Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/VfJBjkGBIzvCAjtVzE6apxMzflE.roa
File:                     VfJBjkGBIzvCAjtVzE6apxMzflE.roa (raw, json)
Hash identifier:          g5nK7FeJ9JdfPhOUyPSGSPYm5sD1NPsrUZtNezDm0Mw=
Subject key identifier:   55:F2:41:8E:41:81:23:3B:C2:02:3B:55:CC:4E:9A:A7:13:33:7E:51
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       93
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VfJBjkGBIzvCAjtVzE6apxMzflE.roa
Signing time:             Thu 13 Apr 2023 09:53:12 +0000
ROA not before:           Thu 13 Apr 2023 09:53:12 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        202.124.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:12 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=55F2418E4181233BC2023B55CC4E9AA713337E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:da:40:fb:45:b5:f8:f1:f5:25:5f:f6:42:
                    2e:a6:5e:b6:14:f6:31:bf:1d:a7:4f:b6:75:09:e2:
                    a7:7b:1b:0b:f9:e5:4f:b5:32:81:38:25:65:35:3b:
                    10:b3:05:35:99:bc:c1:fd:a5:2f:c6:5e:0d:d8:cb:
                    7e:ad:9f:70:57:7c:34:75:31:aa:f7:0b:54:a7:fc:
                    eb:18:ef:ce:5f:99:82:63:35:41:be:bb:a6:f7:fa:
                    e0:25:b2:a0:54:9d:a9:c6:9e:a9:27:64:59:33:10:
                    a7:04:1c:2d:a4:dc:e9:74:1c:8b:cc:26:f5:8d:e3:
                    80:40:8a:7d:2c:bb:90:d3:15:60:95:8d:b8:eb:81:
                    b2:3e:fe:57:ce:ca:a5:08:86:a6:ca:a6:f0:cc:9a:
                    e3:9a:b4:e1:0e:23:bd:77:e5:5d:dc:ee:20:58:88:
                    25:6c:a0:da:7a:7f:42:9e:ac:5c:c7:3c:07:fd:11:
                    b5:47:48:b7:ca:de:56:26:6c:06:75:f9:ca:e2:80:
                    13:8f:10:9d:9a:fe:08:49:88:26:29:a4:42:92:ed:
                    4d:6f:e3:77:c5:9c:b3:d7:6d:36:15:0e:84:fa:bf:
                    f7:28:8f:46:41:e3:65:b0:cb:5a:b6:50:6f:e0:76:
                    a8:46:eb:8c:37:d7:0e:47:71:b4:63:65:5b:37:ac:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F2:41:8E:41:81:23:3B:C2:02:3B:55:CC:4E:9A:A7:13:33:7E:51
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VfJBjkGBIzvCAjtVzE6apxMzflE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:2d:39:49:38:c4:c3:90:bd:be:cc:29:1e:7d:b6:f0:9a:
         a9:1a:04:28:b4:12:a7:18:3b:1b:d1:1c:c9:0a:dd:16:df:f9:
         22:73:7d:71:05:85:81:cf:16:cb:c0:b9:9e:0a:19:63:7d:1d:
         86:d9:9c:a8:35:00:90:38:ee:f6:35:dc:61:c3:46:e5:3f:04:
         09:ce:3c:81:10:f8:34:f8:a4:9f:66:85:d1:c5:bd:70:dc:fd:
         24:d5:7d:d7:7c:1a:43:06:02:d9:af:dd:1c:44:e0:2c:f0:31:
         0d:64:f9:d7:95:59:8f:08:b5:3d:34:ad:54:0f:11:01:ba:c6:
         5e:e0:e9:52:9c:4c:4d:0a:af:a4:e0:78:8a:18:a4:f3:d0:bc:
         e5:bd:cf:25:d9:9e:8b:25:81:6c:1c:17:30:99:44:a6:fc:14:
         62:67:c5:82:85:e1:7f:6e:b6:35:ba:7a:c9:e8:e0:75:77:d2:
         49:ed:f4:55:79:11:25:8c:d4:25:9e:34:b7:dd:6f:f8:20:78:
         d4:cd:44:8e:7e:0d:f7:ce:ab:1a:42:1d:90:b4:65:f6:7d:47:
         7c:b4:37:ef:55:5a:db:57:cc:59:e9:84:36:04:2f:95:f0:ab:
         9d:85:21:4d:05:6c:62:5b:a9:38:ad:6b:44:b0:7d:13:43:d4:
         68:0d:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org