Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pbS9oUSkreRZio9FuDtGq9FF8Vo.roa
File:                     pbS9oUSkreRZio9FuDtGq9FF8Vo.roa (raw, json)
Hash identifier:          zk+lZ1vpd7EMlWlmxdr7cYqfsZWnsXIW5inRqVqC2ps=
Subject key identifier:   A5:B4:BD:A1:44:A4:AD:E4:59:8A:8F:45:B8:3B:46:AB:D1:45:F1:5A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0156
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pbS9oUSkreRZio9FuDtGq9FF8Vo.roa
Signing time:             Wed 24 May 2023 16:31:20 +0000
ROA not before:           Wed 24 May 2023 16:31:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.32.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A5B4BDA144A4ADE4598A8F45B83B46ABD145F15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:e4:20:6c:c8:44:14:bf:67:02:7d:7c:d3:
                    42:aa:81:dd:90:e7:11:75:d6:9a:3a:2c:03:b7:01:
                    0a:9a:64:8f:d3:dc:94:e5:2d:6a:e3:b1:05:e3:4b:
                    ed:47:29:7d:8b:5d:e0:09:bc:e1:25:2a:f3:dd:2c:
                    49:90:4f:1a:e1:de:c0:da:f3:d4:ae:59:2e:52:d1:
                    91:47:0f:5a:f7:c3:12:9c:5e:14:3e:3c:7d:bc:23:
                    cd:3e:57:f1:08:68:13:66:2d:a4:d1:01:a3:bf:94:
                    c1:b1:de:2a:85:8d:fe:42:e0:a9:be:10:6a:b0:77:
                    46:58:d6:8f:e9:c5:4f:7c:0d:6a:34:61:16:2f:f5:
                    2b:ba:28:bf:91:b5:7f:e5:b4:88:81:7e:18:67:84:
                    09:82:10:ab:83:a6:47:d6:55:60:5c:3c:da:eb:56:
                    bd:d8:c7:1b:fd:9e:f4:22:6c:70:0d:2b:a5:50:8c:
                    45:94:05:53:c4:e0:32:59:6c:fd:57:04:53:e6:2b:
                    56:9e:d9:cf:f3:fa:56:d9:c9:a1:10:e6:e4:a1:b6:
                    a3:52:66:4f:2b:53:0a:10:41:8d:bd:d6:0e:6b:0a:
                    26:28:88:58:8a:1b:55:d9:40:b0:f5:57:18:5d:ef:
                    30:a5:0b:07:b5:e5:60:2f:3e:20:a1:49:22:22:d8:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B4:BD:A1:44:A4:AD:E4:59:8A:8F:45:B8:3B:46:AB:D1:45:F1:5A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pbS9oUSkreRZio9FuDtGq9FF8Vo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:39:f5:ba:1a:f4:b3:7f:1e:4f:7e:02:36:f8:26:32:0b:62:
         1a:3b:fa:25:40:7d:8c:f5:5d:d8:c8:0f:ce:1f:e6:38:45:39:
         52:5e:4b:d4:02:e0:0e:15:c5:b0:dc:2c:41:07:a2:5e:16:dd:
         74:10:ee:e2:cc:a3:f6:2a:9d:73:59:99:9b:ce:4a:19:4e:08:
         f9:b3:b4:e1:e7:b3:ee:67:99:03:11:9d:f0:73:96:13:cd:e4:
         2d:26:57:e2:7c:a6:47:92:24:e8:05:af:99:b3:54:f8:b1:e8:
         b2:66:7f:1d:46:7b:c7:32:b2:d6:1c:e6:ac:83:2f:f7:d9:83:
         7d:26:84:78:a9:d0:74:f1:3c:f0:d5:40:88:a0:f6:4c:d6:82:
         0b:cb:0f:52:8f:02:2f:63:1c:22:39:03:2a:a8:ff:ae:73:5a:
         49:8e:71:6d:a0:63:68:4b:84:3c:46:ce:14:95:25:be:d2:8d:
         ac:a8:56:5e:e5:23:55:c5:f0:d1:41:e2:e8:fc:4c:49:03:b1:
         58:f9:64:d6:82:56:b3:fa:51:db:8b:cc:ea:eb:4e:d6:47:8c:
         3a:01:51:a7:b4:44:09:bc:39:09:48:97:f5:b9:81:f5:fc:cc:
         3c:52:ed:52:6e:f7:4e:88:88:ca:ee:ad:58:e6:4f:29:39:cc:
         e2:4e:1f:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMxMjBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE1QjRCREExNDRBNEFE
RTQ1OThBOEY0NUI4M0I0NkFCRDE0NUYxNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCkOQgbMhEFL9nAn1800Kqgd2Q5xF11po6LAO3AQqaZI/T3JTl
LWrjsQXjS+1HKX2LXeAJvOElKvPdLEmQTxrh3sDa89SuWS5S0ZFHD1r3wxKcXhQ+
PH28I80+V/EIaBNmLaTRAaO/lMGx3iqFjf5C4Km+EGqwd0ZY1o/pxU98DWo0YRYv
9Su6KL+RtX/ltIiBfhhnhAmCEKuDpkfWVWBcPNrrVr3Yxxv9nvQibHANK6VQjEWU
BVPE4DJZbP1XBFPmK1ae2c/z+lbZyaEQ5uShtqNSZk8rUwoQQY291g5rCiYoiFiK
G1XZQLD1Vxhd7zClCwe15WAvPiChSSIi2NrtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUpbS9oUSkreRZio9FuDtGq9FF8VowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3BiUzlvVVNrcmVSWmlvOUZ1RHRHcTlGRjhWby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBTyAwDQYJKoZIhvcNAQELBQADggEBABA59boa9LN/Hk9+Ajb4JjILYho7
+iVAfYz1XdjID84f5jhFOVJeS9QC4A4VxbDcLEEHol4W3XQQ7uLMo/YqnXNZmZvO
ShlOCPmztOHns+5nmQMRnfBzlhPN5C0mV+J8pkeSJOgFr5mzVPix6LJmfx1Ge8cy
stYc5qyDL/fZg30mhHip0HTxPPDVQIig9kzWggvLD1KPAi9jHCI5Ayqo/65zWkmO
cW2gY2hLhDxGzhSVJb7SjayoVl7lI1XF8NFB4uj8TEkDsVj5ZNaCVrP6UduLzOrr
TtZHjDoBUae0RAm8OQlIl/W5gfX8zDxS7VJu906IiMrurVjmTyk5zOJOH4A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org