Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/cwh34do7z4CMfjzaRPxbHQJ4rzg.roa
File:                     cwh34do7z4CMfjzaRPxbHQJ4rzg.roa (raw, json)
Hash identifier:          +CGY4FPzcVAuu+earVs029yszS8+hqNeBrIZdYMaLYs=
Subject key identifier:   73:08:77:E1:DA:3B:CF:80:8C:7E:3C:DA:44:FC:5B:1D:02:78:AF:38
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       AF
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/cwh34do7z4CMfjzaRPxbHQJ4rzg.roa
Signing time:             Sat 01 Oct 2022 01:29:17 +0000
ROA not before:           Sat 01 Oct 2022 01:29:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        202.238.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=730877E1DA3BCF808C7E3CDA44FC5B1D0278AF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:df:50:97:77:4a:1c:ce:8b:76:5e:cd:77:
                    44:33:d7:1c:ba:0f:bf:2b:89:40:6a:63:1d:54:3b:
                    de:6e:9a:75:23:4f:ed:95:c0:8d:b1:4a:bd:54:b2:
                    8d:19:4f:bb:36:a2:73:1e:69:55:2c:39:04:91:af:
                    bb:c7:c9:4f:e1:ec:d4:06:c2:40:2f:4d:48:8a:7f:
                    d2:c5:cf:cd:6f:4d:63:76:bd:0a:71:96:58:21:ae:
                    95:52:36:ad:90:d1:44:2d:2c:4f:a5:63:9a:04:55:
                    77:14:bd:aa:99:49:9c:31:b4:23:87:fa:2d:1b:24:
                    4b:f9:59:77:68:65:22:92:59:0e:c6:bf:ec:26:da:
                    11:78:ec:1c:3e:4e:1e:75:fd:41:a4:e0:9c:88:ba:
                    21:47:bd:bd:f7:99:77:0e:bd:14:39:9e:a1:2c:83:
                    b7:3c:22:c5:df:67:ab:65:bb:98:2b:8a:81:ac:54:
                    c2:a9:7d:01:18:8e:1b:3b:d3:4e:6c:5d:7d:5b:f6:
                    00:40:61:86:2c:0c:35:3e:20:6e:60:08:df:f9:ab:
                    07:b8:e4:2b:e9:92:c2:69:b2:b0:3e:9a:b5:7a:8f:
                    4a:1b:4b:77:a4:79:36:0a:b3:34:5d:5a:4d:53:d2:
                    d8:e8:ba:d5:d0:fa:2f:60:fe:ac:2e:0d:ee:2e:35:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:77:E1:DA:3B:CF:80:8C:7E:3C:DA:44:FC:5B:1D:02:78:AF:38
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/cwh34do7z4CMfjzaRPxbHQJ4rzg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:26:ef:bc:c6:f9:03:d6:0a:30:a5:e4:d5:25:bc:2f:02:
         66:ef:44:74:f5:4a:58:13:42:f1:6f:77:ec:d9:48:1e:8f:54:
         b0:39:db:47:a7:34:0b:f7:2a:1e:e4:f4:29:3e:8c:a7:d4:eb:
         c1:a5:b5:7a:93:dd:49:a2:5e:ef:03:91:31:b7:e1:16:42:2c:
         67:44:50:ba:e0:86:02:aa:8a:da:6b:c0:7d:d4:fc:c9:bc:60:
         6d:1a:ca:93:18:97:ca:c1:15:fe:0c:76:22:f1:d4:ee:4f:a4:
         4e:18:50:34:33:c5:d3:a8:d1:98:c6:cf:f0:ee:a2:6e:bd:39:
         45:de:72:27:ce:cc:ef:c1:56:c9:20:b2:b6:a0:6d:65:69:6d:
         ec:07:ba:fe:f8:30:a9:2a:fa:82:9f:a8:df:2a:14:5d:84:7d:
         b4:ea:c2:5e:38:a2:64:86:80:da:40:35:03:22:0d:87:2d:b8:
         09:2d:7b:e0:f0:01:4b:95:33:d6:a2:6c:4a:77:37:43:bd:b8:
         a6:c1:e2:92:7b:92:56:8f:1e:e5:6a:39:43:8e:f3:7d:84:92:
         24:33:25:75:cb:f6:1b:2e:dd:a5:84:50:96:f6:da:07:f7:b1:
         07:be:1c:a0:7c:66:aa:70:d2:d2:c3:fc:24:8c:36:1e:00:4c:
         9d:95:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org