Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yaP6snP4TFf6Thvf91bN5KNziYw.roa
File:                     yaP6snP4TFf6Thvf91bN5KNziYw.roa (raw, json)
Hash identifier:          I68v8Pln+XQ7yPf7S80t3cd2ynRAgLlhrC6F5VRZRSs=
Subject key identifier:   C9:A3:FA:B2:73:F8:4C:57:FA:4E:1B:DF:F7:56:CD:E4:A3:73:89:8C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       95
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yaP6snP4TFf6Thvf91bN5KNziYw.roa
Signing time:             Wed 29 Mar 2023 16:05:01 +0000
ROA not before:           Wed 29 Mar 2023 16:05:01 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.132.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:01 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C9A3FAB273F84C57FA4E1BDFF756CDE4A373898C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:df:af:73:4c:10:75:2f:58:7a:d5:a2:e8:
                    45:b7:b4:a3:65:a9:73:9a:69:44:77:cd:6f:5e:d7:
                    0f:5c:93:87:a2:83:71:27:21:c6:99:69:66:b6:df:
                    8c:7e:b1:96:7e:9b:56:9c:d8:ba:ec:4e:37:bb:e7:
                    49:6c:69:30:e9:dd:ab:c4:12:3c:64:2c:b1:7f:e6:
                    8f:4e:83:a0:93:27:b7:e6:ec:a8:bb:31:7c:da:3e:
                    49:00:70:13:6a:b4:13:c5:5b:a5:e4:b2:fd:b2:7c:
                    da:21:18:40:80:8c:a9:18:c3:29:57:14:ae:94:d6:
                    5b:71:ef:19:27:36:08:a6:66:c8:d8:a1:ae:39:b1:
                    44:76:0c:bd:e8:dd:b4:18:fd:b9:23:2f:84:72:d9:
                    43:a4:02:62:1e:06:79:5e:28:ff:7c:f4:95:a0:60:
                    ef:24:1a:bb:68:4c:a1:e1:9b:f0:5d:a8:f6:2f:5e:
                    71:a1:e1:48:b2:f5:e1:3e:4f:5f:5a:72:71:34:ba:
                    43:44:7b:5a:23:de:d9:4b:6c:94:cb:ca:14:5d:f9:
                    9e:5a:eb:6f:5e:b0:03:74:ad:09:9a:0a:90:ca:a7:
                    98:a1:c8:1d:c0:3a:ff:bc:07:58:33:4a:9a:3c:66:
                    ec:a2:26:9c:89:a3:bd:fc:57:36:e7:82:19:80:ba:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A3:FA:B2:73:F8:4C:57:FA:4E:1B:DF:F7:56:CD:E4:A3:73:89:8C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yaP6snP4TFf6Thvf91bN5KNziYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:25:7f:2e:c4:08:78:9e:cb:22:6c:ea:c8:f2:96:67:ee:9d:
         8c:48:d2:52:d4:2e:1b:99:c1:d5:e0:20:bb:eb:16:b3:ac:22:
         a6:ed:77:93:54:f9:e5:d4:3f:e6:a5:e4:cf:68:c6:09:c2:01:
         69:62:68:18:28:37:d8:8b:46:f0:95:2e:19:27:77:80:b5:a4:
         c6:f8:75:78:49:7d:1c:01:19:9b:ef:5c:9c:58:97:5d:ac:10:
         8b:ec:9a:5e:9a:70:2b:18:76:28:f5:92:f3:06:c9:d4:e6:55:
         be:12:61:c4:52:e4:92:6c:00:4c:b1:30:90:db:0b:c2:7f:99:
         e7:2a:f4:1b:c9:e8:a0:9b:dc:29:c6:ef:1f:c8:db:ff:12:21:
         d3:bc:b6:08:a7:65:87:79:22:e6:c6:94:5a:77:8f:a3:8d:84:
         9d:82:05:f0:5a:1d:90:20:6c:58:e4:0f:79:c9:34:0a:ec:aa:
         6e:3f:3f:c2:bf:ae:c1:9f:d3:d1:bf:1b:3c:9d:c1:9e:9a:19:
         5f:d9:69:02:d4:a0:61:1e:56:92:ae:51:29:92:ba:4d:10:66:
         88:cb:52:ee:86:04:41:47:4e:90:8e:e2:ea:3c:90:20:02:be:
         9d:b3:c4:6e:f3:34:50:26:8f:b0:e6:28:a8:23:69:40:e7:0d:
         34:90:c7:36
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1MDFaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM5QTNGQUIyNzNGODRD
NTdGQTRFMUJERkY3NTZDREU0QTM3Mzg5OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpmt+vc0wQdS9YetWi6EW3tKNlqXOaaUR3zW9e1w9ck4eig3En
IcaZaWa234x+sZZ+m1ac2LrsTje750lsaTDp3avEEjxkLLF/5o9Og6CTJ7fm7Ki7
MXzaPkkAcBNqtBPFW6Xksv2yfNohGECAjKkYwylXFK6U1ltx7xknNgimZsjYoa45
sUR2DL3o3bQY/bkjL4Ry2UOkAmIeBnleKP989JWgYO8kGrtoTKHhm/BdqPYvXnGh
4Uiy9eE+T19acnE0ukNEe1oj3tlLbJTLyhRd+Z5a629esAN0rQmaCpDKp5ihyB3A
Ov+8B1gzSpo8ZuyiJpyJo738VzbnghmAukQTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyaP6snP4TFf6Thvf91bN5KNziYwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lhUDZzblA0VEZmNlRodmY5MWJONUtOemlZdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYoQwDQYJKoZIhvcNAQELBQADggEBAEQlfy7ECHieyyJs6sjylmfunYxI
0lLULhuZwdXgILvrFrOsIqbtd5NU+eXUP+al5M9oxgnCAWliaBgoN9iLRvCVLhkn
d4C1pMb4dXhJfRwBGZvvXJxYl12sEIvsml6acCsYdij1kvMGydTmVb4SYcRS5JJs
AEyxMJDbC8J/mecq9BvJ6KCb3CnG7x/I2/8SIdO8tginZYd5IubGlFp3j6ONhJ2C
BfBaHZAgbFjkD3nJNArsqm4/P8K/rsGf09G/GzydwZ6aGV/ZaQLUoGEeVpKuUSmS
uk0QZojLUu6GBEFHTpCO4uo8kCACvp2zxG7zNFAmj7DmKKgjaUDnDTSQxzY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org