Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sOHxsHNQ4HiWr9RtV6G8-gAL51M.roa
File:                     sOHxsHNQ4HiWr9RtV6G8-gAL51M.roa (raw, json)
Hash identifier:          wZNX4eVu0KtB5sUz1z1l/b+fw/tvF5C9PIfo+dRlyaU=
Subject key identifier:   B0:E1:F1:B0:73:50:E0:78:96:AF:D4:6D:57:A1:BC:FA:00:0B:E7:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       027B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sOHxsHNQ4HiWr9RtV6G8-gAL51M.roa
Signing time:             Tue 30 May 2023 16:34:22 +0000
ROA not before:           Tue 30 May 2023 16:34:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B0E1F1B07350E07896AFD46D57A1BCFA000BE753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:ec:c5:ca:08:67:51:00:01:50:92:3a:11:
                    fa:a3:9d:3b:ef:84:12:ac:6a:35:af:26:16:e1:cd:
                    0c:fb:43:c7:23:26:29:6b:c0:5c:9d:12:be:fc:d0:
                    3d:72:92:0d:61:da:ce:04:e0:55:a5:d3:3b:4f:ff:
                    55:52:a2:f7:fd:cc:b6:5a:cb:a2:7d:44:4d:70:36:
                    47:81:b9:0b:76:2b:80:e8:40:68:b5:bf:1e:8b:4f:
                    b8:a9:25:2f:18:d7:7d:74:4c:87:4e:54:7a:5c:34:
                    26:8c:0d:29:ab:9d:93:65:80:a2:27:c7:9f:75:d7:
                    cc:c5:e9:e9:cf:91:18:4b:b2:93:1c:d4:9a:c8:48:
                    bc:a1:af:5c:58:e9:16:8a:ce:6d:9c:1f:aa:2b:5f:
                    3e:cb:39:e5:08:d2:d3:36:8f:d2:c0:91:5d:77:8a:
                    41:d7:db:d2:a3:36:38:a8:5e:16:5e:15:74:cc:c5:
                    6a:3e:4c:80:55:c9:1d:44:89:9d:9d:f7:93:d6:00:
                    8d:cc:e8:38:6b:a2:08:bd:7a:16:c5:97:0e:3e:3f:
                    e6:48:e2:cc:06:6c:e6:26:16:38:47:e9:93:2b:17:
                    47:e5:73:12:31:76:8f:32:65:e8:47:fc:17:36:20:
                    f9:03:63:fe:a4:5d:38:c8:89:3d:eb:27:e2:43:78:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E1:F1:B0:73:50:E0:78:96:AF:D4:6D:57:A1:BC:FA:00:0B:E7:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sOHxsHNQ4HiWr9RtV6G8-gAL51M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:1d:ed:e4:a4:bf:1f:6a:52:65:2e:c9:1c:9e:1d:44:2d:
         be:b8:30:12:84:f9:d3:07:9d:50:93:1a:63:c3:61:bf:d7:17:
         95:a0:a9:80:6c:7c:ef:19:05:85:55:4d:be:65:52:bf:62:f5:
         83:a0:05:55:a6:da:4e:96:fc:20:6c:c3:c3:b1:93:74:7d:73:
         43:d8:ec:b9:70:e9:40:1d:9e:d3:84:e3:f6:92:c3:66:d9:9e:
         4c:6b:ef:cb:ce:c6:e3:21:50:d2:f4:69:fa:22:d3:02:d3:8b:
         2f:75:99:e2:60:6e:7a:68:e5:60:e8:61:13:0a:42:1d:4c:dc:
         e0:81:4b:2b:bf:a4:b1:ca:60:bf:0e:11:1c:be:a5:59:17:ce:
         0e:1f:1d:5b:b7:13:95:47:de:bf:16:10:16:7d:ef:33:f7:02:
         92:e1:bb:0c:70:2a:3c:bd:50:a0:0a:b6:ca:b0:cd:73:8c:55:
         b9:1a:cb:09:2c:ea:9b:51:af:e6:da:22:82:aa:34:4f:0d:65:
         98:3d:00:bc:f3:47:36:ca:c1:90:02:0c:2d:fe:57:ef:3b:a2:
         5f:81:cb:a2:9f:11:8e:07:bc:31:31:8e:4c:c9:dd:50:53:38:
         fc:78:55:79:19:af:e9:86:c3:8c:0f:6f:3d:62:5f:ee:de:d2:
         6c:0f:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org