Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/BpswkuXW7IdF_3ePa88UbnUxRqU.roa
File:                     BpswkuXW7IdF_3ePa88UbnUxRqU.roa (raw, json)
Hash identifier:          jgsDZU9V8ikcpYx4ZoIWnYaPnpK+5SP8ICAOyHnw1JQ=
Subject key identifier:   06:9B:30:92:E5:D6:EC:87:45:FF:77:8F:6B:CF:14:6E:75:31:46:A5
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       45
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/BpswkuXW7IdF_3ePa88UbnUxRqU.roa
Signing time:             Fri 06 Jan 2023 09:38:03 +0000
ROA not before:           Fri 06 Jan 2023 09:38:03 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        120.93.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  6 09:38:03 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=069B3092E5D6EC8745FF778F6BCF146E753146A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:a9:31:50:ef:05:4d:90:8d:62:16:86:4d:
                    3c:ea:92:ee:cd:15:e9:7b:a1:0e:ed:52:35:b3:81:
                    70:47:41:c8:54:fe:d2:de:c6:5c:4d:0c:1f:17:ee:
                    15:2e:62:1b:71:a7:14:d6:7d:1e:14:1e:75:87:de:
                    e3:65:8e:54:09:60:f0:75:f3:38:78:11:44:88:f9:
                    e3:98:49:9f:53:cf:c5:72:a7:42:93:ce:ae:3b:37:
                    db:73:0c:9b:58:8b:58:c0:34:02:32:ef:7b:05:b5:
                    57:6d:f2:0d:e9:fd:aa:76:27:91:26:e5:0c:42:9d:
                    c0:fb:c8:b0:fd:5b:6e:e9:2c:c6:09:49:c7:d6:fa:
                    7a:59:05:3c:9a:6f:e7:e5:51:ca:ae:bf:1c:a2:52:
                    28:58:ad:53:5a:fd:a7:2c:84:77:57:44:55:f2:76:
                    7e:75:8e:0e:71:bc:87:a5:74:71:e2:cc:9e:ba:96:
                    fa:ae:80:3d:fd:91:e5:a6:c8:1b:21:a4:ed:4d:68:
                    77:13:5b:10:99:1b:d4:d3:82:fa:ef:fa:46:d3:9a:
                    e9:ca:d9:91:82:48:9a:dc:af:ff:f4:e4:19:fe:47:
                    57:78:5d:9d:a4:de:61:5c:6b:02:49:fc:7d:66:c0:
                    ef:91:e2:6c:59:a8:ca:35:4b:b2:3f:dd:08:bf:9d:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9B:30:92:E5:D6:EC:87:45:FF:77:8F:6B:CF:14:6E:75:31:46:A5
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/BpswkuXW7IdF_3ePa88UbnUxRqU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:48:06:04:24:0e:e3:00:96:c2:ed:82:9a:c7:ad:c0:ae:
         cd:60:e5:33:df:c7:b0:73:c2:85:d9:5c:2b:d7:ae:68:69:f3:
         d0:82:e2:96:72:4b:ae:77:2f:ac:b9:d6:23:74:dd:e8:ca:0c:
         1d:36:8d:ee:e3:7f:98:c9:19:0e:01:e2:10:f3:c9:3f:c5:7f:
         0f:67:13:a8:b1:04:b1:b1:15:b9:37:4e:48:83:50:dd:61:4e:
         1f:28:7d:e3:42:46:f4:72:96:dd:d7:90:64:97:88:06:5a:fe:
         30:a2:7b:91:a5:5f:f2:4f:b4:a4:4d:69:9b:bd:42:e6:4c:5f:
         47:1e:dd:5f:c6:04:cf:98:af:fd:e5:d7:e2:da:5b:1a:29:d6:
         2e:4d:97:b0:38:d4:e6:bf:51:a0:ee:ea:f5:91:77:50:93:7e:
         b2:97:4e:07:5c:a1:b6:e0:1d:80:1d:ee:ec:0f:fd:4c:ab:6e:
         61:12:42:3d:ea:da:6b:c7:17:a4:13:c6:b0:1f:d9:99:b5:78:
         91:db:7a:af:26:fe:19:fa:9c:24:08:38:b3:3e:f0:17:1e:c2:
         8c:2b:fe:97:dc:24:75:13:90:e3:41:ee:51:b9:cf:fb:2f:b7:
         00:45:87:0a:b0:28:aa:0a:4b:24:e9:76:e8:75:50:02:38:01:
         fc:8b:95:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org