Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rTL8nJq5qhio6cAySZNRiOTJ2QE.roa
File:                     rTL8nJq5qhio6cAySZNRiOTJ2QE.roa (raw, json)
Hash identifier:          jXJEFwmryrSsIHVEjtqYZh72Drc5H2JIAq4JVy6H2tk=
Subject key identifier:   AD:32:FC:9C:9A:B9:AA:18:A8:E9:C0:32:49:93:51:88:E4:C9:D9:01
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03CF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rTL8nJq5qhio6cAySZNRiOTJ2QE.roa
Signing time:             Tue 06 Jun 2023 16:03:03 +0000
ROA not before:           Tue 06 Jun 2023 16:03:03 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.226.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:03 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AD32FC9C9AB9AA18A8E9C03249935188E4C9D901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:a1:52:0c:eb:75:3a:f8:3d:d8:6e:7c:e1:
                    99:25:1f:3e:9d:23:4d:6a:b5:73:05:f7:c2:6d:df:
                    bf:d9:eb:6e:5a:46:b7:00:ad:3f:d4:25:9f:d6:24:
                    b6:d8:dd:90:ff:ad:35:3c:8b:b6:fe:f2:7c:c4:f2:
                    13:22:ef:df:81:ac:32:ef:22:97:0e:aa:7e:60:c7:
                    0d:8a:b0:02:4a:70:b0:ab:e4:9b:df:06:69:9a:4c:
                    16:b0:54:4d:1f:f3:22:fe:f0:24:fd:71:8b:f0:e4:
                    a9:fb:b0:95:b6:46:a6:38:e2:c6:0b:e1:70:8d:9b:
                    ce:2c:f0:bd:97:24:d2:bb:26:34:4b:11:f5:f5:7d:
                    cb:ae:c1:4e:63:0b:c6:3d:3f:8a:c3:d1:83:29:64:
                    df:e6:32:ae:7e:3c:f9:df:0d:b5:1b:f6:b0:77:48:
                    10:18:8d:2b:86:a7:b3:36:f3:41:d3:ba:01:70:05:
                    34:cc:6d:35:67:e1:a8:fc:ce:3f:15:c7:be:39:18:
                    9b:5c:83:fc:96:ff:44:95:5b:6d:63:51:bc:f2:5b:
                    32:00:f8:70:08:47:95:75:5d:de:c3:d3:e8:91:e2:
                    3e:65:be:1e:de:cd:ef:1c:d8:a6:91:7d:dd:41:83:
                    c8:42:63:38:b8:2e:33:fa:99:b9:75:b9:b3:eb:41:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:32:FC:9C:9A:B9:AA:18:A8:E9:C0:32:49:93:51:88:E4:C9:D9:01
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rTL8nJq5qhio6cAySZNRiOTJ2QE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:7a:8e:11:d5:d0:94:57:fc:7b:cd:e7:a4:df:7c:d1:e9:
         a0:eb:90:d9:19:45:e2:21:b4:1a:13:e1:94:e1:63:58:bf:79:
         bb:da:40:f3:38:00:37:77:4e:6d:40:59:0a:b4:ad:47:ef:82:
         57:aa:6b:46:81:34:dd:0f:35:2c:25:bc:1a:50:ed:d5:a7:fd:
         84:bf:3c:c5:71:e1:31:cd:7f:9b:ac:a3:4e:ac:e7:1d:f3:03:
         45:ed:3e:49:28:e2:9a:58:3c:3c:29:c7:d0:de:03:a2:12:47:
         0a:82:d0:f9:c8:44:4f:b7:d7:de:ef:13:4f:ae:14:0d:66:cc:
         d0:4e:ab:02:0a:88:df:4d:9a:35:d5:f8:91:95:37:57:bc:3d:
         e1:88:d0:f1:e6:90:99:d4:15:b5:fd:7b:06:31:9e:74:33:51:
         88:8d:e7:40:76:6d:75:5a:a6:c1:be:63:0c:f6:ef:5f:4a:72:
         d0:1e:b0:c5:a5:fb:c7:ec:c5:7d:c8:ed:c2:42:94:9d:c2:cc:
         59:b5:67:34:3a:e2:39:fa:99:5b:c1:a1:73:74:67:fb:8c:c3:
         21:c4:33:cb:63:7e:72:89:94:3f:be:b5:1e:fe:82:f6:24:4c:
         81:cd:f6:96:bb:64:93:f1:a7:b1:a9:d4:16:f6:4c:50:8c:46:
         59:fb:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org