Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q-RSbdN1hBu1oE6t6s1im9bagxE.roa
File:                     Q-RSbdN1hBu1oE6t6s1im9bagxE.roa (raw, json)
Hash identifier:          RBKI5CVsWt37E9++T68L4PDHR59SuTdtuW/52ADNuYY=
Subject key identifier:   43:E4:52:6D:D3:75:84:1B:B5:A0:4E:AD:EA:CD:62:9B:D6:DA:83:11
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q-RSbdN1hBu1oE6t6s1im9bagxE.roa
Signing time:             Sat 01 Oct 2022 01:29:20 +0000
ROA not before:           Sat 01 Oct 2022 01:29:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        119.10.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=43E4526DD375841BB5A04EADEACD629BD6DA8311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:ff:c4:4e:1e:7e:14:eb:e5:08:c5:97:80:
                    06:97:28:6d:a8:e5:8a:42:22:32:91:43:2b:44:43:
                    88:34:c5:22:41:91:ee:fb:01:5c:6b:2e:89:87:80:
                    de:1e:8c:53:c9:78:44:db:e9:30:0f:8d:53:9e:39:
                    97:f4:44:e7:46:e9:e3:62:9a:6c:13:82:e8:d7:3b:
                    8f:92:3c:a8:b8:93:10:84:22:6e:ef:b9:18:09:d0:
                    8d:4d:97:c7:46:4a:42:2f:f8:67:44:65:f5:4c:9a:
                    5e:c8:4b:e9:d3:56:a0:53:6d:8b:01:68:d7:fa:39:
                    5c:9b:19:54:6c:4e:c8:93:6a:fd:a8:26:18:9a:b0:
                    95:17:4d:ad:15:05:b0:a8:43:10:bd:08:c8:8a:56:
                    7a:55:02:d0:91:7d:8d:71:42:32:04:9a:da:da:aa:
                    ab:5f:0b:19:ab:df:d0:bc:eb:e1:4b:7e:8d:48:8e:
                    27:c0:c5:4f:e3:cf:b9:f0:7d:5d:1d:6b:7e:a6:b5:
                    1e:22:3c:0b:28:46:f9:2f:af:01:d6:e5:56:38:43:
                    d0:da:09:30:6f:7b:f5:a4:06:7d:99:70:5f:e0:c5:
                    01:31:9d:e6:93:fe:c4:26:83:52:c1:9e:73:ab:84:
                    69:96:1f:f9:83:8e:bc:a6:38:3a:2b:d0:c7:c6:43:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E4:52:6D:D3:75:84:1B:B5:A0:4E:AD:EA:CD:62:9B:D6:DA:83:11
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q-RSbdN1hBu1oE6t6s1im9bagxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:2f:1b:b0:15:eb:6d:41:d9:5b:90:6a:9a:e1:c0:83:6b:19:
         27:95:72:88:e1:85:23:a6:c2:f1:e0:82:62:7c:9a:7d:af:05:
         08:68:1b:ca:dd:9d:99:b7:b9:4a:9c:01:cf:49:5a:9d:5d:39:
         35:b4:e7:44:fb:12:78:1a:16:40:be:09:44:0d:8f:a3:bc:84:
         c5:9b:5d:4f:ef:1a:bb:54:9d:71:b4:5e:1b:f7:92:b7:e6:b6:
         ab:5b:29:43:10:d6:c9:31:d0:16:31:d0:99:5b:23:bf:51:af:
         ff:7d:84:a7:7e:8e:d9:a1:3c:b7:12:ef:38:88:be:b0:c9:4c:
         e6:b9:8f:0c:f4:75:2b:0a:c1:39:06:71:f8:25:ae:c3:27:e7:
         f8:37:40:92:50:5f:17:5e:be:76:e2:11:cc:d3:8d:8e:de:91:
         dc:3b:e2:68:48:6e:38:a2:a2:ca:a9:d3:c6:1b:29:8e:c6:b1:
         26:00:24:21:04:76:57:a7:b6:a5:8c:35:51:60:0d:b2:f3:6e:
         59:10:b7:9c:c7:0e:7a:01:a4:e0:11:14:79:ee:a7:69:02:28:
         33:cb:f9:b9:2e:91:62:13:b8:7f:2b:f7:b9:fa:16:da:68:fb:
         27:e7:62:8d:c7:0e:17:b7:b8:1e:08:56:3a:c5:22:44:6c:4d:
         9f:d7:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org