Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/JFxWm68GSKlOXgRjbQZTeWwFe7s.roa
File:                     JFxWm68GSKlOXgRjbQZTeWwFe7s.roa (raw, json)
Hash identifier:          aMPL+5nShYDryWO2UV9SN2zked3I4N7CAkRjtRLi7EU=
Subject key identifier:   24:5C:56:9B:AF:06:48:A9:4E:5E:04:63:6D:06:53:79:6C:05:7B:BB
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       79
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/JFxWm68GSKlOXgRjbQZTeWwFe7s.roa
Signing time:             Sun 01 May 2022 01:30:29 +0000
ROA not before:           Sun 01 May 2022 01:30:29 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        202.124.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:29 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=245C569BAF0648A94E5E04636D0653796C057BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:5a:22:a4:ed:71:45:b9:f0:68:79:c4:40:
                    2a:da:72:90:a1:b4:04:49:50:c4:a2:61:37:fa:19:
                    11:63:1a:f7:cb:b9:eb:f7:2b:3c:c2:15:52:5e:97:
                    c9:40:94:91:65:4d:b3:26:83:b0:f4:b6:d6:a0:67:
                    d0:22:4c:07:8c:25:73:6b:b6:62:91:30:d6:dc:83:
                    54:37:62:c1:52:5d:04:44:50:58:41:60:38:f0:f6:
                    41:f5:67:c7:6a:33:0e:21:55:00:b3:87:39:4b:18:
                    df:66:16:4c:1d:8f:f1:05:77:bc:9f:f0:97:92:7d:
                    b2:b2:01:0f:1a:a7:0f:fe:f3:57:6c:79:5b:99:00:
                    c8:82:52:58:56:7e:36:9e:ed:c1:75:2c:e6:b4:ac:
                    05:e0:0d:31:c4:96:0f:77:ae:cd:58:ee:71:cf:49:
                    d5:a5:3b:d4:25:f1:d8:b4:c4:66:7a:2c:16:d5:24:
                    f9:b5:f8:52:f7:8a:23:20:28:7c:28:e1:2b:aa:8c:
                    06:f9:91:d6:7b:d0:2a:a8:ee:4c:b4:d3:d2:11:60:
                    37:3c:52:7d:0e:05:4a:1c:fe:d0:bb:e5:dc:bc:46:
                    5f:f5:2b:73:36:97:1f:a0:08:cf:25:41:c1:89:9a:
                    d1:33:43:fa:d1:3e:59:0b:40:07:7c:98:ba:d7:7d:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:56:9B:AF:06:48:A9:4E:5E:04:63:6D:06:53:79:6C:05:7B:BB
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/JFxWm68GSKlOXgRjbQZTeWwFe7s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:95:3b:bc:d0:0f:5f:fd:c3:67:fd:5d:31:26:16:18:26:
         58:e2:3b:ea:a1:6c:90:d1:45:d3:1f:80:c4:53:19:0b:2f:13:
         15:a0:b7:01:a3:26:d6:f0:22:9d:b2:70:0a:03:c0:9d:38:90:
         48:bd:19:af:42:ea:40:34:87:16:31:f2:4a:98:fc:a5:a3:3e:
         83:44:81:1e:0d:6d:72:7d:e3:72:81:20:2b:86:ab:91:a0:64:
         eb:9d:fc:d5:37:53:6c:3a:84:03:a3:09:2a:01:c3:39:ea:4d:
         3d:7c:57:79:55:9a:cb:77:be:fe:7a:f4:25:15:44:67:f4:07:
         13:10:97:76:bd:55:42:b8:27:d9:de:16:e8:6a:f7:79:bd:1c:
         5e:c3:4e:cb:97:27:a2:a0:c9:f3:20:90:bd:63:b0:b0:08:49:
         6b:f7:12:28:80:ed:93:88:5c:26:d3:01:5e:40:df:90:c5:5a:
         f5:97:9d:e1:c9:9e:c7:11:60:b2:f2:2b:78:7e:3d:13:0d:19:
         20:9d:98:76:43:81:e9:58:70:cb:d5:56:1c:ba:ba:ea:fb:b1:
         d3:a2:d1:1c:85:88:38:f6:59:e9:bb:6c:5c:78:c0:12:67:6c:
         6b:2e:ad:01:20:9a:3b:92:b8:7f:55:90:f5:43:9b:0a:e1:94:
         f9:82:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org