Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/beTko9JmeEmEKmP7Tmo05NUOPck.roa
File:                     beTko9JmeEmEKmP7Tmo05NUOPck.roa (raw, json)
Hash identifier:          +JDGIlUSZEy139dXc3O09SL8C8gOlvVgpX0H4j64WKg=
Subject key identifier:   6D:E4:E4:A3:D2:66:78:49:84:2A:63:FB:4E:6A:34:E4:D5:0E:3D:C9
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       44
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/beTko9JmeEmEKmP7Tmo05NUOPck.roa
Signing time:             Fri 06 Jan 2023 09:38:03 +0000
ROA not before:           Fri 06 Jan 2023 09:38:03 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        120.89.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  6 09:38:03 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=6DE4E4A3D2667849842A63FB4E6A34E4D50E3DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:95:62:7e:ef:61:d9:08:14:36:c4:94:2c:
                    80:76:be:ae:51:bf:d8:13:87:4a:6c:17:8b:6d:77:
                    5e:40:be:48:84:9c:47:af:cf:c9:b7:ac:ce:be:a7:
                    5c:ec:1a:59:42:dc:5b:53:7c:96:3f:36:9c:cc:90:
                    18:fb:59:77:d8:34:1c:56:cd:26:74:ef:4d:1a:5c:
                    b9:91:ed:01:e3:d5:a5:38:72:ea:d3:7e:fe:c4:fe:
                    43:1f:fe:3f:f6:fc:dc:a7:c9:3c:0a:5a:ab:54:50:
                    03:5f:ff:9a:09:de:6a:94:97:41:6d:ab:5c:05:a7:
                    09:4f:d0:4a:43:8e:4d:a6:5f:7b:94:1f:7c:fe:f8:
                    a9:be:b7:31:ee:32:de:7f:79:aa:d3:99:1f:9d:c6:
                    ab:21:ec:ee:5a:7f:29:70:c7:96:97:59:86:a9:16:
                    a7:7f:aa:ea:16:85:33:55:f1:fd:f5:36:42:b0:d6:
                    b7:ee:09:33:96:5c:4c:10:20:e0:ba:80:ba:40:4e:
                    35:19:ed:fa:cb:30:f8:9a:4a:fb:81:76:1b:e8:05:
                    aa:f4:4d:27:2e:0f:dd:5d:92:cf:9b:21:92:82:bf:
                    9a:1e:54:73:d6:13:64:e5:0d:46:dc:d2:a5:57:f9:
                    a8:e3:d7:bd:84:69:1f:00:96:da:e0:2a:42:3c:ce:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:E4:A3:D2:66:78:49:84:2A:63:FB:4E:6A:34:E4:D5:0E:3D:C9
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/beTko9JmeEmEKmP7Tmo05NUOPck.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.89.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         05:45:4e:c3:6c:ec:8e:3a:28:73:6d:56:0c:63:91:38:64:c4:
         14:a6:5e:9e:b0:5b:bd:d3:dd:88:94:64:12:c4:61:10:7e:a5:
         2a:7b:3e:44:59:f6:39:3f:0d:63:03:38:30:0b:25:20:a1:21:
         f7:ca:ac:0f:39:a2:df:ff:53:74:d4:93:0f:0a:a2:2d:65:6e:
         da:4c:03:9f:db:99:9c:6e:58:c3:0c:0d:fc:ce:2c:07:81:63:
         e2:ea:54:5c:28:bd:34:55:98:e6:e4:03:ff:6b:01:64:73:b1:
         d6:0a:8e:74:e2:fe:45:31:19:dd:f0:d2:1c:0d:58:69:fc:0b:
         2e:7d:e0:28:43:cd:3f:57:8c:7d:56:99:27:6e:82:da:f9:39:
         39:72:7e:4e:c6:6b:8c:35:34:09:e6:3a:6c:1e:5c:ed:e1:37:
         dc:03:96:3f:b7:49:22:95:71:c5:54:9b:d1:5c:ca:de:5d:f7:
         25:7b:3b:4c:7d:ed:4e:8c:d2:5c:4a:2a:7e:88:7c:3c:23:81:
         fc:bb:09:15:ed:17:7f:13:19:a6:48:88:1b:59:90:2c:38:5e:
         d9:e6:12:0c:63:ae:01:d0:ad:94:63:ce:4f:a6:0c:af:8e:40:
         7d:b9:5f:f6:68:07:fd:e6:7f:73:2f:1a:02:5a:a4:62:47:fe:
         b6:e3:9d:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org