Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t5pESIxe11C8ApSitMRsp6FoLKg.roa
File:                     t5pESIxe11C8ApSitMRsp6FoLKg.roa (raw, json)
Hash identifier:          hlBlGl8E37e0gYaNmDQKo6XOjd60M9yvjM3DPgF5Aok=
Subject key identifier:   B7:9A:44:48:8C:5E:D7:50:BC:02:94:A2:B4:C4:6C:A7:A1:68:2C:A8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       87
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t5pESIxe11C8ApSitMRsp6FoLKg.roa
Signing time:             Wed 29 Mar 2023 16:04:56 +0000
ROA not before:           Wed 29 Mar 2023 16:04:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.170.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:04:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B79A44488C5ED750BC0294A2B4C46CA7A1682CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:fa:cb:cd:6d:0c:61:f4:1a:68:f0:7a:28:
                    28:74:67:ee:f3:86:56:9f:63:51:f4:43:ab:8a:7e:
                    5d:c4:29:27:ab:8f:bc:46:9c:71:38:d8:0f:33:6c:
                    3b:c1:00:dc:38:69:20:14:95:5b:68:bc:11:dc:d3:
                    de:b9:eb:a8:b4:09:e8:69:7a:8f:f0:ee:fe:f2:27:
                    cf:1e:8f:4b:a6:f9:ab:5a:d4:1a:55:60:23:ba:3c:
                    31:18:b7:d2:4d:9b:a0:85:d5:f3:91:f3:f2:c9:93:
                    5e:bc:4d:18:f6:7b:d3:4a:c3:26:07:75:ae:43:08:
                    96:57:46:83:17:6e:e0:0e:7f:fe:ab:bf:a2:18:c6:
                    2a:9d:8b:9b:61:d6:55:13:08:b4:aa:2e:1d:41:85:
                    79:2f:77:1c:a1:41:70:5d:84:8d:63:22:1e:51:89:
                    a2:8a:aa:c3:4e:ff:eb:3e:37:98:cf:a1:72:20:7a:
                    9e:3d:1d:b6:6d:05:9f:5a:f6:69:5d:4c:e7:16:bd:
                    c2:04:3e:c7:47:dc:b6:e6:b2:03:e4:c8:99:7e:f7:
                    99:c3:4f:11:27:37:00:2e:e7:52:a0:5b:82:3d:cc:
                    73:12:49:af:38:36:ed:55:61:ba:ba:0d:bd:74:8d:
                    eb:ff:1e:d9:e4:a4:23:42:8f:a6:fb:22:2d:90:2b:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:44:48:8C:5E:D7:50:BC:02:94:A2:B4:C4:6C:A7:A1:68:2C:A8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t5pESIxe11C8ApSitMRsp6FoLKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:91:30:97:dc:c2:8a:97:63:cc:cb:e0:57:62:ed:82:18:a4:
         0f:6c:d4:2d:f1:7b:ef:2c:6b:4e:11:e0:e0:d6:00:4c:fa:bd:
         d8:32:c9:4f:6b:80:7e:05:6e:72:7a:68:ff:d2:68:a2:31:36:
         8b:94:e8:d2:ac:c8:4f:4b:96:c0:33:ee:56:5e:9e:7e:f5:ac:
         e2:1a:ae:b8:43:af:a6:ba:da:a4:9b:74:2e:d1:a4:65:fe:08:
         2e:ae:6a:a2:21:89:28:3f:81:e6:d0:ef:5d:50:d4:3d:29:eb:
         cb:47:5a:e8:15:f6:3c:76:f8:f8:19:6d:11:84:52:69:29:a7:
         eb:c5:3e:4b:ed:ec:b5:90:ea:d7:78:5a:af:4c:16:0f:e2:f1:
         0c:87:bc:83:f1:63:95:34:4a:c6:9a:83:b9:d5:26:39:62:00:
         db:c3:c8:a9:8a:12:33:b3:d9:aa:f6:a4:2a:e5:d1:d4:d8:8b:
         96:8f:2d:b3:14:31:d3:83:1c:aa:61:ff:7f:fb:3d:0a:e7:47:
         63:69:a1:92:b3:6e:e1:68:49:ad:9f:2a:7e:7e:32:ab:28:71:
         13:e5:42:36:d6:e8:2e:44:01:59:f8:7f:d1:15:56:71:32:36:
         41:1d:08:d8:7d:3a:bd:9b:22:9f:2a:d1:13:49:2b:f0:16:bb:
         9d:ae:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org