Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/5NEmSckctFGxRAsSOp0KIJOGgq4.roa
File:                     5NEmSckctFGxRAsSOp0KIJOGgq4.roa (raw, json)
Hash identifier:          kwe4Uzi8bQhy7Dn8bH3bsPJHGq7tAEzDJ158mOrs1io=
Subject key identifier:   E4:D1:26:49:C9:1C:B4:51:B1:44:0B:12:3A:9D:0A:20:93:86:82:AE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       CA
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/5NEmSckctFGxRAsSOp0KIJOGgq4.roa
Signing time:             Sat 01 Oct 2022 01:29:26 +0000
ROA not before:           Sat 01 Oct 2022 01:29:26 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        202.232.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:26 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=E4D12649C91CB451B1440B123A9D0A20938682AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:55:fe:b3:d2:31:4a:e0:07:4b:64:98:0d:
                    d0:72:72:3e:f7:61:23:0f:94:8b:90:64:22:c0:b7:
                    fc:8a:c5:06:16:de:16:3a:f3:a7:61:13:33:75:30:
                    32:7d:45:2d:c8:b2:3f:c3:fc:e0:0d:80:34:36:3c:
                    c9:29:33:90:b4:15:b2:16:84:44:68:a1:9d:25:30:
                    47:c6:81:bc:ca:90:37:54:e6:a0:88:8b:b7:c0:d0:
                    75:0f:7f:8e:07:2e:a3:6a:f4:cb:79:8e:90:40:0d:
                    b0:9b:fd:87:5b:72:b4:f4:9d:33:e9:9e:e9:16:75:
                    2e:16:47:07:a0:b7:b0:72:04:a5:6e:84:a6:01:22:
                    ee:3b:76:18:81:8c:79:e7:8b:51:e7:f3:94:b3:b4:
                    ba:37:a5:06:60:b7:74:e7:07:ee:64:8f:ad:fa:64:
                    ae:6e:5f:1d:f3:ef:98:8e:a2:7a:f9:68:1a:c2:64:
                    7d:66:04:84:b1:7f:b1:d1:88:53:54:00:f7:0e:ed:
                    bf:3c:13:2d:3b:95:36:fa:59:5a:01:30:95:7d:e8:
                    d4:57:2a:d9:30:f0:8a:13:6e:e8:4f:48:e2:94:e3:
                    65:f1:94:b3:e3:57:47:89:c1:d1:16:26:01:1e:f6:
                    15:97:fd:7e:49:0c:27:88:4f:69:47:b9:a0:b4:0f:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D1:26:49:C9:1C:B4:51:B1:44:0B:12:3A:9D:0A:20:93:86:82:AE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/5NEmSckctFGxRAsSOp0KIJOGgq4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:50:b0:ea:ef:d9:5e:42:e0:c6:c3:f9:ce:06:1f:59:40:45:
         48:f6:af:97:a9:05:8f:16:f8:18:27:0e:4b:d9:05:fc:99:da:
         32:76:31:dc:b2:b0:3e:88:b6:86:3d:5b:33:c6:37:d2:d5:ca:
         50:3e:52:c7:1a:b7:1e:d6:d2:d2:80:6f:79:fb:0c:8d:ab:1b:
         95:8f:a6:9e:09:15:3f:a6:78:e2:85:24:fa:34:db:db:77:93:
         0c:2f:2c:d3:f5:2b:7b:e0:6e:9a:74:21:d9:6b:a1:65:c1:cc:
         05:f7:66:51:1b:cb:6b:88:02:4e:82:e2:f0:b1:96:01:2c:60:
         08:97:aa:ae:1c:86:14:c4:de:35:a4:a5:98:cd:3b:1a:67:24:
         ab:79:06:2d:57:10:ee:47:f0:cc:f9:6b:ef:5b:62:b2:e6:8e:
         e9:45:43:35:67:36:dd:63:c1:05:7b:33:c5:b2:c3:8c:c1:30:
         6d:d9:29:5c:23:03:a4:33:80:73:44:46:e6:2c:37:ea:e5:cf:
         c2:4f:da:a3:ab:ac:2c:11:d5:21:d7:6c:54:31:06:ec:f3:3a:
         63:9b:93:3e:7b:93:f7:ce:fa:1a:68:cf:1b:c8:b8:b7:eb:94:
         de:62:5d:84:80:c4:87:b2:2a:3c:f1:d1:2b:30:2b:cb:f6:e4:
         e0:7a:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org