Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/EZwF4KjrYJfHxYSJthIZHbE83YY.roa
File:                     EZwF4KjrYJfHxYSJthIZHbE83YY.roa (raw, json)
Hash identifier:          J61lxvab0jy6QukH4PN1u+zm2Cq6+YDducGGpzfWE6c=
Subject key identifier:   11:9C:05:E0:A8:EB:60:97:C7:C5:84:89:B6:12:19:1D:B1:3C:DD:86
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       43
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/EZwF4KjrYJfHxYSJthIZHbE83YY.roa
Signing time:             Sun 01 May 2022 01:29:50 +0000
ROA not before:           Sun 01 May 2022 01:29:50 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7667
IP address blocks:        202.255.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: May  1 01:29:50 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=119C05E0A8EB6097C7C58489B612191DB13CDD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:e8:b5:1f:29:2c:f1:41:95:7d:45:eb:60:
                    75:e8:e6:96:0d:3e:8a:42:5c:5f:76:39:03:38:cd:
                    f3:7f:dd:01:7f:a0:04:72:15:7a:0f:65:73:d7:51:
                    4b:d6:b7:5b:3f:ff:8c:c4:c1:2b:10:04:1d:f4:f3:
                    b1:d0:ed:a0:c6:56:67:a1:77:fb:38:e8:d0:df:3f:
                    22:e2:0d:9a:22:5d:df:96:dd:af:69:95:13:7a:db:
                    c9:a8:e0:c1:60:71:4b:a5:00:a0:ea:a2:56:b9:a0:
                    00:94:bd:d2:5e:19:e3:6f:0b:14:06:f7:4a:ee:e4:
                    42:96:23:f4:6a:c4:28:c9:a0:5b:cf:ce:8a:c4:37:
                    be:72:d4:1b:7c:28:6d:0b:1d:64:d9:56:ea:59:73:
                    cd:76:33:29:72:ef:2c:2c:54:b1:8f:5f:b4:58:ec:
                    61:2a:b7:74:32:5c:48:c1:84:cc:31:2f:b6:69:cd:
                    d9:ec:a8:2f:80:b5:3a:33:b6:f4:eb:c4:c4:92:b2:
                    02:48:de:ec:cd:dc:49:15:1d:cc:0d:5c:fc:49:ed:
                    f0:b4:6b:61:7e:e6:cf:eb:90:ff:e3:93:df:ba:4c:
                    fe:74:6c:20:59:f8:67:ce:44:a3:0e:44:f9:90:11:
                    15:de:fe:92:eb:d6:48:24:a1:b2:8a:32:d2:20:a9:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9C:05:E0:A8:EB:60:97:C7:C5:84:89:B6:12:19:1D:B1:3C:DD:86
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/EZwF4KjrYJfHxYSJthIZHbE83YY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:28:a1:5d:5e:07:84:f1:12:06:00:d8:fc:a0:da:a6:b3:4e:
         2c:0e:e8:d9:99:51:e1:c6:88:fb:0c:81:a4:ac:d6:58:be:53:
         46:f2:b9:c2:8b:fb:c5:14:d9:76:50:e1:99:41:14:41:03:a6:
         b7:88:6b:e0:da:2a:ff:7e:cd:95:b7:7b:62:03:9e:36:0c:cb:
         16:0e:3f:e2:9e:74:48:8f:fc:e9:df:14:e7:6e:f1:c9:de:71:
         65:cc:c1:30:47:3d:03:17:71:0f:22:ad:d9:47:ca:42:24:65:
         fb:2f:33:06:85:74:a4:60:c4:dd:85:fa:d7:83:65:67:a0:03:
         3f:9c:3b:96:16:5a:47:6c:b5:af:3e:c1:d1:5c:33:f7:59:b5:
         12:66:11:3f:9a:fa:b9:71:79:66:45:37:0c:3a:01:54:82:10:
         76:50:d4:8b:95:f9:7a:dc:ef:d5:68:8f:85:18:9d:03:ea:54:
         86:1a:9d:8a:2d:87:13:58:99:a4:cb:cf:44:42:08:fe:89:05:
         59:ee:ce:03:b3:ef:2b:4d:03:4e:f2:ef:cd:da:fe:b2:a4:2f:
         93:b1:c2:18:66:46:36:7f:8c:59:d7:bf:8d:aa:f7:a3:ef:98:
         3c:33:2d:6c:eb:9d:6a:59:83:95:a1:41:27:66:9c:ac:5d:a5:
         50:8b:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org