Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vJqs_c2n105L5nAdLo9PRV0KtCY.roa
File:                     vJqs_c2n105L5nAdLo9PRV0KtCY.roa (raw, json)
Hash identifier:          gPxfhU8UrgN3ArIijh1QWxfYKybkkpreGiT6KzanBoc=
Subject key identifier:   BC:9A:AC:FD:CD:A7:D7:4E:4B:E6:70:1D:2E:8F:4F:45:5D:0A:B4:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03E2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vJqs_c2n105L5nAdLo9PRV0KtCY.roa
Signing time:             Tue 06 Jun 2023 16:03:42 +0000
ROA not before:           Tue 06 Jun 2023 16:03:42 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:42 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BC9AACFDCDA7D74E4BE6701D2E8F4F455D0AB426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:c5:04:ca:07:9a:81:9e:37:79:9f:76:30:
                    b0:85:e1:e1:6d:21:17:14:eb:ad:fd:d6:7b:bb:64:
                    c3:de:29:2b:5d:00:f5:7a:09:09:38:10:39:c5:81:
                    70:4b:35:0a:8c:48:b1:e4:66:57:88:7a:53:84:32:
                    41:7d:59:97:61:db:ad:9d:d3:fd:82:c8:1d:cb:86:
                    52:75:96:1b:8f:2f:b4:03:ba:32:90:4e:bb:e0:3c:
                    b8:12:d2:7d:1c:4b:e4:fd:19:e6:e5:53:b2:dd:4d:
                    21:fd:06:14:b2:3e:9d:c1:f8:11:05:b9:c7:06:91:
                    8d:ac:11:e0:e3:f4:2d:c8:6d:5a:a5:8d:dd:b2:73:
                    9d:06:cc:5f:53:1f:6f:d9:47:96:ec:f8:2e:6c:1c:
                    96:48:47:66:b6:f1:4e:cb:0c:4c:ec:3a:f8:7b:a8:
                    dc:3f:5a:31:e8:f6:be:b6:ee:32:62:92:91:14:39:
                    f5:62:c6:9d:c7:f8:a6:fc:c5:38:c6:b1:cd:5e:7c:
                    34:03:f3:ba:ac:48:53:07:76:79:7f:a2:94:b6:b6:
                    14:84:4b:04:0a:e8:e4:1e:d1:ee:c1:38:fe:1b:02:
                    33:7f:38:b0:5b:13:df:23:d4:df:91:d3:e2:38:71:
                    97:c5:a6:61:5e:80:03:ad:5e:03:9b:4a:60:20:f6:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:AC:FD:CD:A7:D7:4E:4B:E6:70:1D:2E:8F:4F:45:5D:0A:B4:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vJqs_c2n105L5nAdLo9PRV0KtCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:e2:6e:6f:3c:49:6a:c5:1b:98:07:e3:a1:df:82:84:49:
         28:03:62:72:00:41:d0:f6:0f:bc:d1:c0:1f:52:92:85:f5:4e:
         7b:ed:17:35:f0:66:4d:df:7e:ba:9d:e6:6b:3a:c6:7b:36:71:
         35:59:c0:91:f1:6e:44:fb:7a:0d:61:19:b9:13:9c:71:a9:09:
         7e:ac:ae:88:10:f1:72:d1:93:be:88:6f:b0:96:74:17:2b:4f:
         07:48:e2:c3:2d:41:d2:be:80:bc:fe:75:b5:ea:ef:8d:27:87:
         ac:3b:14:ff:1c:a0:d9:86:c3:7b:6b:bf:3b:d5:25:4e:52:1f:
         13:7a:6c:1a:b0:81:09:5e:69:4d:68:3f:a7:98:39:4b:c8:01:
         de:e1:a5:c3:0b:d9:1a:c7:77:6d:3b:48:0a:74:b2:e7:42:d1:
         17:b5:0c:bf:d4:ca:66:f7:50:09:a1:a8:21:49:db:a1:7d:4f:
         25:04:87:2a:ff:e0:2f:38:e6:8b:b7:08:b2:3b:97:2f:a4:cd:
         c5:0e:a1:f1:5d:b3:e9:ff:7c:d4:87:3d:27:35:30:6e:62:2d:
         08:6e:91:d6:3b:f4:45:39:77:2e:8f:4c:ee:a6:a2:b9:fa:ff:
         e8:24:fd:be:64:0c:73:c0:70:5d:b7:e2:79:8c:ae:a5:90:f6:
         f2:78:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org