Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/s0y3QKOxPkCgE6JlXZgrb0rE9kA.roa
File:                     s0y3QKOxPkCgE6JlXZgrb0rE9kA.roa (raw, json)
Hash identifier:          126xFwLHxZ+HXtbTCvFTca0ezh8AzGXhnLp0wjlmzFQ=
Subject key identifier:   B3:4C:B7:40:A3:B1:3E:40:A0:13:A2:65:5D:98:2B:6F:4A:C4:F6:40
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       34
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/s0y3QKOxPkCgE6JlXZgrb0rE9kA.roa
Signing time:             Thu 13 Apr 2023 09:52:39 +0000
ROA not before:           Thu 13 Apr 2023 09:52:39 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55392
IP address blocks:        130.62.0.0/16 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Apr 13 09:52:39 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B34CB740A3B13E40A013A2655D982B6F4AC4F640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:d5:4d:27:ee:62:01:97:d0:10:72:64:4c:
                    e1:d6:04:6a:bb:9f:4d:31:96:c6:f3:df:d7:2d:f2:
                    f4:00:8e:4d:40:d3:39:94:55:bb:55:53:0f:7d:d1:
                    16:a1:b4:28:31:4b:cd:fe:4d:6c:79:73:22:85:db:
                    6f:1a:0b:ca:5f:68:22:f4:ee:a1:72:09:65:62:9b:
                    54:fd:9d:ad:d9:9c:14:40:3f:17:80:7d:80:46:bf:
                    77:a8:b9:e9:9b:e5:1d:d0:f5:cf:98:1f:e3:1a:e2:
                    c4:53:e4:61:94:bf:1c:ce:d5:78:10:17:69:34:16:
                    23:67:69:ca:ab:44:c4:8c:a7:f8:ad:79:8d:3a:23:
                    e9:46:d1:c8:71:2a:40:0c:75:a6:9e:63:2d:49:0e:
                    03:54:13:cd:20:4c:2a:a8:17:eb:59:a6:81:d3:d5:
                    73:ec:a3:40:dc:6c:8b:0a:7b:89:77:b4:5c:88:10:
                    77:11:40:d9:86:88:a3:5a:33:87:4e:d0:a5:4c:58:
                    1c:c5:7d:57:21:32:94:46:22:31:eb:e5:04:e2:66:
                    52:77:4d:d9:b8:1c:b6:75:e6:34:a6:35:90:af:0c:
                    ec:8e:c9:8d:4c:c3:e2:89:8f:2a:93:16:ce:eb:7d:
                    96:fd:81:35:f4:b2:d7:90:f0:6d:1f:95:c1:5d:22:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:B7:40:A3:B1:3E:40:A0:13:A2:65:5D:98:2B:6F:4A:C4:F6:40
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/s0y3QKOxPkCgE6JlXZgrb0rE9kA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:38:e1:fa:3a:d4:3a:5a:5c:c1:e4:8e:bb:c2:e7:ce:6f:
         40:fa:dd:e9:ab:f3:9d:53:93:8b:c1:8f:a9:50:75:41:36:df:
         0d:4f:a8:5a:d6:a4:ba:ef:7c:69:05:ae:bb:5b:b7:77:5f:01:
         62:fb:9d:6a:f8:4e:2e:b7:b6:8b:e7:ce:d1:55:15:b3:c2:e6:
         8e:42:ee:83:b8:11:1d:74:65:c9:39:0c:9d:3f:42:9a:da:d5:
         d9:db:52:f2:56:4e:94:5a:b3:50:3a:e0:b1:71:ff:67:58:70:
         5c:61:71:a3:d0:b5:43:a1:a7:5a:80:50:59:89:0c:9d:b9:46:
         81:7c:a5:40:13:88:8b:54:6f:e8:64:f1:f8:43:cd:44:38:7e:
         94:1c:ed:db:39:80:c2:50:07:84:60:28:57:a2:0b:6f:f7:f0:
         62:bc:1e:75:c5:b8:01:0f:45:1e:d1:aa:21:36:10:3d:ab:59:
         fe:e9:4b:02:9c:de:26:b8:e7:fd:a5:88:c1:53:65:c4:97:9c:
         2e:0b:94:48:8b:9e:ae:77:4b:9f:b6:87:ae:6d:a5:7e:d2:50:
         ce:10:d5:3c:d5:f0:f2:fe:fb:52:66:d4:4d:47:65:37:c4:4f:
         2a:df:5e:a9:46:b0:fc:e9:a9:6f:32:81:b0:f6:e9:93:0d:a3:
         63:95:e4:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org