Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t0-FNX9jwRz0O0fi92yGYAtAQZU.roa
File:                     t0-FNX9jwRz0O0fi92yGYAtAQZU.roa (raw, json)
Hash identifier:          CctveWq96g/6h9JK2wXFY+A2eX7bC3pwnN6Bv/tUcsA=
Subject key identifier:   B7:4F:85:35:7F:63:C1:1C:F4:3B:47:E2:F7:6C:86:60:0B:40:41:95
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       90
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t0-FNX9jwRz0O0fi92yGYAtAQZU.roa
Signing time:             Wed 29 Mar 2023 16:04:59 +0000
ROA not before:           Wed 29 Mar 2023 16:04:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.174.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:04:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B74F85357F63C11CF43B47E2F76C86600B404195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:c0:e5:e3:4e:23:84:4f:23:70:c4:aa:ef:
                    7a:34:b9:ce:2a:d3:b9:f3:65:17:9a:2a:24:7c:ca:
                    ce:96:e0:10:31:30:84:b7:26:e6:64:ab:68:2d:bf:
                    4e:b4:aa:ed:e3:a4:43:ff:00:9c:96:22:d9:b4:ce:
                    cb:fa:a4:7b:bd:8c:d2:19:90:81:f0:07:5e:df:c9:
                    4e:6a:09:e5:e5:db:35:c1:6d:c8:21:1d:1c:85:b6:
                    b4:fd:bb:c1:10:4d:bb:de:a9:12:45:96:bc:68:5f:
                    9d:dc:a7:77:e0:72:d0:0c:cd:87:78:3f:22:d1:d3:
                    09:4f:d8:f0:6f:9d:3a:55:4a:09:08:61:d6:3a:f2:
                    ee:2f:ea:f1:14:a9:50:43:bc:6e:b0:ab:11:e3:7f:
                    5f:c3:84:a4:ed:b2:38:d2:4e:3b:ea:5d:7d:51:f8:
                    b8:c2:d3:bc:2e:a2:8c:18:e7:fc:77:30:97:fe:26:
                    9b:27:1e:13:52:2a:65:18:ee:51:8d:5e:25:2e:40:
                    42:48:3e:7a:3a:fb:1a:a8:56:7c:d8:09:45:d3:0a:
                    b1:96:4b:26:9b:e0:f8:f0:08:20:ce:75:80:74:9e:
                    33:56:6d:bb:1e:51:cc:99:93:66:80:92:48:ff:ed:
                    4d:09:1e:39:bd:e6:b5:84:a1:78:5b:c2:4b:1c:79:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:85:35:7F:63:C1:1C:F4:3B:47:E2:F7:6C:86:60:0B:40:41:95
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t0-FNX9jwRz0O0fi92yGYAtAQZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:76:7d:2e:14:9a:65:11:6f:f5:b6:88:6a:21:af:f2:4c:47:
         27:9a:1c:46:ff:10:70:b0:52:e8:f5:8e:38:78:1f:6c:aa:ba:
         10:80:dd:51:84:91:aa:2f:18:a6:b3:87:fa:2c:b5:99:98:b1:
         fd:b3:63:28:be:f6:c5:37:81:ff:46:ec:35:04:e6:d6:e3:bc:
         c9:ad:d6:07:46:4d:a7:5b:c6:0a:1f:80:30:56:da:61:f1:76:
         3c:da:b2:04:33:82:33:30:53:f1:3c:03:53:b3:68:cf:ec:db:
         c0:99:36:c8:a4:14:23:f6:97:24:78:6d:9d:35:ff:c8:0e:90:
         34:b1:96:3a:8c:91:c6:cc:df:8d:8c:dc:a0:b8:80:4b:0e:e8:
         7b:86:ee:32:cf:44:76:16:51:43:67:8e:32:ec:1f:74:73:d2:
         ca:ab:cd:3d:84:de:bc:42:d6:0b:19:59:49:57:35:d2:88:e4:
         8c:d7:93:4e:0a:55:8d:24:a3:9c:ca:32:ac:8f:74:c1:c6:74:
         5c:61:41:ee:95:37:4e:d5:16:ca:74:27:ea:7e:82:86:3e:33:
         55:be:68:49:27:f8:a6:a8:e3:fc:ca:45:cf:e6:a5:74:de:3c:
         2c:ca:96:29:1b:a4:25:b3:9e:71:17:2f:7b:4d:b4:9e:38:3e:
         dc:75:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org