Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zr-P6NNQCXm_cToRdYG2beJSouk.roa
File:                     zr-P6NNQCXm_cToRdYG2beJSouk.roa (raw, json)
Hash identifier:          vNt11bN3PZOzeHYJ9ONvrhZ2PbSr1MDM9wY6TEmNSqQ=
Subject key identifier:   CE:BF:8F:E8:D3:50:09:79:BF:71:3A:11:75:81:B6:6D:E2:52:A2:E9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zr-P6NNQCXm_cToRdYG2beJSouk.roa
Signing time:             Wed 24 May 2023 16:02:18 +0000
ROA not before:           Wed 24 May 2023 16:02:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.30.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:02:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CEBF8FE8D3500979BF713A117581B66DE252A2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:65:b5:76:11:c9:11:4b:cb:35:39:56:3d:
                    48:86:97:d7:6c:e6:1b:86:df:f1:55:22:f7:18:78:
                    f2:66:a3:6e:76:80:db:9f:55:5e:c2:17:d8:38:c6:
                    8d:f6:5f:0e:e9:43:9d:93:40:e8:72:a6:2e:61:e1:
                    1f:8d:e5:91:bf:0f:8a:a5:a9:90:a7:73:6c:50:ad:
                    11:e3:d9:cf:ed:0c:7d:04:26:81:c1:36:26:03:7c:
                    18:b8:05:fa:f5:30:ce:d8:ff:46:e1:da:f6:f7:e1:
                    c9:9c:6a:e8:a5:04:8f:51:82:46:28:18:da:30:a4:
                    70:98:96:e8:41:8b:ea:71:27:d5:3c:73:e1:79:59:
                    b4:37:b5:e6:91:82:0d:f5:bb:cc:01:50:46:df:9c:
                    6c:a1:01:5f:b1:33:9e:f9:3d:b7:58:db:ff:de:2a:
                    e5:c1:eb:a6:69:98:0c:8e:da:df:6c:e2:33:3d:52:
                    2e:6b:de:c1:4b:ff:6b:ad:48:71:ff:b3:3b:74:fb:
                    74:53:c4:f3:3c:df:fa:de:6a:0f:38:2d:36:94:de:
                    80:c1:9c:a8:36:fb:ff:cc:c7:21:03:91:1b:80:ac:
                    7d:f5:f1:24:9d:75:53:43:74:5f:6b:0b:d8:6a:96:
                    1b:a0:8d:8a:06:02:ec:52:a2:14:ad:30:b8:8a:b8:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BF:8F:E8:D3:50:09:79:BF:71:3A:11:75:81:B6:6D:E2:52:A2:E9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zr-P6NNQCXm_cToRdYG2beJSouk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:42:72:6a:71:7a:79:10:63:d9:ea:80:9f:46:e7:0d:e3:
         58:25:e9:8d:1e:46:d4:10:8b:ac:2a:bd:5f:66:e8:96:43:71:
         00:61:7d:4f:8d:fd:00:a1:35:7a:4d:9b:2e:c6:51:36:0e:39:
         77:49:8a:3c:b6:07:6d:27:3e:40:67:b5:fb:d2:aa:7c:8c:53:
         0d:b8:bf:6a:78:93:0c:a5:1e:aa:8c:78:7a:53:f8:4a:de:68:
         ce:19:90:e1:7a:51:d8:e5:13:0a:ea:d2:0a:f5:d9:1e:4e:21:
         6d:00:93:f4:a1:a1:66:bb:97:f5:c8:df:11:04:5e:4b:b3:f7:
         75:4f:06:5f:27:00:c3:79:01:9e:29:23:2d:c5:f3:96:db:b4:
         57:9a:7a:ea:eb:ca:b5:24:a6:95:31:aa:a2:af:a4:bb:54:d2:
         6d:04:aa:72:ed:53:7f:20:23:fa:15:ee:3f:9f:3d:d3:d7:6e:
         5e:18:a5:bc:f3:35:5c:df:c1:ef:83:e7:0b:55:7d:c0:4a:5a:
         3f:67:ec:d0:f2:c9:91:af:0d:53:76:10:01:2e:83:ce:14:c6:
         6d:25:78:87:64:2c:b2:44:f6:06:58:a8:0c:9a:58:43:cc:9f:
         e8:7e:cc:11:6d:51:65:a6:97:9d:3a:48:93:02:9d:20:fb:cc:
         9b:7b:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org