Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tDR2jpQ2bu9nrYISCFzBKz9B6rA.roa
File:                     tDR2jpQ2bu9nrYISCFzBKz9B6rA.roa (raw, json)
Hash identifier:          EFeXAU+GJ9RTtA+ne/bj+EHuUqq2JRqxK4fEHuoarKE=
Subject key identifier:   B4:34:76:8E:94:36:6E:EF:67:AD:82:12:08:5C:C1:2B:3F:41:EA:B0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tDR2jpQ2bu9nrYISCFzBKz9B6rA.roa
Signing time:             Tue 30 May 2023 17:18:23 +0000
ROA not before:           Tue 30 May 2023 17:18:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.88.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:18:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B434768E94366EEF67AD8212085CC12B3F41EAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:b5:4c:4e:d0:03:6b:6a:64:38:d6:bf:33:
                    be:98:7e:b5:98:66:87:de:ed:95:3b:c9:fb:74:ec:
                    1c:75:01:db:d6:89:96:46:f9:48:8b:71:78:dc:e5:
                    a7:7c:cf:08:6c:ff:86:26:a1:81:5f:a5:44:0b:bc:
                    e2:61:ab:34:d2:9a:4e:31:e1:ef:27:ec:c0:94:f4:
                    55:5a:6b:4b:0c:7e:37:89:55:75:44:3a:70:c1:c3:
                    bc:1d:67:9d:13:22:29:a1:32:0e:e5:ec:fe:8f:b9:
                    55:71:dc:ee:01:18:06:41:19:2a:e2:5e:f1:77:11:
                    83:30:d0:37:f9:e9:ad:77:45:f2:5c:5c:58:09:33:
                    98:bd:20:04:5b:6f:53:05:79:51:77:d2:fa:f9:fc:
                    bb:77:13:4a:03:07:99:9a:bf:a0:5a:8b:8d:41:1c:
                    28:71:cf:ce:a5:b5:7b:06:61:6c:66:bc:bf:35:00:
                    52:db:97:82:06:30:f2:f7:28:27:e1:7e:0f:bf:c7:
                    84:c6:92:74:b1:a8:86:6d:37:e3:f6:48:ea:e4:0c:
                    44:9a:a6:b2:9f:9c:a0:20:11:4b:4d:06:5c:a5:a4:
                    4f:08:10:8f:42:b5:bf:56:03:dc:b3:66:c6:88:c8:
                    30:47:73:2c:ad:f3:fc:64:be:f8:5f:e3:d6:fb:34:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:34:76:8E:94:36:6E:EF:67:AD:82:12:08:5C:C1:2B:3F:41:EA:B0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tDR2jpQ2bu9nrYISCFzBKz9B6rA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:70:dd:80:11:7f:ec:43:ae:73:22:46:9b:c5:e6:7b:77:3c:
         ac:55:e3:07:e9:83:26:b7:aa:08:9b:7b:16:ae:df:20:2a:78:
         55:c1:41:e7:5b:1e:54:54:89:99:aa:dd:de:9a:41:5e:67:28:
         36:67:0b:72:74:91:1c:d5:6d:ea:38:21:53:e4:d6:01:82:b8:
         92:02:f0:82:77:e4:95:38:c1:a0:1d:10:39:6b:52:db:a1:90:
         b8:b5:31:99:aa:a8:2a:72:39:2d:f2:61:e6:16:d2:08:8d:c9:
         eb:93:aa:e9:6d:3a:d0:98:53:8c:12:24:03:e6:90:ab:5c:0b:
         ab:c5:41:12:b9:1e:3e:cd:6a:64:07:20:36:eb:b6:a8:16:e8:
         c8:db:b8:a9:8e:31:e2:71:0f:d9:69:75:d4:4a:90:41:a3:8a:
         a5:d8:2e:24:59:26:5b:62:90:09:f9:39:b6:ac:6b:6e:9a:62:
         11:d1:da:26:a6:1b:19:c8:d1:38:0f:5a:44:05:e6:aa:27:59:
         f4:b5:c2:b0:d5:4d:5e:38:b6:c6:c3:12:6a:08:a1:7d:85:56:
         56:45:82:dc:f2:31:9a:6c:34:77:f9:1e:c5:74:da:f6:80:2e:
         fa:e6:e8:55:32:bc:15:45:fc:5d:e2:0b:4c:63:53:ef:ec:8a:
         37:e7:98:13
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NzE4MjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI0MzQ3NjhFOTQzNjZF
RUY2N0FEODIxMjA4NUNDMTJCM0Y0MUVBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJabVMTtADa2pkONa/M76YfrWYZofe7ZU7yft07Bx1AdvWiZZG
+UiLcXjc5ad8zwhs/4YmoYFfpUQLvOJhqzTSmk4x4e8n7MCU9FVaa0sMfjeJVXVE
OnDBw7wdZ50TIimhMg7l7P6PuVVx3O4BGAZBGSriXvF3EYMw0Df56a13RfJcXFgJ
M5i9IARbb1MFeVF30vr5/Lt3E0oDB5mav6Bai41BHChxz86ltXsGYWxmvL81AFLb
l4IGMPL3KCfhfg+/x4TGknSxqIZtN+P2SOrkDESaprKfnKAgEUtNBlylpE8IEI9C
tb9WA9yzZsaIyDBHcyyt8/xkvvhf49b7NBlBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUtDR2jpQ2bu9nrYISCFzBKz9B6rAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3REUjJqcFEyYnU5bnJZSVNDRnpCS3o5QjZyQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaVgwDQYJKoZIhvcNAQELBQADggEBAMNw3YARf+xDrnMiRpvF5nt3PKxV
4wfpgya3qgibexau3yAqeFXBQedbHlRUiZmq3d6aQV5nKDZnC3J0kRzVbeo4IVPk
1gGCuJIC8IJ35JU4waAdEDlrUtuhkLi1MZmqqCpyOS3yYeYW0giNyeuTqultOtCY
U4wSJAPmkKtcC6vFQRK5Hj7NamQHIDbrtqgW6MjbuKmOMeJxD9lpddRKkEGjiqXY
LiRZJltikAn5Obasa26aYhHR2iamGxnI0TgPWkQF5qonWfS1wrDVTV44tsbDEmoI
oX2FVlZFgtzyMZpsNHf5HsV02vaALvrm6FUyvBVF/F3iC0xjU+/sijfnmBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org