Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/raTqLYoxrBAazoTVTrZgF8H7kKk.roa
File:                     raTqLYoxrBAazoTVTrZgF8H7kKk.roa (raw, json)
Hash identifier:          CCchVXCNe80p0NbwyvC16tUCsEF6/j+BDxuex+WskqQ=
Subject key identifier:   AD:A4:EA:2D:8A:31:AC:10:1A:CE:84:D5:4E:B6:60:17:C1:FB:90:A9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       022D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/raTqLYoxrBAazoTVTrZgF8H7kKk.roa
Signing time:             Tue 30 May 2023 16:30:35 +0000
ROA not before:           Tue 30 May 2023 16:30:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ADA4EA2D8A31AC101ACE84D54EB66017C1FB90A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:08:e6:d2:88:c2:ae:40:72:9e:16:8b:c0:
                    fc:db:90:cc:01:31:6c:a7:86:0e:88:f6:a3:75:0c:
                    de:65:b4:d9:46:83:45:4d:ca:35:ea:f6:00:3a:49:
                    d1:ae:1e:eb:87:0d:67:93:9a:73:6e:44:42:a4:b2:
                    e0:2d:15:cf:5e:73:1c:39:02:e8:39:55:26:87:d9:
                    89:4b:8f:d3:69:55:d7:6b:3b:31:41:11:b8:f1:8d:
                    c4:3b:b5:52:f6:f3:54:4a:5d:f9:70:95:e6:58:1b:
                    0c:6b:02:56:67:d1:d7:13:b8:a6:9c:72:55:a8:16:
                    0e:e3:e6:2e:78:b8:30:f2:2a:5b:7e:9c:c0:f4:d7:
                    bf:4e:f3:c6:c7:1a:bd:66:06:33:f4:b5:1e:c8:44:
                    7e:a5:05:4c:78:ed:7b:3c:a7:18:3c:f2:17:37:74:
                    19:e6:57:ab:87:8a:26:3b:81:d8:49:70:ea:1e:8a:
                    8e:98:07:af:a0:db:8f:ef:6a:e3:0d:e7:19:85:62:
                    53:62:3a:02:e8:7e:ac:00:3c:39:f4:bd:47:a9:e6:
                    bb:55:a2:9e:65:6c:1c:2d:21:9d:7b:5c:00:d6:bc:
                    6b:71:f2:74:b3:e0:c2:52:74:91:f1:62:a4:3d:16:
                    ea:13:b4:f3:b8:27:56:59:93:5d:2b:2c:a8:7b:2e:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A4:EA:2D:8A:31:AC:10:1A:CE:84:D5:4E:B6:60:17:C1:FB:90:A9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/raTqLYoxrBAazoTVTrZgF8H7kKk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:08:d8:b9:24:be:a0:cc:a0:98:8e:a1:df:87:b4:96:77:9e:
         bd:3e:a4:69:07:2a:81:b9:1c:b7:97:15:ef:52:43:4d:c7:59:
         90:1a:85:5f:94:48:99:f9:1e:12:7c:10:d0:c1:47:82:b7:d4:
         53:bd:2e:86:ac:e4:89:c6:05:9e:1d:08:3e:57:48:02:26:51:
         ef:93:6d:41:21:a8:a5:40:5f:3f:33:d5:1c:fa:96:e6:b8:ed:
         3a:e1:c3:29:79:33:00:6a:88:4a:a7:e6:a8:06:27:31:4a:e1:
         97:b7:83:d9:82:42:85:a9:86:8d:de:95:da:d5:60:e9:8d:2b:
         5a:7b:cc:e4:b0:19:98:d2:2e:97:04:8a:c5:c3:72:16:b1:00:
         1d:94:28:50:04:6e:1e:ca:f0:32:9d:86:df:86:1d:f7:93:d5:
         f1:27:a9:a7:5e:88:1f:f8:6d:1c:30:c1:dd:78:35:3e:7a:db:
         c8:df:23:9c:b9:6a:03:b4:c7:6a:d2:d4:cb:13:ad:cc:7c:c5:
         6c:a5:a3:1d:93:e9:28:5a:36:df:0b:0c:ad:e2:04:52:dc:6b:
         09:27:65:fe:f1:52:8c:ed:c7:30:08:22:84:8d:76:3c:84:cd:
         b5:09:3a:80:0d:a3:cf:64:29:d0:af:10:5b:42:87:60:8e:77:
         70:46:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org