Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yUpvzQr8v4CAPLGfRgq9Vo8rhaU.roa
File:                     yUpvzQr8v4CAPLGfRgq9Vo8rhaU.roa (raw, json)
Hash identifier:          qvcIfB7cYTni8CLv72VrbZ3NClUP7eAg5n+dGDxjMac=
Subject key identifier:   C9:4A:6F:CD:0A:FC:BF:80:80:3C:B1:9F:46:0A:BD:56:8F:2B:85:A5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yUpvzQr8v4CAPLGfRgq9Vo8rhaU.roa
Signing time:             Wed 24 May 2023 16:40:31 +0000
ROA not before:           Wed 24 May 2023 16:40:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.238.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C94A6FCD0AFCBF80803CB19F460ABD568F2B85A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:dc:59:87:25:b7:54:e4:0b:53:89:9c:24:
                    77:79:51:87:8c:e9:cc:da:52:64:2c:1c:ad:39:31:
                    9d:74:ef:f6:df:1f:21:f3:5e:db:3b:ef:76:f1:45:
                    44:2f:be:3d:df:fc:08:bc:bc:74:ca:c1:85:a6:d8:
                    f0:1b:d0:f0:70:cb:5f:a7:8f:d0:79:75:d2:60:ec:
                    e4:ba:42:ac:93:a9:ce:81:17:6d:63:6f:3b:00:7d:
                    61:48:49:57:5a:fc:47:48:53:dc:6e:42:5a:f4:19:
                    69:fe:66:9d:1d:e6:74:70:b3:e5:65:a1:2b:39:7b:
                    9c:de:93:ee:9b:75:dd:dc:71:41:ea:1e:79:57:d5:
                    0f:b3:62:c2:04:4a:92:66:4f:2f:4d:bc:83:73:ec:
                    48:df:a8:0a:91:2c:15:82:d2:47:74:19:c1:79:8c:
                    2e:a9:51:88:08:d7:a2:71:f4:47:b5:91:2f:86:d8:
                    44:36:e2:b9:9a:02:43:e1:3b:9a:8c:f5:a9:f0:d7:
                    03:31:5f:d8:dc:a7:db:c0:19:3a:4c:3f:23:d9:fa:
                    a2:4f:9e:32:98:48:24:26:1e:19:7a:86:a2:89:3f:
                    19:93:89:1a:d4:73:aa:83:6e:65:ef:e7:9f:c0:41:
                    bd:cd:10:94:02:b5:89:b9:fc:a0:4c:bc:d6:eb:6e:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4A:6F:CD:0A:FC:BF:80:80:3C:B1:9F:46:0A:BD:56:8F:2B:85:A5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yUpvzQr8v4CAPLGfRgq9Vo8rhaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:c9:24:a3:3e:7b:7b:e2:57:6c:0f:df:6f:c7:b0:4f:6b:
         8b:6e:f5:c3:2c:2f:81:0e:79:fb:c5:65:69:db:16:f4:ef:0e:
         c6:3b:c2:ca:22:40:94:9c:90:52:1a:71:5e:d2:dc:6a:a8:b0:
         47:1e:71:86:59:d3:12:60:ba:ac:e7:81:55:7a:4b:12:b3:73:
         59:80:e6:b0:48:7f:ee:b8:19:b7:4f:8a:31:6d:a6:de:c3:5e:
         17:22:c4:11:78:d9:0a:49:54:1f:8c:53:a4:64:a6:73:01:ef:
         56:71:51:d3:3e:ca:2a:d8:8d:20:dd:c3:e1:b0:70:48:b2:2e:
         c6:5a:8e:40:c4:f4:68:0f:21:ec:26:1b:68:17:38:04:c9:33:
         62:d5:4e:ca:af:e8:70:2f:0d:42:02:47:c6:9a:44:51:15:0e:
         5d:b6:ab:22:15:63:70:30:69:d1:64:eb:f7:be:0c:69:46:5f:
         74:0c:d4:a6:2d:2e:a7:bb:31:aa:8d:c1:f1:01:e2:e0:43:73:
         40:35:42:be:bc:ef:f7:19:71:47:c2:fd:a9:28:a6:41:7b:06:
         ea:a2:00:82:04:dd:3f:e8:97:b5:1b:19:1d:2f:cc:99:fe:b8:
         91:53:1a:06:08:d8:8f:9f:01:a4:92:d8:56:27:b0:5a:23:b3:
         d2:cb:6c:88
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjQwMzFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM5NEE2RkNEMEFGQ0JG
ODA4MDNDQjE5RjQ2MEFCRDU2OEYyQjg1QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLwNxZhyW3VOQLU4mcJHd5UYeM6czaUmQsHK05MZ107/bfHyHz
Xts773bxRUQvvj3f/Ai8vHTKwYWm2PAb0PBwy1+nj9B5ddJg7OS6QqyTqc6BF21j
bzsAfWFISVda/EdIU9xuQlr0GWn+Zp0d5nRws+VloSs5e5zek+6bdd3ccUHqHnlX
1Q+zYsIESpJmTy9NvINz7EjfqAqRLBWC0kd0GcF5jC6pUYgI16Jx9Ee1kS+G2EQ2
4rmaAkPhO5qM9anw1wMxX9jcp9vAGTpMPyPZ+qJPnjKYSCQmHhl6hqKJPxmTiRrU
c6qDbmXv55/AQb3NEJQCtYm5/KBMvNbrbo8VAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyUpvzQr8v4CAPLGfRgq9Vo8rhaUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lVcHZ6UXI4djRDQVBMR2ZSZ3E5Vm84cmhhVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBS+4wDQYJKoZIhvcNAQELBQADggEBAJ+SySSjPnt74ldsD99vx7BPa4tu
9cMsL4EOefvFZWnbFvTvDsY7wsoiQJSckFIacV7S3GqosEcecYZZ0xJguqzngVV6
SxKzc1mA5rBIf+64GbdPijFtpt7DXhcixBF42QpJVB+MU6RkpnMB71ZxUdM+yirY
jSDdw+GwcEiyLsZajkDE9GgPIewmG2gXOATJM2LVTsqv6HAvDUICR8aaRFEVDl22
qyIVY3AwadFk6/e+DGlGX3QM1KYtLqe7MaqNwfEB4uBDc0A1Qr687/cZcUfC/ako
pkF7BuqiAIIE3T/ol7UbGR0vzJn+uJFTGgYI2I+fAaSS2FYnsFojs9LLbIg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org