Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/p4EWikiwDuBfSrrW0wZl6GmK0RM.roa
File:                     p4EWikiwDuBfSrrW0wZl6GmK0RM.roa (raw, json)
Hash identifier:          UBRI/o2aXqzRv3ZhLZrTRdWtiTiDdTTovLN9XcLd1sc=
Subject key identifier:   A7:81:16:8A:48:B0:0E:E0:5F:4A:BA:D6:D3:06:65:E8:69:8A:D1:13
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       30
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/p4EWikiwDuBfSrrW0wZl6GmK0RM.roa
Signing time:             Wed 01 Feb 2023 01:28:45 +0000
ROA not before:           Wed 01 Feb 2023 01:28:45 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     55391
IP address blocks:        130.62.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Feb  1 01:28:45 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=A781168A48B00EE05F4ABAD6D30665E8698AD113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:0f:c3:3f:cf:26:03:99:55:c5:b4:54:6b:
                    5d:88:48:9e:59:ab:45:bc:6f:12:4f:f0:4e:34:ea:
                    80:c7:ee:58:86:a9:ca:65:98:b1:09:4b:d9:fe:c5:
                    7f:55:c4:0c:3c:8e:ff:b4:b8:de:50:43:69:d8:5d:
                    c9:61:58:87:19:2f:f2:15:c5:e3:9c:69:dc:b3:50:
                    1d:cc:01:07:81:be:50:42:d0:6c:1e:4e:66:16:73:
                    7c:e5:84:90:95:24:8a:9c:24:95:5e:08:c1:c9:16:
                    db:4f:e2:64:18:aa:4f:0b:90:14:b5:bf:3c:46:64:
                    32:f2:2c:90:3d:05:1c:e0:c3:4b:a6:3b:b8:9d:ef:
                    1b:18:8f:b1:ca:0b:10:4f:ba:13:f8:3a:99:48:77:
                    ea:41:dd:97:2f:7f:cc:66:c0:5a:3c:29:a8:fa:fe:
                    d8:5f:0c:ab:4e:dc:af:44:dd:3d:98:c5:6e:b7:01:
                    e3:ce:ad:4e:59:ec:f6:98:da:62:72:3b:43:24:66:
                    3f:55:12:e4:6e:fc:a2:fc:ad:5d:c4:52:53:a6:1c:
                    b9:62:96:37:40:06:c3:9d:f7:d0:dd:c6:71:76:aa:
                    1f:27:89:2f:fc:ac:7e:70:0d:c8:4f:88:f1:5c:1e:
                    59:4b:bb:05:05:70:2d:99:99:7f:09:97:f9:d8:89:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:16:8A:48:B0:0E:E0:5F:4A:BA:D6:D3:06:65:E8:69:8A:D1:13
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/p4EWikiwDuBfSrrW0wZl6GmK0RM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:1f:8b:a7:4d:b9:9a:f1:26:d5:b2:e0:4e:51:fe:ae:a3:
         d3:1d:35:af:e5:e0:f9:2c:0d:0f:11:9f:00:db:5c:16:fa:8e:
         1d:c2:a1:3b:56:cd:13:23:a0:ba:f7:ec:df:18:00:cd:f2:d0:
         98:08:f2:7b:63:4d:af:db:4d:3c:da:81:33:a7:37:31:1d:78:
         80:95:04:6a:88:33:46:e2:64:3b:b7:25:0a:9b:4c:f0:9a:81:
         fb:5b:21:ca:1e:38:be:39:95:9c:13:c9:92:3b:a2:6c:c6:f9:
         2a:31:bd:bb:56:1b:37:5d:80:c0:fe:cd:75:f8:5d:62:7c:6e:
         05:35:c3:4c:ab:d5:c4:dd:b1:e7:43:ea:92:f5:4f:1a:f9:b8:
         68:41:97:a6:d9:3c:6e:91:c4:ed:88:d0:6f:b8:5e:58:9e:74:
         83:3b:3a:8b:6c:1c:3f:df:9f:17:20:9a:59:81:50:80:d5:81:
         b1:d5:b0:b9:32:63:ac:d6:37:e5:18:9f:99:64:56:fa:a3:c6:
         6c:c3:e0:53:b8:b0:da:11:95:da:0b:5f:9d:39:66:27:8a:3d:
         e8:20:ba:75:6e:eb:0c:7a:5e:41:d9:91:79:ac:ed:7f:dd:30:
         d3:cf:ac:c6:79:7a:12:c6:75:fc:b0:a3:43:96:42:f9:8d:b8:
         bc:31:3c:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org