Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nyXw3L_5A0FPAh-B8d23y7b75W8.roa
File:                     nyXw3L_5A0FPAh-B8d23y7b75W8.roa (raw, json)
Hash identifier:          6Fdbf6KjNWJxXYJQy3PK6eH3q2PM2qfBOycyM+WfUF4=
Subject key identifier:   9F:25:F0:DC:BF:F9:03:41:4F:02:1F:81:F1:DD:B7:CB:B6:FB:E5:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       016D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nyXw3L_5A0FPAh-B8d23y7b75W8.roa
Signing time:             Wed 24 May 2023 16:33:18 +0000
ROA not before:           Wed 24 May 2023 16:33:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.4.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9F25F0DCBFF903414F021F81F1DDB7CBB6FBE56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:ae:38:8c:ac:db:e9:7f:ed:36:0f:88:9e:
                    0c:3e:49:aa:6e:b9:e5:e1:54:58:00:e8:9a:5a:dd:
                    b4:4d:7a:96:01:d1:e8:72:5b:55:3d:62:3e:77:a9:
                    63:03:ff:60:58:7f:6f:94:e3:ea:c0:94:e1:ac:c8:
                    c0:5f:82:58:46:0a:9a:39:3a:27:c6:fc:bc:06:67:
                    b0:32:86:54:1f:c4:8f:ac:d2:aa:24:78:42:9a:db:
                    17:42:12:50:d1:d5:ad:ab:8a:19:71:66:70:75:90:
                    fb:82:41:88:2d:1a:fd:93:1e:8a:55:80:91:48:7d:
                    ef:4c:f6:5e:b7:b3:0e:c5:23:c6:36:27:12:87:07:
                    de:c7:6d:ad:3c:fa:8d:12:90:0d:2f:9c:cd:f2:5e:
                    27:40:df:07:32:1b:d1:87:d0:2a:24:be:23:09:a9:
                    e2:0d:2a:15:6f:6d:5e:72:a3:b0:6e:96:52:72:41:
                    2b:fa:28:b8:35:c3:c3:73:fc:3e:5b:7a:97:da:a5:
                    9c:cb:47:c0:ff:08:f3:5e:b7:ce:a0:fa:d4:58:40:
                    43:86:d8:29:c6:1c:e2:8c:69:07:02:7b:4a:6a:a2:
                    a5:0f:90:21:ef:3c:e1:26:b1:af:ad:52:d9:68:50:
                    02:13:69:bc:8b:9a:8d:65:42:eb:a7:cd:c6:ee:77:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:25:F0:DC:BF:F9:03:41:4F:02:1F:81:F1:DD:B7:CB:B6:FB:E5:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nyXw3L_5A0FPAh-B8d23y7b75W8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:f5:35:a2:20:41:0e:b9:bf:ad:8d:10:71:61:69:45:e9:
         27:74:48:d0:71:be:a9:5d:53:85:50:65:b2:19:8b:ac:27:3e:
         5e:b1:ee:1f:9a:e5:ab:c7:55:aa:44:fc:5d:e0:bc:0d:01:e8:
         7f:da:1d:ed:27:ff:9b:8d:9c:c4:ca:d2:8c:b9:87:a4:da:8e:
         57:9e:fc:70:8a:a1:e8:8a:ed:82:80:af:19:3e:61:c1:ed:17:
         2c:fd:c4:24:5b:ab:fc:bc:c5:dd:c2:a1:29:58:2e:26:72:41:
         dc:b4:1c:77:3a:14:ab:b3:a1:6e:8f:a3:71:da:6d:47:94:4d:
         fa:65:dc:15:bd:3b:bf:e3:fc:23:be:f2:d2:b0:5c:d7:28:cb:
         15:56:90:b9:21:9b:5f:c8:79:3e:4b:d6:9c:4e:ab:84:57:ae:
         df:70:eb:db:49:b3:67:6e:41:e6:a0:9c:22:78:dc:68:88:f7:
         7b:3e:72:2e:e0:02:8a:6a:0f:59:6e:c4:94:58:94:df:5c:1b:
         79:a2:f6:29:0c:24:80:3d:b4:55:5a:45:5b:99:08:ad:5f:1f:
         1d:04:fc:11:96:3f:f6:d2:8f:90:66:24:68:71:da:36:d8:6b:
         10:e2:a7:3a:e8:5f:6f:98:a9:04:44:77:fd:03:e0:3e:67:16:
         0b:8b:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org