Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/gXpIOIocYVT6SVVGrqIYKjZbUvY.roa
File:                     gXpIOIocYVT6SVVGrqIYKjZbUvY.roa (raw, json)
Hash identifier:          PYiVKXKdqJGkdkqry03m3PBbmUrEsmvMAb4aN3XJ8K8=
Subject key identifier:   81:7A:48:38:8A:1C:61:54:FA:49:55:46:AE:A2:18:2A:36:5B:52:F6
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       80
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gXpIOIocYVT6SVVGrqIYKjZbUvY.roa
Signing time:             Sun 01 May 2022 01:30:32 +0000
ROA not before:           Sun 01 May 2022 01:30:32 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        202.150.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:32 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=817A48388A1C6154FA495546AEA2182A365B52F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:72:54:34:30:b8:30:c2:dd:f6:da:a1:a6:
                    34:22:26:df:fd:af:2b:67:05:96:e6:de:49:84:2e:
                    06:72:7b:4c:3d:d3:a2:61:da:82:09:fc:93:fb:01:
                    19:86:cd:4a:81:6d:2a:6b:93:6f:3e:d6:65:75:5a:
                    d0:b5:ca:98:a6:a5:09:06:92:4c:8a:d0:58:0b:c1:
                    a4:92:53:85:22:18:16:be:81:1d:3b:39:ab:02:a4:
                    40:66:69:39:a6:90:6d:85:bd:4f:2c:30:16:f1:b3:
                    2e:27:77:2e:94:9d:2a:76:50:0a:2c:59:8c:66:74:
                    ef:de:c9:37:95:f4:45:31:28:85:84:df:74:2f:bc:
                    5c:fa:ae:da:84:42:77:5f:fc:3c:81:39:d9:bb:de:
                    ee:75:56:df:85:01:f7:bf:29:0f:59:88:1d:c8:56:
                    ae:a6:60:ac:14:1d:e1:08:50:cf:1c:0a:19:3f:59:
                    b7:7c:52:c1:21:14:d4:be:63:90:ab:37:e6:c0:ed:
                    9e:8a:68:9b:4c:90:d3:7e:71:41:7e:77:c3:e2:d1:
                    61:56:bc:73:cc:7f:f4:48:cb:0f:3a:7e:1d:17:ef:
                    e2:20:b9:9c:f6:61:80:68:a9:51:36:b2:3d:79:7d:
                    08:21:4a:8b:62:33:e9:c2:19:96:00:4c:9f:79:5c:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7A:48:38:8A:1C:61:54:FA:49:55:46:AE:A2:18:2A:36:5B:52:F6
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gXpIOIocYVT6SVVGrqIYKjZbUvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:35:3d:6b:54:54:9e:e3:f0:07:47:08:ad:e6:40:60:4c:
         95:85:cb:6f:66:51:74:bc:45:f0:2e:cc:6a:23:9c:9e:7f:e1:
         d0:23:0c:5c:31:bd:f4:39:27:25:58:08:c3:58:e7:a8:e6:eb:
         86:0d:62:88:79:c6:0d:08:54:05:38:c9:bb:a5:49:bc:6a:ae:
         2b:5c:b4:ad:94:c4:c4:ad:b3:9d:47:d3:0e:5b:d7:43:7a:4c:
         0e:5d:62:45:17:a6:a7:3b:4c:db:88:fe:7d:19:98:6f:d9:72:
         66:9d:b6:98:06:49:c9:28:9d:1e:af:1b:99:85:0b:3b:d1:d9:
         a1:7f:8b:3d:4d:c4:ab:ac:98:a4:19:d9:9c:e8:86:e1:88:18:
         85:42:7f:03:f1:97:49:78:79:48:21:1e:87:03:1e:35:a4:59:
         55:2f:57:b2:f1:59:61:df:a9:ea:ee:39:0a:fc:64:5d:24:5b:
         8d:06:ca:f3:9f:68:55:80:58:be:31:d0:0d:43:f2:0a:b2:d9:
         e6:bd:bb:45:4c:8b:bd:f1:8e:27:8d:60:68:55:ea:71:59:d7:
         ec:9e:8d:3c:a8:a5:5a:47:d3:ec:3e:5c:8b:7e:a4:13:a8:4e:
         06:61:6c:dc:97:8a:ce:8c:5b:63:40:37:79:70:ba:87:f8:f0:
         b2:ee:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org