:16:18:09:f4:c8:44:28:8c:88:
                    9d:23:87:15:93:be:b4:37:84:ef:19:c1:eb:34:12:
                    d9:fa:63:1d:2c:f5:cd:c7:ad:d5:b6:5c:a1:5b:f9:
                    fc:37:74:56:57:68:f1:92:84:33:ff:1c:df:42:48:
                    ed:11:30:9d:c3:55:86:70:9f:d3:d6:2c:49:76:04:
                    ff:55:a0:8f:4d:1d:5f:f3:5b:30:ec:75:e4:60:62:
                    b1:02:13:99:24:78:c6:df:bf:44:49:7c:8f:99:bc:
                    04:39:30:cb:aa:c3:76:e3:bf:71:8d:b9:ba:05:34:
                    e8:a7:bd:e4:ee:93:1e:61:95:f9:b1:f8:3b:09:37:
                    f1:c6:31:34:ee:ef:59:fd:9c:5c:22:20:37:c8:3d:
                    00:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:2B:35:B7:F6:32:C2:6A:21:A4:C3:F3:51:43:B3:B0:1A:1A:36
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nrkrNbf2MsJqIaTD81FDs7AaGjY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:46:54:e1:e4:7e:c2:c7:eb:bf:0c:d3:9c:ea:e5:98:6a:
         84:9a:16:71:8c:6c:c7:e5:ea:fe:27:7b:5e:d5:e5:5c:b5:64:
         f3:ba:68:3f:3f:b1:4e:84:1b:26:92:16:cb:a8:72:3a:c7:d7:
         de:ec:48:34:b6:8c:d5:aa:12:1b:19:46:cc:10:cc:55:e1:44:
         57:49:ac:ab:35:c8:1e:d5:7d:b8:02:42:5c:df:a3:5c:31:5c:
         25:f6:94:6d:22:9b:51:d9:dd:b9:f7:ed:54:90:e6:f7:1c:f0:
         ee:39:ec:79:12:e0:48:e7:f1:0e:3c:04:bd:a6:b5:86:ca:20:
         1c:3d:d5:3f:39:a6:d6:a9:91:87:97:80:d2:93:0b:d6:34:8b:
         11:54:4b:45:ce:2f:50:d0:af:e3:95:d4:cf:74:6b:3c:17:84:
         5f:1a:0b:f3:e4:e4:c1:a2:c7:f7:22:36:a4:1a:79:25:b1:ec:
         8b:96:ed:ef:85:ba:51:32:d8:30:d1:59:94:46:fb:34:11:33:
         06:74:f0:98:4b:14:8d:47:3b:1c:9f:d4:85:51:86:59:40:bd:
         f0:1f:ec:d4:65:c1:75:58:6f:71:10:6d:2b:9a:bb:09:e8:05:
         82:83:04:7e:96:8c:51:4f:86:1f:32:93:64:0b:e9:a9:78:6b:
         5a:c3:c7:a9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDQzM1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoOUVCOTJCMzVCN0Y2MzJD
MjZBMjFBNEMzRjM1MTQzQjNCMDFBMUEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOyUR9tm0vTjZFClp+vtjyY8Gv9Z+GRz7tzagIO46CDvfownIrkK
WuVDDbQ5vdovOtEKc/GKlmPjJ2SoXha/7vO2oH1fTGMpe+KMkjr8tgwF2nVO4b4C
re+dq1Y2Ki2SGvJnnX9wz5ZzaV+ewErYFhgJ9MhEKIyInSOHFZO+tDeE7xnB6zQS
2fpjHSz1zcet1bZcoVv5/Dd0Vldo8ZKEM/8c30JI7REwncNVhnCf09YsSXYE/1Wg
j00dX/NbMOx15GBisQITmSR4xt+/REl8j5m8BDkwy6rDduO/cY25ugU06Ke95O6T
HmGV+bH4Owk38cYxNO7vWf2cXCIgN8g9AK8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSeuSs1t/YywmohpMPzUUOzsBoaNjAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvbnJrck5iZjJNc0pxSWFURDgxRkRzN0FhR2pZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBjFhgDANBgkqhkiG9w0BAQsFAAOCAQEArmVGVOHkfsLH678M05zq5ZhqhJoW
cYxsx+Xq/id7XtXlXLVk87poPz+xToQbJpIWy6hyOsfX3uxINLaM1aoSGxlGzBDM
VeFEV0msqzXIHtV9uAJCXN+jXDFcJfaUbSKbUdndufftVJDm9xzw7jnseRLgSOfx
DjwEvaa1hsogHD3VPzmm1qmRh5eA0pML1jSLEVRLRc4vUNCv45XUz3RrPBeEXxoL
8+TkwaLH9yI2pBp5JbHsi5bt74W6UTLYMNFZlEb7NBEzBnTwmEsUjUc7HJ/UhVGG
WUC98B/s1GXBdVhvcRBtK5q7CegFgoMEfpaMUU+GHzKTZAvpqXhrWsPHqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org