Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTT7XH9ZDt7A9t9pMCkxx--tVzI.roa
File:                     jTT7XH9ZDt7A9t9pMCkxx--tVzI.roa (raw, json)
Hash identifier:          uVr1nX7Ufkp1FjxWbTn9XnrVR+fDYlLD2U6DE8Sntq8=
Subject key identifier:   8D:34:FB:5C:7F:59:0E:DE:C0:F6:DF:69:30:29:31:C7:EF:AD:57:32
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       A3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTT7XH9ZDt7A9t9pMCkxx--tVzI.roa
Signing time:             Sat 01 Oct 2022 01:29:14 +0000
ROA not before:           Sat 01 Oct 2022 01:29:14 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        116.118.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:14 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8D34FB5C7F590EDEC0F6DF69302931C7EFAD5732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:41:83:71:4b:b3:27:8e:93:85:25:98:a2:
                    5a:fa:08:97:61:e4:c9:6c:af:3b:d0:bd:8b:6b:aa:
                    9d:64:d4:13:f7:da:0a:17:3a:4f:96:0a:5c:e3:c0:
                    f9:5a:f1:b5:92:73:4a:ac:bd:c8:51:b8:12:01:35:
                    3a:bd:bd:24:84:a8:fc:6b:56:ef:db:39:d2:c8:60:
                    90:49:bd:3d:6b:46:e6:0b:23:a6:50:c5:58:cb:7e:
                    a8:92:a3:78:99:c1:33:79:bb:96:53:11:3c:6a:15:
                    d3:69:82:98:c1:57:b6:59:79:7c:1f:d9:69:24:8e:
                    a4:30:63:d5:54:14:08:66:45:d9:ed:d6:3f:d3:e3:
                    7b:ce:3e:4e:40:b3:3c:85:6e:36:ed:bb:7e:6a:a8:
                    25:56:ef:47:ab:28:05:d5:47:4d:0c:5b:44:d0:cb:
                    a8:cb:11:40:e2:58:4d:71:1c:8d:9b:92:1a:d5:12:
                    8b:87:d2:aa:f6:da:c0:96:9d:4d:69:53:15:13:e1:
                    3e:78:87:3f:5f:91:ad:c7:59:0a:68:37:74:4a:07:
                    ef:d4:38:69:c8:b5:8f:9f:c2:24:52:4f:6b:ea:f5:
                    11:4d:c7:af:7f:de:7b:76:f3:03:53:80:34:2a:b6:
                    31:82:fb:3c:98:72:66:5d:51:96:0a:3e:3d:6d:76:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:FB:5C:7F:59:0E:DE:C0:F6:DF:69:30:29:31:C7:EF:AD:57:32
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTT7XH9ZDt7A9t9pMCkxx--tVzI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.118.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:c8:5f:3a:5d:ee:89:ea:f1:2f:77:38:61:10:36:f8:f0:
         d4:37:58:f9:67:76:0c:0a:1e:49:f1:20:7d:5e:1f:87:7f:72:
         5b:79:63:5d:9b:c9:79:8d:c3:de:27:70:0d:30:50:1b:f0:a0:
         02:31:33:80:c3:99:ed:5f:14:11:e5:45:1d:48:0d:25:8d:26:
         56:51:f7:5d:bb:c9:2f:fb:6b:b9:43:36:52:bc:38:ac:97:5b:
         2b:d3:03:4c:7a:c2:28:39:5f:21:6f:cd:27:6d:3f:35:71:54:
         20:80:55:08:fc:12:98:97:77:8a:d8:e4:74:92:b1:f9:40:9e:
         3a:b2:d4:4b:9d:bc:ab:5c:74:20:f3:2b:7f:d3:3b:04:1e:73:
         cd:45:e7:23:42:5d:28:99:8e:e2:9f:4e:bc:d4:0d:dd:70:b8:
         b4:e6:94:90:1d:77:7f:2c:06:cc:26:fc:16:56:84:07:f6:9b:
         96:47:d3:e1:47:42:f6:c5:21:25:d8:f2:ee:70:71:08:54:e2:
         cb:a6:b9:bc:5e:3a:7e:54:48:5c:c7:ad:a8:3c:f6:5a:63:d4:
         8f:4a:24:42:45:78:e4:4d:e1:bf:d1:0e:32:cf:d2:db:5c:d7:
         db:80:83:23:0d:21:15:58:69:ee:a4:96:fc:07:c5:8a:9d:1e:
         97:16:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org