Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/olWAhBbDIHM9RpUaZLwaW9fRSfU.roa
File:                     olWAhBbDIHM9RpUaZLwaW9fRSfU.roa (raw, json)
Hash identifier:          dyOFjYtD3C+tb5tt/uRXyvzLwXVE96P2uslYZJiVK2E=
Subject key identifier:   A2:55:80:84:16:C3:20:73:3D:46:95:1A:64:BC:1A:5B:D7:D1:49:F5
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       9B
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/olWAhBbDIHM9RpUaZLwaW9fRSfU.roa
Signing time:             Thu 13 Apr 2023 09:53:17 +0000
ROA not before:           Thu 13 Apr 2023 09:53:17 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        14.192.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:17 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A255808416C320733D46951A64BC1A5BD7D149F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:95:ca:49:32:3c:88:89:92:14:17:a0:1a:
                    fa:dc:73:4f:5f:ab:c8:93:d5:b2:44:eb:e4:98:d9:
                    d7:d2:54:00:43:3e:77:5b:38:37:a0:53:3a:fd:73:
                    20:59:1f:9f:e1:29:d6:09:56:fb:1f:c0:5e:79:76:
                    47:41:7f:50:97:f7:85:c1:e9:6b:23:a4:3e:f9:58:
                    48:09:53:36:86:4e:42:7b:94:90:d8:0e:1e:42:ef:
                    33:36:8e:53:4e:f0:20:6e:ad:6e:82:53:f5:f5:14:
                    1b:98:f4:c1:7e:08:0c:64:92:13:6d:f4:d0:ec:cf:
                    ea:34:1c:4b:da:0c:cf:31:6b:81:0a:fe:c2:2d:21:
                    50:bd:91:90:af:73:e3:b9:56:4d:6b:69:45:f6:89:
                    3b:11:e2:21:d1:73:78:37:b6:2f:8f:45:74:38:77:
                    85:20:22:d3:a7:a8:60:91:a1:e5:b5:f9:d2:81:4c:
                    8d:5f:bd:2e:22:20:d9:cb:7b:c0:bd:cb:33:40:f7:
                    9a:02:76:1a:e3:b1:d2:7f:f5:e1:2f:5a:f1:31:00:
                    ec:37:e3:8b:d2:ea:18:f1:9f:a4:62:00:84:1f:57:
                    de:c2:2b:4d:be:58:bb:3c:be:62:e6:80:a0:ce:55:
                    7e:93:9f:61:68:76:c2:9b:cf:ec:34:a1:23:4e:33:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:55:80:84:16:C3:20:73:3D:46:95:1A:64:BC:1A:5B:D7:D1:49:F5
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/olWAhBbDIHM9RpUaZLwaW9fRSfU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:71:15:62:5b:20:ee:ca:78:4d:f4:8a:ec:3b:89:b9:5e:20:
         4a:56:43:43:8a:ce:19:c9:64:e7:8d:f9:2b:b4:fe:0c:d9:b7:
         61:79:e0:d0:6d:69:d2:1d:7b:87:30:ed:50:ae:8a:a9:68:f7:
         a7:aa:a3:7f:83:31:40:20:2d:f9:a2:e3:0a:aa:99:0b:52:e4:
         9b:dc:72:80:f5:5a:57:45:ec:99:b3:5f:18:4c:3e:db:24:e7:
         74:c1:f7:b4:06:0a:67:fe:a8:85:a7:f4:67:9b:ba:5b:fd:07:
         1a:6c:81:ca:aa:e6:b0:a6:c0:c9:77:c7:0f:5b:2e:e6:60:3d:
         66:4c:3f:29:a4:65:b2:7d:6f:7e:09:9f:de:5c:a9:28:9e:93:
         b0:5b:a3:ca:02:ec:0b:1b:d4:e3:e1:d4:4d:53:7e:cc:81:e5:
         15:04:f9:74:40:8a:47:72:94:87:23:d5:3d:3c:31:63:54:ce:
         14:0e:2e:bc:e4:b7:bf:ee:08:e4:40:d9:67:cf:c1:18:95:c4:
         96:01:33:d7:4c:b1:51:26:49:0f:6a:f9:ca:4d:bc:94:84:18:
         64:e2:76:b8:a4:3c:92:e1:2a:f4:7b:2f:cf:7a:fe:67:82:d5:
         a7:1d:60:00:25:09:61:22:3b:31:e7:6e:34:41:a2:94:bd:9c:
         c6:5e:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org