Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/43XT8H_jHTapQ7ypLwtv8Z7AHJg.roa
File:                     43XT8H_jHTapQ7ypLwtv8Z7AHJg.roa (raw, json)
Hash identifier:          SRzhvmUBGLljlgWhCQc7+biq1WVMaBKkQ73kqrS7nXY=
Subject key identifier:   E3:75:D3:F0:7F:E3:1D:36:A9:43:BC:A9:2F:0B:6F:F1:9E:C0:1C:98
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       96
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/43XT8H_jHTapQ7ypLwtv8Z7AHJg.roa
Signing time:             Thu 13 Apr 2023 09:53:14 +0000
ROA not before:           Thu 13 Apr 2023 09:53:14 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        112.137.56.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:14 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E375D3F07FE31D36A943BCA92F0B6FF19EC01C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6a:d0:2e:00:5e:b3:53:3c:93:a3:45:c3:7b:
                    2f:f9:e7:d1:b5:f7:93:af:6a:82:b4:03:ea:9e:a3:
                    fd:d2:d8:0b:31:b4:6d:f0:c5:8f:b2:55:a5:41:32:
                    9e:9c:eb:01:3a:0b:e9:a2:0d:ed:39:d5:08:5b:69:
                    fc:49:7a:84:47:61:e7:1e:17:61:02:17:3f:a4:27:
                    59:2b:94:32:1d:cc:a4:0a:b7:b2:37:73:ec:ce:1f:
                    f6:70:36:a2:3e:73:d8:63:2d:55:a7:c0:6d:3b:e8:
                    c0:e2:ef:de:3f:27:b6:7d:49:fa:4f:0a:dc:57:42:
                    f9:14:6e:5b:df:e0:04:9c:13:68:0a:72:0b:5e:ef:
                    76:61:c4:41:71:90:dc:1b:30:75:2b:37:74:0b:aa:
                    04:e6:a9:97:ae:bf:64:ab:38:89:4b:e7:d9:c7:33:
                    f5:75:18:2b:5e:95:71:cd:40:69:7a:0b:39:d9:e1:
                    43:77:e4:66:2d:67:13:fb:a7:c1:ff:eb:7b:61:33:
                    6d:16:aa:a7:1b:fc:68:42:e3:7f:ee:ff:8f:ff:3f:
                    73:ff:1f:be:8f:d6:4d:47:c0:67:fe:6b:e0:3a:0c:
                    19:11:dc:37:b2:51:97:a2:93:89:63:aa:49:a5:91:
                    a0:34:08:a1:06:08:58:3f:01:8d:5a:fa:f7:de:c9:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:75:D3:F0:7F:E3:1D:36:A9:43:BC:A9:2F:0B:6F:F1:9E:C0:1C:98
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/43XT8H_jHTapQ7ypLwtv8Z7AHJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:65:00:04:29:97:1e:e2:36:52:87:05:94:cb:3f:c5:2a:
         e4:ed:0d:58:09:d4:50:8c:3a:20:74:c2:90:4f:e1:f9:d0:bc:
         f6:f9:c2:46:c8:82:3c:86:66:07:b7:70:83:4b:59:90:5a:c2:
         ce:20:25:5a:16:d5:a5:64:ec:59:02:78:be:7f:6a:d7:bd:c7:
         18:c2:23:a0:da:45:00:70:ff:28:1b:63:b6:37:7f:82:f8:bc:
         af:b6:c4:13:dc:92:3f:dc:b9:cf:eb:05:4b:b4:b6:cf:22:41:
         d7:a2:dd:6c:7d:66:e8:df:96:48:8f:a7:a6:71:fa:5a:68:ac:
         f2:01:9e:c6:04:4a:89:d5:16:30:a0:18:8a:c4:9d:4e:02:f7:
         62:3b:42:76:5e:79:53:0e:ab:24:22:47:49:da:dc:6a:80:2f:
         cd:9b:71:cd:1e:db:99:db:37:ae:e9:ac:0f:e0:24:0c:b5:c6:
         e6:85:36:e3:9f:2f:f3:77:84:72:a1:6e:f5:1d:c5:19:e2:ea:
         f3:4e:7b:dc:62:e9:96:de:b1:99:bc:31:72:ad:b5:77:a8:46:
         9a:eb:b8:01:76:16:b9:05:08:6a:b4:f8:90:88:51:a8:cf:9e:
         68:09:05:65:2b:ec:71:66:8f:97:1d:bb:75:78:95:81:44:ef:
         1e:4f:dd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org