Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oDEv4ZN3aKyRbOeBht6Vefh15qU.roa
File:                     oDEv4ZN3aKyRbOeBht6Vefh15qU.roa (raw, json)
Hash identifier:          atTEYqjoPkRhO4UOQg+4fFe/zoE9CuYwnnA8UyE93d8=
Subject key identifier:   A0:31:2F:E1:93:77:68:AC:91:6C:E7:81:86:DE:95:79:F8:75:E6:A5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oDEv4ZN3aKyRbOeBht6Vefh15qU.roa
Signing time:             Tue 06 Jun 2023 16:03:39 +0000
ROA not before:           Tue 06 Jun 2023 16:03:39 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:39 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A0312FE1937768AC916CE78186DE9579F875E6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:78:5a:7b:d5:be:08:a2:40:a2:ec:20:a6:
                    66:71:1c:47:8c:e6:bc:5f:77:65:f7:bf:a2:6b:e5:
                    87:7c:85:83:89:91:69:e0:1b:fa:c7:70:b1:84:7a:
                    05:4a:f0:06:8e:8f:9b:a7:c1:a7:0c:5b:22:60:8f:
                    20:f3:52:86:89:fd:07:5c:d3:c3:70:05:67:ea:94:
                    f6:69:52:e8:1c:f0:d5:0b:32:d7:91:31:91:ba:fd:
                    1a:f3:60:60:ba:f6:4d:6c:ef:28:ca:45:12:6e:0f:
                    12:6b:10:01:38:fc:dc:3b:f8:e0:8b:c4:82:98:39:
                    ec:ad:34:49:32:16:07:c0:d1:87:1f:6b:5b:1a:a5:
                    15:51:5e:28:66:dc:d1:bf:16:83:a4:75:5e:08:c1:
                    b1:c4:0c:c7:12:02:79:dd:46:8a:fc:54:d3:09:18:
                    44:bf:ce:d9:12:d0:d4:fe:f5:c5:ba:15:b6:08:5f:
                    ff:f8:f0:82:75:44:64:ec:80:87:cd:2f:0e:5a:15:
                    32:33:6c:06:a1:6a:a4:ed:f1:04:15:3c:92:e7:7d:
                    eb:d4:c7:40:0d:58:50:ad:95:91:9e:c1:7c:b7:b3:
                    9a:42:a5:ba:ec:07:5f:c6:42:a7:b8:a3:65:ce:40:
                    87:b5:b1:cf:8b:7e:c5:be:09:53:22:cc:36:ba:db:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:31:2F:E1:93:77:68:AC:91:6C:E7:81:86:DE:95:79:F8:75:E6:A5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oDEv4ZN3aKyRbOeBht6Vefh15qU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:f5:19:60:2b:9d:57:02:aa:a7:89:fd:ac:07:e9:62:c6:
         d1:2f:63:83:c3:9c:79:73:74:01:fa:65:61:95:69:67:ed:f0:
         c2:a6:85:73:19:b6:9f:d1:70:08:9f:e5:a0:ee:3e:07:87:b8:
         54:30:a2:ae:00:4e:0c:53:0e:bb:7c:3e:18:74:5c:be:c9:9e:
         d1:eb:b2:a0:87:65:83:df:40:24:45:6e:d7:12:41:80:ce:d2:
         2e:36:ec:77:03:6a:b4:fe:66:c1:2a:a3:56:c7:7a:39:22:db:
         01:d8:1c:30:2a:6b:1b:fa:f8:f2:08:1f:e1:19:ef:32:3e:87:
         6b:e6:2e:88:b0:4f:29:a0:5c:33:ec:43:e7:ce:b8:67:97:16:
         ba:27:62:00:be:40:f4:b0:34:e9:4d:cd:7d:f5:5e:dd:fc:e9:
         70:24:8b:23:e1:63:38:42:89:a5:0d:d7:aa:b1:38:35:68:4e:
         36:ec:5b:15:7c:0e:aa:a4:61:14:00:87:fc:56:38:f1:23:cd:
         4a:3e:5f:ad:90:2a:30:b7:24:97:84:e5:69:c1:51:f9:99:42:
         52:db:0b:1d:0e:82:95:42:6b:e3:cb:0a:32:9a:9d:75:07:e4:
         bc:12:8c:48:84:df:81:34:08:f2:7d:0e:46:c5:41:39:43:2a:
         a3:16:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org