Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uWGEkn2zvdZv6BuVHVGRHmyngyM.roa
File:                     uWGEkn2zvdZv6BuVHVGRHmyngyM.roa (raw, json)
Hash identifier:          PJkdOEawY2oKCbb69i6YnKgteR7mHQRpixo5QT3XxjM=
Subject key identifier:   B9:61:84:92:7D:B3:BD:D6:6F:E8:1B:95:1D:51:91:1E:6C:A7:83:23
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       023F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uWGEkn2zvdZv6BuVHVGRHmyngyM.roa
Signing time:             Tue 30 May 2023 16:32:23 +0000
ROA not before:           Tue 30 May 2023 16:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B96184927DB3BDD66FE81B951D51911E6CA78323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:4e:59:bc:c3:46:a9:16:b6:2b:32:4f:26:
                    b1:47:77:45:24:55:67:98:8e:56:b8:a7:17:15:d1:
                    f0:60:f3:1a:7d:73:ee:37:f4:8a:d1:48:11:8a:1d:
                    3e:21:70:b0:7a:27:4e:56:b5:b2:63:93:bf:ca:4c:
                    26:f6:68:c4:bf:e6:db:76:88:1a:e9:a7:70:6d:a9:
                    4b:87:5d:02:40:e2:09:7a:0b:69:6a:f5:fa:09:ae:
                    db:ab:26:b4:99:d1:b8:3f:27:0f:24:5c:2a:1c:ba:
                    e6:32:40:1a:f5:c7:12:6d:6f:24:9f:9f:cf:7d:36:
                    99:72:7e:02:2e:e8:d0:2c:71:b5:80:e3:7b:c4:3d:
                    f7:76:eb:2f:3d:d2:78:ae:19:4e:b9:24:0e:c3:2e:
                    91:fa:89:04:2c:25:14:eb:8b:3e:0d:b6:6d:8b:96:
                    d4:02:c0:51:d6:30:9c:e8:67:a7:5b:a9:fe:e3:45:
                    0d:d9:fc:fb:b7:2c:c4:bd:68:f7:f7:81:e1:78:39:
                    cc:ed:ad:b1:f9:e2:57:61:0a:92:0b:79:6c:45:fb:
                    ee:54:17:54:8e:22:51:24:a1:ba:c8:21:d6:b3:2e:
                    df:90:49:20:44:83:20:2d:eb:0f:53:06:0d:13:df:
                    13:2d:bd:4a:38:99:21:b6:41:53:d8:7b:5e:ab:a8:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:61:84:92:7D:B3:BD:D6:6F:E8:1B:95:1D:51:91:1E:6C:A7:83:23
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uWGEkn2zvdZv6BuVHVGRHmyngyM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d7:25:82:fb:b9:7e:f5:5b:2f:18:58:b2:ea:cf:a7:b1:c4:e8:
         23:10:78:7f:43:26:e7:74:a4:ba:94:09:ad:11:fb:95:0a:53:
         c1:ab:84:a0:86:86:51:bd:9e:9d:08:cb:25:ab:87:32:1b:71:
         fb:a5:c9:fa:d8:e9:a9:cc:9d:08:38:b7:cc:a7:11:0b:a4:8d:
         1b:14:9e:6f:62:48:71:5d:93:df:6b:00:de:a9:89:a5:0b:e1:
         b4:3a:ba:fa:88:42:69:7e:21:fb:87:16:c0:50:61:2f:13:b7:
         c1:c3:06:a4:ad:64:28:b2:ea:08:27:3d:52:e2:c2:3e:0d:97:
         f4:54:84:f5:83:48:de:5b:78:68:12:11:bd:43:6a:9e:93:82:
         67:57:32:a9:4e:a6:80:5f:d8:05:bf:bd:82:d3:5e:46:b1:80:
         40:7c:19:36:ab:fa:88:48:ae:b0:3e:ec:97:59:ba:d5:cf:90:
         bb:a8:46:35:d0:e7:40:31:9c:30:04:3d:e4:08:33:a8:54:60:
         bc:07:f7:fc:ad:43:5e:88:2d:c5:ea:a7:1f:90:a1:62:d4:a5:
         d0:0e:47:25:23:f7:5e:66:cf:2d:3a:88:8c:ba:82:1b:65:42:
         ba:67:25:87:f1:40:f0:43:4b:9a:dc:06:32:cd:0b:f2:0a:0d:
         8f:60:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org