Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v0YBZcf5GDKh2FPKplcR5LoTACI.roa
File:                     v0YBZcf5GDKh2FPKplcR5LoTACI.roa (raw, json)
Hash identifier:          qXcFF8B5Kxu8xHmz/bLQrm/Cdd6cdZncB+Y5pqbqVTg=
Subject key identifier:   BF:46:01:65:C7:F9:18:32:A1:D8:53:CA:A6:57:11:E4:BA:13:00:22
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0377
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v0YBZcf5GDKh2FPKplcR5LoTACI.roa
Signing time:             Thu 01 Jun 2023 17:57:32 +0000
ROA not before:           Thu 01 Jun 2023 17:57:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.220.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BF460165C7F91832A1D853CAA65711E4BA130022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:7a:37:70:d9:66:62:05:88:d7:45:1f:b1:
                    25:51:85:eb:31:73:8a:07:6e:05:84:42:01:f2:83:
                    5e:36:98:86:ed:1a:f9:4b:86:90:06:ad:69:f0:c3:
                    bc:69:28:df:a4:58:67:32:82:d5:9f:4e:92:3c:4a:
                    c4:08:f9:c5:38:52:75:9d:bc:2e:78:0b:a2:89:61:
                    9a:ca:a3:a4:6c:39:41:af:9d:a1:d0:de:15:53:2c:
                    ce:2f:06:34:fb:a0:cc:d7:36:60:cc:68:fb:d3:44:
                    09:55:8b:55:c3:aa:5f:ef:af:db:cb:ae:39:c9:f8:
                    58:01:d4:3f:4f:32:e6:b4:81:e5:03:ec:16:a8:88:
                    80:bf:a6:6c:15:48:aa:45:c4:42:bc:05:79:74:e5:
                    7a:76:85:58:71:b4:67:4a:ed:42:e7:c4:e7:d9:3c:
                    95:de:60:b3:08:31:01:80:ba:0a:1c:25:dc:d7:92:
                    32:97:a9:51:7b:23:07:70:d5:b7:3a:b9:dd:57:fc:
                    34:45:9d:b0:76:43:03:a8:d6:47:44:29:94:74:43:
                    ca:b4:98:e6:2a:96:01:f1:58:17:9b:25:89:52:fc:
                    82:69:f6:09:e2:8d:c5:7f:6a:b2:f5:a9:bd:45:ad:
                    97:e4:88:1b:e2:e8:36:c3:02:21:e7:9e:70:85:f4:
                    fa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:46:01:65:C7:F9:18:32:A1:D8:53:CA:A6:57:11:E4:BA:13:00:22
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v0YBZcf5GDKh2FPKplcR5LoTACI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:67:00:d6:fd:da:61:e6:8f:d0:45:74:d4:53:5e:5f:2d:eb:
         e1:79:b3:cf:0f:9e:e3:4e:73:80:4f:4d:eb:2c:b5:3d:39:0d:
         02:26:5b:5e:10:22:09:76:52:d4:b2:7a:67:04:31:e2:52:3d:
         d9:cb:93:0b:2a:1b:24:db:ef:99:1e:82:8a:f5:39:57:0a:69:
         c1:a4:2f:82:13:8f:6c:33:3f:81:1d:05:a9:0c:6e:60:54:8a:
         9b:ef:8e:3b:d9:e8:d1:77:3d:05:c4:13:14:a2:e7:b9:10:02:
         e8:95:54:39:b4:63:87:43:34:ff:3e:24:58:31:46:3e:5e:39:
         1e:ac:aa:7a:fe:58:da:56:27:f6:f8:e5:db:4a:30:16:e1:84:
         d5:49:2d:65:b8:17:49:12:c3:50:db:09:5f:18:0f:cf:21:6a:
         2e:0a:e3:53:40:fa:57:93:9b:ce:a2:2c:a4:4b:0c:e3:81:61:
         3c:f1:d1:fc:4c:b6:20:5f:cd:59:02:cf:82:3d:89:1e:e9:bf:
         58:ae:ed:de:61:52:33:43:ba:2e:c8:1c:47:b3:80:73:23:6c:
         f4:83:58:6f:6b:8a:7c:ff:f8:ee:2c:f2:9c:c7:9e:fb:b8:5b:
         6c:ff:d0:da:6a:88:d9:bb:bb:45:d0:40:02:c9:00:90:72:da:
         88:17:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org