Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zIkVg2BiCmjlf_vXQH4M0LG46P8.roa
File:                     zIkVg2BiCmjlf_vXQH4M0LG46P8.roa (raw, json)
Hash identifier:          /46/5fD6+WaFQIjIYxofHzrDybqt4DuMFRIZXpWiSGE=
Subject key identifier:   CC:89:15:83:60:62:0A:68:E5:7F:FB:D7:40:7E:0C:D0:B1:B8:E8:FF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       5D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zIkVg2BiCmjlf_vXQH4M0LG46P8.roa
Signing time:             Mon 27 Mar 2023 16:04:31 +0000
ROA not before:           Mon 27 Mar 2023 16:04:31 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:31 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CC89158360620A68E57FFBD7407E0CD0B1B8E8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:bb:4e:26:7d:e2:57:8b:d4:70:e1:3d:6f:
                    18:c8:86:38:c1:49:8f:6a:e1:a6:f1:91:6f:69:00:
                    5a:e1:5a:59:4f:77:6e:2a:87:9c:d0:82:3e:7a:6c:
                    bd:6b:f7:f3:0d:c1:11:94:80:94:6e:88:18:b5:d3:
                    0a:e7:e7:89:95:dc:c3:63:30:6b:5c:e0:f1:46:71:
                    ef:9e:06:dc:57:fa:ee:51:ac:18:a4:c6:05:5c:07:
                    cb:a9:69:c0:33:5c:cd:45:b3:53:a8:82:ca:16:8a:
                    4d:e1:90:94:49:68:2d:be:03:81:dd:a6:e4:dd:d0:
                    9b:32:bf:d9:27:be:78:7a:ed:e0:8f:e4:0a:45:4d:
                    07:99:44:9f:8b:25:ba:13:5e:99:5f:ed:d5:bb:10:
                    25:dd:4b:72:4a:b4:cc:a0:db:24:64:0a:cf:f3:38:
                    91:0b:7a:83:15:54:d5:b4:59:8b:07:e6:4a:ab:cc:
                    23:05:72:91:02:a4:00:9c:70:d7:cc:ed:77:38:2c:
                    d7:7c:99:0d:0c:3f:fd:2f:6e:a0:dc:08:df:6d:51:
                    7a:9b:4f:17:71:11:41:65:75:45:f3:4c:75:f2:c1:
                    e3:01:53:03:d3:5b:cc:20:43:e0:3c:e3:3a:bc:35:
                    3e:d0:0b:4c:42:60:ae:e6:ca:c7:f1:42:6a:42:78:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:15:83:60:62:0A:68:E5:7F:FB:D7:40:7E:0C:D0:B1:B8:E8:FF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zIkVg2BiCmjlf_vXQH4M0LG46P8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:77:e6:f7:07:39:1d:2e:0f:c2:43:71:6c:09:a1:b2:b6:
         46:38:a3:0a:80:89:43:69:80:e8:3b:3e:4f:5c:00:ed:1c:dc:
         fb:69:99:51:ae:b3:4b:f7:8b:96:83:08:d8:f1:83:bb:c0:74:
         81:56:f5:d2:c6:53:f4:64:39:0a:25:10:8a:37:0e:b3:d5:7e:
         05:5c:8f:81:32:ed:4f:19:6f:ef:5c:32:c8:db:b2:ce:cf:e3:
         91:a7:30:24:eb:95:5d:0a:2a:6a:31:87:a3:c0:08:12:1d:80:
         45:79:13:29:bd:5d:58:42:03:0f:fa:b6:b3:e4:31:80:00:b2:
         02:be:59:4b:00:05:0c:75:95:ce:c7:7b:f4:f1:bf:d5:3b:db:
         e9:c4:f9:58:12:58:b3:45:a3:8f:2a:bd:93:ff:a3:39:ba:73:
         27:ed:2e:f3:31:82:2c:3c:1f:a9:0c:97:c0:d4:53:1d:4d:75:
         f0:92:65:87:1d:ac:18:d8:e6:cb:68:d2:31:91:0b:3e:72:92:
         ec:7b:ba:4b:3f:13:c6:a4:36:cc:9f:a5:49:2d:00:61:da:ad:
         ef:e7:24:01:75:74:2c:f7:cc:3f:49:0e:d4:10:ce:71:1e:d6:
         a8:73:e7:2a:d8:a6:ec:ca:dc:c0:dc:d2:c9:a4:99:80:89:d6:
         87:9b:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org