Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wC9M70vLicFONbwREN1m-Y1P1YQ.roa
File:                     wC9M70vLicFONbwREN1m-Y1P1YQ.roa (raw, json)
Hash identifier:          CAcAPvdcqLwLQmPIuYcbaGRbXJdH5Fpo/khAbPnfIZc=
Subject key identifier:   C0:2F:4C:EF:4B:CB:89:C1:4E:35:BC:11:10:DD:66:F9:8D:4F:D5:84
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       BB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wC9M70vLicFONbwREN1m-Y1P1YQ.roa
Signing time:             Wed 29 Mar 2023 16:05:56 +0000
ROA not before:           Wed 29 Mar 2023 16:05:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C02F4CEF4BCB89C14E35BC1110DD66F98D4FD584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:2b:97:51:58:46:4e:9b:b1:76:60:64:c6:
                    18:b9:6b:b5:73:70:b6:b2:6e:27:ef:66:df:55:fc:
                    41:ef:f8:95:25:8c:a4:6f:c1:e3:04:24:42:ab:fb:
                    62:70:6f:29:00:9b:a7:be:e2:5c:47:d7:19:61:57:
                    42:36:fc:95:ff:37:0e:c2:78:8f:a9:13:e1:3d:59:
                    f8:bb:ac:6b:2c:84:71:3d:3b:fc:14:a1:2f:fe:ca:
                    fb:be:3b:97:c7:c7:d0:ff:0d:60:ac:1b:0c:f5:1d:
                    2a:ea:5a:87:f5:4d:71:67:8c:ac:a1:72:01:42:93:
                    c2:e4:29:d2:ef:06:24:01:98:d8:f4:a8:3a:d8:2f:
                    49:52:fd:62:0a:37:c4:f1:78:a9:c3:36:e4:4b:33:
                    cc:a6:aa:be:c6:e0:e8:08:6a:bf:db:d5:17:55:8a:
                    13:81:5a:fc:dd:58:d6:82:51:36:99:f7:c4:6d:fe:
                    a6:b7:bd:d4:aa:99:db:01:e4:ff:3d:99:d0:e8:8e:
                    af:37:df:52:99:94:83:e0:69:21:e2:33:0a:0a:21:
                    f3:19:ec:a9:44:85:1f:9c:3c:90:db:a9:83:b0:fe:
                    36:7a:8a:cb:42:76:ce:89:70:30:86:01:48:28:0c:
                    0f:5b:ee:c4:d4:f7:6d:6e:85:09:70:50:48:9f:88:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2F:4C:EF:4B:CB:89:C1:4E:35:BC:11:10:DD:66:F9:8D:4F:D5:84
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wC9M70vLicFONbwREN1m-Y1P1YQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:9a:87:52:59:e2:50:47:62:c5:ed:28:32:47:79:c9:d5:
         47:9d:95:1c:2e:b7:0e:18:49:c8:05:28:ac:d4:06:a4:89:ab:
         ae:2e:c2:9e:15:ff:74:56:c1:9e:e3:70:a5:e7:23:4d:78:a1:
         f5:77:ce:09:96:20:c2:2a:9e:00:1a:fa:c0:32:58:85:72:9f:
         2f:c2:29:6f:cc:23:98:10:66:03:77:92:42:34:13:42:c1:06:
         14:2f:69:d5:fc:d7:14:0e:9f:3e:84:ea:70:c5:7f:96:c3:83:
         0f:d6:7c:7f:2d:08:ee:48:09:a6:a3:f8:32:82:7b:53:f3:a3:
         fb:74:74:44:b2:18:dc:6c:51:26:32:13:2d:2c:9c:38:e8:11:
         32:21:ce:09:b5:62:c1:52:01:4f:2a:5a:c2:8f:52:43:b5:fe:
         67:51:be:5c:fb:65:45:a0:b6:df:e9:b0:7d:61:e2:4e:c5:74:
         e8:a6:85:1c:62:69:99:fd:3a:6e:d6:f0:1c:9d:f8:33:de:ae:
         cb:61:24:91:8b:77:c4:a0:e7:32:bc:28:19:d5:e3:05:5a:06:
         b6:29:97:4f:54:c0:02:07:9b:e6:c9:e9:a3:32:b7:79:c9:5d:
         c4:2d:1b:e0:27:e2:02:21:08:e0:94:22:c6:57:89:f4:43:be:
         0e:ff:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org