Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/iqwyMIedxU30e55SamCBANW3jEo.roa
File:                     iqwyMIedxU30e55SamCBANW3jEo.roa (raw, json)
Hash identifier:          b3HeFETewePXk1vNKWEbFonILX0JtMdNkWKcjY2d0Rc=
Subject key identifier:   8A:AC:32:30:87:9D:C5:4D:F4:7B:9E:52:6A:60:81:00:D5:B7:8C:4A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       D9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iqwyMIedxU30e55SamCBANW3jEo.roa
Signing time:             Tue 01 Nov 2022 07:30:22 +0000
ROA not before:           Tue 01 Nov 2022 07:30:22 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2497
IP address blocks:        133.238.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 07:30:22 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8AAC3230879DC54DF47B9E526A608100D5B78C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:00:4a:79:37:b7:43:56:47:00:af:8b:f8:
                    9e:3d:29:f6:42:da:07:94:c6:2f:60:a4:4b:a4:5b:
                    f5:c0:22:9e:28:2f:bc:dc:cf:1a:ec:96:b8:35:1a:
                    47:c1:f5:13:e4:fc:db:e5:57:d2:0c:49:91:c3:05:
                    1e:41:36:b6:d7:92:0b:f8:1b:a0:c7:03:c0:6e:33:
                    ae:60:d7:1b:88:1c:f2:e8:fb:6a:07:63:25:a5:f8:
                    c4:17:da:f8:df:90:40:cb:88:fb:9a:60:ff:cb:37:
                    a0:cd:8a:29:38:04:ec:2e:70:ad:05:2d:70:28:e9:
                    1e:39:d9:12:6d:a4:4f:11:a4:94:2d:bb:5c:b9:e4:
                    7d:a1:37:7f:09:39:44:5d:db:08:a3:a4:cb:d0:67:
                    b6:f7:b0:07:12:54:07:63:91:86:a9:a0:35:d9:b2:
                    bd:19:64:21:30:bc:3b:59:65:6a:91:b7:f1:59:67:
                    8c:6c:78:77:ee:29:ea:f5:c9:11:51:de:0d:ea:63:
                    35:2b:87:39:96:9b:88:0b:a4:bc:af:b2:6b:23:33:
                    2d:d1:3d:cc:bc:c9:35:d5:12:94:35:99:01:28:c0:
                    a5:68:22:50:b6:89:be:f6:06:e8:9f:08:53:ce:08:
                    c2:51:bf:96:e8:88:9f:a7:85:b2:78:b4:7b:4a:46:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:32:30:87:9D:C5:4D:F4:7B:9E:52:6A:60:81:00:D5:B7:8C:4A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iqwyMIedxU30e55SamCBANW3jEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:62:52:4f:ae:15:d5:3f:b6:0f:4d:15:17:0a:39:0c:6b:
         a9:8d:d5:66:ff:09:8f:a3:dd:95:7a:15:a0:13:ce:2a:fa:08:
         7f:9f:d8:e3:0d:de:a3:ff:40:eb:7e:72:24:3c:e4:99:38:f4:
         3d:a4:ec:38:cf:aa:6f:b3:4d:42:ac:7c:f2:9e:a9:d9:c3:7e:
         d8:b4:fb:45:ed:61:29:fa:5d:80:6a:0d:21:e0:6f:c7:1d:89:
         fe:4c:4e:27:4a:1d:ed:59:e7:c9:e8:3e:8f:74:db:32:33:dc:
         19:f4:64:9a:ee:b3:2d:17:e4:41:f6:91:b8:57:9c:aa:a7:ee:
         7d:1f:fd:ff:2b:ba:b2:11:13:ce:14:a9:30:af:56:21:f8:c6:
         54:4f:d4:ae:34:3c:f0:c3:19:b0:b2:1d:89:2e:46:61:b3:9e:
         c7:2f:f9:c9:a2:57:6a:8e:97:99:a7:4b:cb:ec:f6:72:8b:25:
         e5:b2:c3:49:78:7b:78:d9:8e:08:91:dd:05:83:c9:49:78:34:
         8e:eb:4e:25:55:f3:b5:ef:62:ff:b7:af:6a:1a:eb:50:cb:c2:
         f1:51:54:6a:38:2e:63:80:2d:66:8d:11:72:88:6d:2b:6e:e0:
         62:71:a1:2c:98:d5:41:65:4c:9b:dc:9a:a7:6b:1e:af:66:cd:
         b5:67:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org