Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r9u_1j_x_o9k9kTMLt8G70Eicgs.roa
File:                     r9u_1j_x_o9k9kTMLt8G70Eicgs.roa (raw, json)
Hash identifier:          LZHkQ2ycifIoTpc3F7vgLqD+PGmGFxmTLIEAqZj6r/4=
Subject key identifier:   AF:DB:BF:D6:3F:F1:FE:8F:64:F6:44:CC:2E:DF:06:EF:41:22:72:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0203
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r9u_1j_x_o9k9kTMLt8G70Eicgs.roa
Signing time:             Tue 30 May 2023 16:29:26 +0000
ROA not before:           Tue 30 May 2023 16:29:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AFDBBFD63FF1FE8F64F644CC2EDF06EF4122720B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:c9:ff:18:b4:4f:65:37:88:2e:2a:8e:5f:
                    2d:83:b8:8c:c7:ad:a0:a9:7d:dc:20:44:36:5e:9e:
                    b4:5d:a6:67:74:5a:98:d4:01:76:b9:1a:81:0d:4a:
                    f3:9c:66:7f:74:f9:f2:88:9e:4f:be:af:c8:c4:ca:
                    09:05:29:0b:6c:31:89:55:fb:1b:c3:ac:c9:c5:66:
                    f0:21:24:bf:b5:89:c3:a4:68:5d:36:62:e2:44:8e:
                    7d:d5:86:29:49:a9:fd:5d:c7:d7:f3:3d:f4:72:49:
                    b0:22:b5:58:75:70:60:fa:38:1d:48:da:81:2f:96:
                    26:32:9f:1c:95:f2:95:aa:85:73:62:a8:2d:8f:c4:
                    86:e6:ba:b3:bb:a3:e2:99:45:5f:6a:50:92:af:c7:
                    7b:cb:8a:f4:e5:7c:d5:2b:61:f7:c2:4d:7c:03:1a:
                    41:fc:60:4f:f6:8d:29:fe:4a:a2:d5:cd:30:99:19:
                    0b:4d:bc:04:69:21:28:99:3a:61:19:f4:d0:23:5c:
                    d6:81:4e:87:f5:c5:03:e2:6c:1f:0e:51:38:4d:cd:
                    e1:26:02:a2:90:53:1f:5e:95:d7:2f:82:05:1e:48:
                    e9:4f:79:3c:a6:df:7f:8b:55:bd:70:0a:b2:78:ed:
                    e3:48:ca:07:e3:7b:c2:eb:44:05:7d:94:ea:24:6a:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:BF:D6:3F:F1:FE:8F:64:F6:44:CC:2E:DF:06:EF:41:22:72:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r9u_1j_x_o9k9kTMLt8G70Eicgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         74:56:9d:5c:aa:23:15:ff:f2:60:bf:1c:3d:40:a6:9d:f2:fb:
         91:71:e4:56:da:56:9b:77:db:00:3f:7b:10:4c:59:31:79:b7:
         35:e2:8c:57:33:25:f7:84:fc:53:2a:91:56:33:00:c3:e3:75:
         73:e6:e1:82:86:c0:e1:84:22:c1:d1:e7:fd:8c:7a:f3:2b:1b:
         58:1d:95:bd:93:e0:9f:06:49:44:a7:3b:c2:ec:92:3a:5c:ea:
         97:01:3f:0a:e8:59:4a:a0:ca:77:c5:2d:59:d6:9c:9b:e1:10:
         d0:68:7c:2c:57:99:c2:15:a4:42:cc:12:0f:10:9a:4e:8f:be:
         c9:36:be:a0:c6:ec:29:97:32:43:70:03:da:6a:6a:a5:b9:7e:
         d4:93:b9:4f:12:da:58:52:cf:9d:b4:b6:b9:8d:dd:0b:67:d1:
         61:a5:16:28:aa:fd:1c:23:ea:27:51:a3:47:5c:47:60:ce:46:
         6e:c6:2f:36:ab:4c:aa:8f:7b:0f:1e:ac:16:d6:8c:49:55:08:
         70:12:61:6d:83:aa:b1:70:73:83:60:69:6f:40:eb:09:c3:bb:
         47:ac:68:91:22:81:47:88:aa:2c:a3:16:e2:a3:b4:d6:41:a6:
         17:8e:b7:67:1d:39:8e:22:47:7e:d7:f9:fe:24:0b:7b:75:df:
         ec:8c:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org