Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBi-gdQxhU5FwTMk7rPxnSxccAI.roa
File:                     sBi-gdQxhU5FwTMk7rPxnSxccAI.roa (raw, json)
Hash identifier:          F3INlowSbuGWDIX9/YUSax+PU8nzpWHXS+KncdZuJ88=
Subject key identifier:   B0:18:BE:81:D4:31:85:4E:45:C1:33:24:EE:B3:F1:9D:2C:5C:70:02
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0372
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBi-gdQxhU5FwTMk7rPxnSxccAI.roa
Signing time:             Thu 01 Jun 2023 17:57:30 +0000
ROA not before:           Thu 01 Jun 2023 17:57:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B018BE81D431854E45C13324EEB3F19D2C5C7002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:90:e7:32:a9:c0:06:bd:03:2e:d7:e7:77:
                    20:f4:7d:ed:b8:3b:29:b0:78:5d:6c:11:5b:17:b6:
                    c8:19:47:9b:e1:90:64:02:a1:d6:6f:72:49:3b:f2:
                    17:cc:c5:95:b2:4e:aa:f5:d8:72:f4:28:f1:2e:d5:
                    3f:33:93:8f:18:8c:b1:4a:31:14:31:c3:56:ad:1f:
                    ae:bd:3f:75:f8:c2:fd:e3:09:71:0b:e0:59:4c:57:
                    e6:0c:d5:68:3d:ef:31:01:11:fa:4e:c6:5f:5f:d1:
                    fa:ab:0a:cf:8d:20:f6:4f:c9:84:c5:d7:11:74:47:
                    1d:a3:33:b7:a6:8c:8a:28:00:cb:18:bd:76:1a:cf:
                    a2:b6:e1:a8:2a:94:cf:69:ce:6b:70:32:f8:0c:33:
                    3a:1e:e5:b4:14:c4:1d:90:70:c7:81:dc:2a:84:a0:
                    58:fe:3e:2a:a9:4d:58:ff:0d:e1:fa:7c:6f:c0:bd:
                    66:3a:aa:85:6b:d6:62:80:76:8e:04:f7:c6:bd:c6:
                    7b:0e:2f:2a:11:96:30:27:0f:9d:d8:b6:6e:4d:82:
                    7a:0a:07:31:e4:14:02:c7:e5:c7:67:8c:4e:21:27:
                    08:f6:fe:0d:78:d8:09:bf:30:a0:42:85:4f:b9:59:
                    0f:74:b6:ed:fe:2d:ec:07:a8:ec:c2:da:d9:d0:31:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:BE:81:D4:31:85:4E:45:C1:33:24:EE:B3:F1:9D:2C:5C:70:02
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBi-gdQxhU5FwTMk7rPxnSxccAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a0:79:da:93:08:0e:77:22:d6:61:b0:3d:e8:c1:a4:62:01:
         b6:a8:35:dc:aa:46:4b:26:e7:23:9b:09:4c:0b:95:e2:70:7c:
         a5:fb:d4:66:52:60:dd:35:78:11:4f:b1:96:9e:49:c5:9d:38:
         a8:53:eb:fd:c1:09:cd:ac:7b:0b:0f:88:25:51:c4:55:09:8c:
         94:73:6d:4d:ab:ce:11:88:9f:ec:5e:18:b6:01:72:e3:4e:8a:
         a5:96:91:c6:ce:b9:14:34:6a:6e:53:84:d5:87:b1:1e:6b:ad:
         c1:50:ba:4c:e8:56:5e:6e:41:75:2e:72:8c:ac:69:37:16:50:
         bd:b3:78:34:ef:d5:72:13:1a:59:89:e4:2c:7f:df:c5:b8:12:
         48:6f:20:1d:8d:87:7a:e5:86:0a:63:ff:74:bf:a1:64:55:4f:
         dd:20:9f:9d:11:db:d7:ce:e9:46:44:b3:32:98:06:a0:ce:d6:
         0a:88:55:7b:d1:b8:c6:9e:0e:7d:7c:0c:69:9b:d1:91:cd:68:
         00:1e:5b:b1:43:41:01:3a:0c:19:27:ae:99:7a:14:6d:73:60:
         13:91:b6:51:06:49:2b:2f:c9:e4:7a:70:2e:8b:7e:56:3a:a6:
         1b:94:08:c4:9c:df:89:7d:02:d5:62:4a:82:0b:84:f7:a2:88:
         d7:fa:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org