Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/zwz-9bJv9S0OqaC_8kkUvNJtgEo.roa
File:                     zwz-9bJv9S0OqaC_8kkUvNJtgEo.roa (raw, json)
Hash identifier:          tPiniHHMP+aV4fMeyOyNjdFdJc64JElZIV0YCNkdwHw=
Subject key identifier:   CF:0C:FE:F5:B2:6F:F5:2D:0E:A9:A0:BF:F2:49:14:BC:D2:6D:80:4A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       D4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zwz-9bJv9S0OqaC_8kkUvNJtgEo.roa
Signing time:             Tue 01 Nov 2022 07:10:19 +0000
ROA not before:           Tue 01 Nov 2022 07:10:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2497
IP address blocks:        133.159.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 07:10:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CF0CFEF5B26FF52D0EA9A0BFF24914BCD26D804A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:ac:04:72:2b:57:3a:11:80:69:5f:d9:14:
                    22:f8:65:ad:07:85:56:00:08:83:a2:b5:90:f7:93:
                    44:f0:d8:d2:b7:39:4f:6e:d6:cd:ed:c1:65:53:b1:
                    7a:15:fe:34:1d:c4:2e:cc:f7:af:e4:9e:1e:01:a3:
                    7b:7d:6a:71:89:b2:34:2c:28:95:ee:28:71:6c:8f:
                    86:e6:20:31:56:02:20:e1:b3:d4:60:e9:ff:d6:79:
                    26:8b:08:21:88:1a:2a:ad:ab:c2:c3:12:60:6b:92:
                    d0:fa:85:93:6f:63:28:fe:b7:ed:60:71:42:85:b3:
                    56:ce:07:ec:57:64:cc:d6:28:a2:7f:69:7d:eb:8e:
                    cc:7d:51:a3:29:f6:1f:d2:04:9b:c0:64:07:5f:65:
                    9b:07:44:0d:2b:97:4e:4f:04:b5:fe:84:40:03:93:
                    99:2a:8c:da:ec:ae:80:97:c4:aa:d8:fe:56:bf:5f:
                    60:0b:f5:19:1f:0b:46:06:19:d0:ba:01:1d:3b:01:
                    30:c3:15:d6:f2:c3:aa:1b:82:a2:14:a8:5a:3a:86:
                    83:9f:09:81:2e:a9:fc:af:bd:3b:22:5a:04:14:af:
                    44:6b:b2:f5:0f:65:4a:df:88:91:53:cf:ce:3f:5b:
                    32:ac:1b:c6:14:5b:ed:90:43:82:52:50:8b:9a:a4:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:FE:F5:B2:6F:F5:2D:0E:A9:A0:BF:F2:49:14:BC:D2:6D:80:4A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zwz-9bJv9S0OqaC_8kkUvNJtgEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:05:d4:77:7a:32:c8:4e:72:b7:ff:6d:fb:fd:a2:b6:55:
         1d:64:12:42:7e:b3:5d:35:de:29:e1:d8:fb:9a:5f:0e:c0:ad:
         0a:92:2b:e9:7a:f0:a4:43:ef:4a:e7:97:bf:72:54:33:34:49:
         7a:c4:71:af:6a:93:d6:93:0b:45:92:7c:dd:2f:c7:cb:a9:e4:
         a1:db:ca:38:7c:b2:1c:41:34:05:bd:5d:cc:81:4a:10:20:f2:
         fd:12:f6:a9:0f:d1:0d:86:4b:96:0f:17:82:a3:f4:b5:dc:6d:
         95:b4:79:e8:f5:49:1a:09:45:3b:40:c3:54:56:92:9e:20:c6:
         b9:c0:c1:96:6e:26:ad:a2:b3:2c:94:b6:3f:00:47:c2:0d:db:
         1a:df:e6:84:8d:c0:e2:73:8d:20:87:c8:1e:08:57:ea:f8:1d:
         85:da:a7:dd:8e:80:5d:d0:cd:d7:6c:fe:38:76:bc:e0:aa:53:
         ba:58:4f:d2:6e:05:ee:ca:9f:cb:d6:c7:ee:d2:43:d2:69:5d:
         71:5d:0b:76:51:31:e0:b7:c7:e3:10:49:ad:f7:25:63:3b:d2:
         6d:4d:1d:4a:8b:5f:04:a5:46:6f:b0:90:38:8b:d9:5c:d7:37:
         70:05:15:0c:10:39:1c:46:26:c5:23:c4:1c:19:d2:4e:c4:b7:
         26:3b:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org