Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/mF61-FQVrl3N6ser5Ohlp5gpOD0.roa
File:                     mF61-FQVrl3N6ser5Ohlp5gpOD0.roa (raw, json)
Hash identifier:          g8/We30XLNA4lj9jeIapFO0P5JuRTXxZaWzQ6AHKCyA=
Subject key identifier:   98:5E:B5:F8:54:15:AE:5D:CD:EA:C7:AB:E4:E8:65:A7:98:29:38:3D
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       13
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/mF61-FQVrl3N6ser5Ohlp5gpOD0.roa
Signing time:             Wed 01 Sep 2021 01:30:34 +0000
ROA not before:           Wed 01 Sep 2021 01:30:34 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     14618
IP address blocks:        150.70.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: Sep  1 01:30:34 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=985EB5F85415AE5DCDEAC7ABE4E865A79829383D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:41:37:fc:83:33:85:97:14:db:af:2e:67:
                    3c:63:46:c3:cf:24:1c:17:5e:76:9f:3f:bd:fe:56:
                    e3:30:eb:68:68:00:82:f2:10:d3:9b:48:b5:7a:b2:
                    af:8a:c4:fa:ba:2a:09:41:14:d8:f9:8e:de:65:5f:
                    82:47:29:16:1f:c8:ae:57:02:18:88:9c:d9:c8:8e:
                    2a:85:08:c9:f8:89:a8:d1:ad:d5:ee:cb:ab:bd:67:
                    a0:a7:e9:ac:28:29:6a:e8:f9:26:55:b8:01:6e:08:
                    80:e5:c0:8a:d4:d6:50:bc:6e:f2:16:9e:02:e2:4a:
                    45:65:d3:30:ed:9b:db:6f:b7:cf:a0:2e:71:f3:a1:
                    11:d7:b8:a1:41:1f:e1:15:dd:e2:d0:7a:ef:c1:60:
                    af:25:e3:5e:ce:00:c3:9f:4b:1a:3e:66:a2:d8:60:
                    c4:f3:78:91:69:d8:31:ed:bf:e5:83:70:f4:bc:76:
                    6c:61:ac:30:e1:04:7f:52:0f:fc:1f:01:bb:56:18:
                    74:c9:23:43:70:fb:41:fe:d8:c1:81:4a:08:68:36:
                    f7:e2:93:bf:2f:39:d0:db:b7:99:50:1b:d5:ee:28:
                    11:8c:11:f8:12:65:81:be:67:95:14:7d:da:08:38:
                    96:04:3a:c8:9b:6c:ff:d5:54:aa:e0:1c:58:98:e1:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:B5:F8:54:15:AE:5D:CD:EA:C7:AB:E4:E8:65:A7:98:29:38:3D
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/mF61-FQVrl3N6ser5Ohlp5gpOD0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:a0:3b:31:f4:9b:ea:d5:75:ac:f2:27:29:6f:03:4c:d1:
         ec:6a:2b:24:c2:3b:bf:74:55:05:51:ab:d5:a6:d4:3f:d7:f1:
         82:02:b1:03:3d:f8:00:59:d2:fc:8e:2d:ad:03:c5:d6:91:39:
         0a:68:e8:af:f6:ae:65:10:93:ec:c7:7a:0c:8e:9c:b3:07:68:
         b6:86:75:7c:52:36:c0:0e:04:74:e4:78:e9:4a:9e:89:ca:1b:
         33:2f:4d:55:08:fd:a2:b8:25:e5:08:38:4f:f2:6d:fc:e6:14:
         aa:30:a4:4f:06:e7:8d:c2:13:41:84:07:b4:d0:4e:05:4f:d6:
         ae:9f:e6:28:74:82:39:88:9d:7a:3e:0b:7f:71:e9:f0:c7:41:
         b7:cd:92:2d:1e:15:9c:77:93:4d:66:4f:9e:86:4a:dd:e8:a8:
         c9:97:89:53:f1:3e:c5:69:19:16:b6:ba:d1:fc:53:44:5c:bc:
         af:90:4f:96:56:2d:b7:54:7f:9f:fd:4b:70:78:eb:5e:a4:21:
         ef:82:4d:f0:ab:2d:97:12:28:57:ec:b0:69:6f:36:79:2c:26:
         51:c5:e9:ba:e0:06:e0:1e:ce:35:41:ea:4a:ea:fc:fb:fd:98:
         ce:bd:c4:8f:8a:e9:f8:ff:ab:67:b8:76:91:df:37:c0:e1:02:
         79:2b:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org