Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/x8bo8oozRuIDLPMUTnxv57U7U0s.roa
File:                     x8bo8oozRuIDLPMUTnxv57U7U0s.roa (raw, json)
Hash identifier:          gXVeZG6JvYgl1SJWRI0yBzR3GpIo/oNxy/ibrCPSJ7s=
Subject key identifier:   C7:C6:E8:F2:8A:33:46:E2:03:2C:F3:14:4E:7C:6F:E7:B5:3B:53:4B
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       53
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/x8bo8oozRuIDLPMUTnxv57U7U0s.roa
Signing time:             Thu 13 Apr 2023 09:52:33 +0000
ROA not before:           Thu 13 Apr 2023 09:52:33 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7667
IP address blocks:        202.255.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Apr 13 09:52:33 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C7C6E8F28A3346E2032CF3144E7C6FE7B53B534B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:8c:82:ca:4a:1a:35:2c:e1:1d:54:b9:5e:
                    25:4b:cf:e2:32:0b:2e:2d:11:28:4f:28:17:b8:d4:
                    9c:6c:89:8a:88:ca:aa:5f:27:b8:f8:44:ab:ee:e8:
                    15:f5:fc:df:11:0f:ad:45:c0:8c:aa:4a:df:ef:9f:
                    f0:2a:d5:51:a6:bf:15:1f:2a:d8:5d:cf:b6:39:8e:
                    f7:4d:88:a6:d0:e8:4d:88:a9:6b:5f:e6:f9:43:34:
                    cd:50:92:4e:cb:d6:40:4c:8a:d1:e8:29:b2:bc:75:
                    65:53:fb:ee:e0:30:14:6c:80:56:71:8c:10:c5:6a:
                    87:b3:67:d9:6e:75:84:55:70:81:a0:ea:d7:f0:54:
                    91:84:53:32:f2:71:f8:dc:24:da:7a:ad:45:27:0c:
                    1c:6e:a8:c3:39:1d:40:00:a5:c6:a8:83:0d:f7:fe:
                    9e:ad:e6:0a:c7:91:ac:59:7c:0b:72:10:98:cc:4f:
                    64:17:c0:30:a7:87:41:ce:bd:96:34:1e:ed:39:fa:
                    64:51:c4:e7:b8:08:f6:7a:32:2d:1a:67:24:5f:db:
                    eb:e1:42:9a:cf:98:95:c3:44:57:61:ee:41:2c:d4:
                    08:9d:6a:db:09:3d:b3:36:a5:3c:30:62:38:d0:3f:
                    81:61:ea:21:c7:62:54:67:52:c5:f1:e0:a5:5f:df:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C6:E8:F2:8A:33:46:E2:03:2C:F3:14:4E:7C:6F:E7:B5:3B:53:4B
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/x8bo8oozRuIDLPMUTnxv57U7U0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:d6:aa:44:60:0d:77:df:51:0b:10:53:a6:f9:de:01:ba:
         21:f9:8f:ac:59:60:58:d3:21:e6:34:ee:30:9d:b4:23:e5:59:
         a5:ae:b6:13:72:ad:0e:24:9d:36:a0:d1:7a:0f:80:43:53:65:
         1c:fa:6c:96:e5:fd:11:68:2b:43:5f:9f:fa:8f:5a:22:bd:b3:
         06:9f:8e:10:39:53:a9:1b:70:58:c6:e0:56:2e:5e:47:a1:95:
         4a:2a:73:c4:bb:0e:16:6c:10:96:ce:f1:4b:75:83:ca:7e:45:
         7e:d6:f8:39:94:b5:8a:f3:4a:0f:c4:dd:12:a4:9a:c6:2c:fa:
         45:14:21:f4:59:b0:57:0d:06:26:ea:1b:a7:2d:d2:4c:33:d2:
         8b:a7:84:6d:77:97:7f:f0:de:8c:89:4d:4c:a3:da:db:13:31:
         28:a3:bb:82:68:6c:6a:3c:b9:6a:4d:c5:56:a9:4c:4f:94:1d:
         3a:18:c7:0d:bd:c5:9f:24:d1:1e:27:b9:96:a5:2b:f1:36:be:
         ef:10:f4:5f:b2:ef:6c:c9:7e:51:d6:c7:02:15:c4:16:f2:31:
         c2:5e:aa:60:c5:58:c9:7d:42:6e:38:d9:09:d1:26:ce:e8:1f:
         a4:ca:ee:f5:48:48:b8:21:d5:8e:78:f3:09:47:74:ff:eb:56:
         c5:05:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org