Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v8VWHVRDy9yCRuiKhTfPClEs_Mw.roa
File:                     v8VWHVRDy9yCRuiKhTfPClEs_Mw.roa (raw, json)
Hash identifier:          /c04j+5kRRqNGFbnGf/gGhZzqy5rF0ixbwSySNApdJU=
Subject key identifier:   BF:C5:56:1D:54:43:CB:DC:82:46:E8:8A:85:37:CF:0A:51:2C:FC:CC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       96
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v8VWHVRDy9yCRuiKhTfPClEs_Mw.roa
Signing time:             Wed 29 Mar 2023 16:05:01 +0000
ROA not before:           Wed 29 Mar 2023 16:05:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BFC5561D5443CBDC8246E88A8537CF0A512CFCCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:32:29:2e:c8:02:f0:7c:b4:bc:46:71:01:
                    de:fd:85:c7:23:83:88:8a:67:94:79:ba:4f:af:a7:
                    91:f6:f6:f4:49:e2:55:62:31:fd:63:51:10:1e:49:
                    af:c8:9f:bd:08:9d:5c:6e:40:7e:01:c9:db:13:3c:
                    09:d9:7f:40:99:5c:c7:c2:c2:2e:41:3d:e9:fa:d1:
                    53:97:85:26:86:6b:f9:9a:48:2f:a0:39:8c:69:ca:
                    ab:53:c4:aa:53:53:26:ce:57:3f:9c:b8:24:69:8a:
                    b5:b9:4b:eb:a8:34:0b:88:9f:e1:5e:5d:28:45:1b:
                    c8:d8:e4:e9:7e:5c:8a:76:9f:d7:57:98:d4:8b:c6:
                    e0:42:c5:0c:18:fa:d2:a5:f2:2d:11:d0:d8:45:73:
                    9a:f0:6b:19:df:ce:76:6a:3c:0b:30:d3:db:2a:ab:
                    29:ce:38:8e:47:d4:55:0e:f3:b8:d3:54:ad:3c:ca:
                    9a:d7:2c:ab:75:64:23:95:42:a6:77:16:98:70:39:
                    df:5e:8b:f8:c5:7d:e1:17:fd:e8:48:27:ef:23:58:
                    01:c8:06:1a:89:90:5c:58:45:ac:9a:46:35:3f:82:
                    65:11:67:85:e4:1a:18:c7:b2:d0:6a:25:2d:d9:e0:
                    6c:06:1d:24:16:9d:aa:c1:af:33:6d:b7:07:cd:f2:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:56:1D:54:43:CB:DC:82:46:E8:8A:85:37:CF:0A:51:2C:FC:CC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v8VWHVRDy9yCRuiKhTfPClEs_Mw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:31:19:8d:ea:67:eb:6b:ba:ac:4a:02:0d:2c:2f:a6:9e:
         5b:29:79:58:e4:81:94:05:94:3b:35:5a:4b:14:a3:0f:92:d0:
         ac:c2:bd:91:f0:a5:6e:7a:cf:ed:c5:7a:b9:3f:34:ec:e6:03:
         f3:84:12:99:4a:b8:b2:26:39:06:1c:94:7e:55:86:0c:6c:3f:
         3a:d4:38:29:e4:3b:74:2e:c4:d7:25:aa:60:5f:3f:d2:3d:cf:
         06:4b:e5:2e:b2:c7:9a:3c:0c:eb:60:35:a0:af:06:5b:9d:73:
         9f:62:a8:28:8b:77:10:8b:1b:11:96:a9:3d:db:4d:9f:22:fb:
         6b:94:b6:ed:ed:c1:81:0e:3c:8f:a6:2d:c7:c9:b8:1b:84:24:
         89:5e:98:b4:c7:99:7a:8f:c4:78:f1:51:91:dc:15:46:e5:90:
         c8:0f:15:2b:d8:9c:ce:67:48:2c:9a:66:76:c6:a0:1a:de:ff:
         01:85:9c:5c:e6:47:df:7a:e5:fa:4a:b6:9d:7b:3c:a4:d8:a1:
         a5:96:66:74:67:ea:b8:3e:17:48:9f:67:36:d5:66:f0:37:a9:
         7e:c2:ef:05:01:22:55:21:74:92:43:d9:b7:84:7e:f0:24:3a:
         77:6e:79:10:7a:8b:38:fe:4c:d8:d0:18:76:5c:67:a3:74:c5:
         16:ac:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org