Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/fPewWn3sWiNUJn4CiH1nmGjMCCA.roa
File:                     fPewWn3sWiNUJn4CiH1nmGjMCCA.roa (raw, json)
Hash identifier:          0/Zc9iIG+yghNRyduukmkpCb7EqRTHCvlwTe3OFnlbE=
Subject key identifier:   7C:F7:B0:5A:7D:EC:5A:23:54:26:7E:02:88:7D:67:98:68:CC:08:20
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       40
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/fPewWn3sWiNUJn4CiH1nmGjMCCA.roa
Signing time:             Thu 13 Apr 2023 09:52:40 +0000
ROA not before:           Thu 13 Apr 2023 09:52:40 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55392
IP address blocks:        14.1.4.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Apr 13 09:52:40 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7CF7B05A7DEC5A2354267E02887D679868CC0820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:e9:16:19:93:ba:52:db:5e:20:09:81:2f:
                    3c:46:3a:0d:ee:56:6a:b7:65:8c:78:2b:c0:2f:12:
                    03:74:7c:97:79:fe:03:c6:ad:19:ac:19:17:06:f1:
                    66:2b:05:23:5a:81:2b:0d:9c:04:70:a1:2b:a2:52:
                    9e:52:0e:5b:74:16:a0:8e:da:6a:f3:4e:aa:af:d1:
                    52:b0:8d:68:a1:99:79:61:fe:20:75:b8:72:fa:3d:
                    12:47:3a:c0:46:5a:19:d5:80:c4:4f:0a:d3:d1:6b:
                    57:81:71:b0:5b:00:d6:96:e1:6b:48:fb:44:20:09:
                    2b:52:88:9f:7f:e8:7d:6b:dc:90:d1:e7:4a:09:1d:
                    ad:f4:cb:c5:92:63:11:2f:c8:57:97:88:86:f8:a0:
                    52:a6:a3:15:5e:e1:1e:16:7a:29:7d:94:01:ac:51:
                    75:e4:36:7b:b8:9f:31:8b:12:c8:be:b3:6e:0f:c8:
                    80:68:f1:b2:99:30:68:bc:ef:90:bb:0d:36:8f:95:
                    00:73:40:f9:63:57:ed:63:6c:65:99:a7:28:ec:d9:
                    9c:7d:d6:fc:9c:ad:a9:91:0e:9f:ba:ad:07:de:c4:
                    d4:06:fe:0e:8a:06:4d:1e:78:db:1b:77:47:f2:fb:
                    c6:92:7f:34:ef:e9:94:71:95:c6:4f:71:47:1f:bc:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:B0:5A:7D:EC:5A:23:54:26:7E:02:88:7D:67:98:68:CC:08:20
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/fPewWn3sWiNUJn4CiH1nmGjMCCA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:03:d0:a9:69:c5:76:46:8e:96:1d:ed:36:b1:7d:8f:d6:
         6a:cb:71:78:aa:57:12:99:2a:74:5f:1c:5a:e9:f2:06:a1:ec:
         7a:19:b5:c8:c7:16:8e:f5:40:86:a9:68:14:31:a5:50:47:e9:
         21:8a:22:6e:10:de:99:32:cc:12:e5:80:d5:9f:5f:36:54:d2:
         95:cb:c3:bc:9a:04:7d:16:90:43:18:71:b5:d4:ab:95:3f:2b:
         b0:5b:6b:43:05:e6:5c:8f:eb:67:8a:70:8f:49:3c:6a:ac:f2:
         00:87:26:98:41:17:54:ba:d7:97:99:65:f7:4c:63:27:25:f2:
         60:7b:1a:b3:44:0e:1f:66:99:da:e3:f5:dc:52:f6:11:19:25:
         3f:1d:08:db:ff:7a:97:27:14:de:6a:cf:40:10:df:5c:31:80:
         06:9d:04:c0:30:0d:3d:09:73:7b:5e:ba:13:c9:44:a0:70:d6:
         be:40:94:32:9b:ef:f4:85:4f:4d:d8:10:fa:21:ea:d0:2e:23:
         02:b2:71:45:33:fb:9d:7c:a4:08:45:5c:38:a6:da:e5:32:b2:
         4e:cc:0e:3c:a7:34:1e:57:9c:56:6d:fa:c7:43:3c:28:39:e1:
         8b:d0:c5:88:4b:a6:0d:f8:15:cd:f0:12:37:2c:5c:f1:2f:00:
         e9:59:d6:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org