Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/v9SB2EnLNXZ06tnwnciM__1LOHk.roa
File:                     v9SB2EnLNXZ06tnwnciM__1LOHk.roa (raw, json)
Hash identifier:          wKkIuJ/tD+G9EI0w8/Xo66+mf7yK73x2AXiyJNR2FRU=
Subject key identifier:   BF:D4:81:D8:49:CB:35:76:74:EA:D9:F0:9D:C8:8C:FF:FD:4B:38:79
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       97
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/v9SB2EnLNXZ06tnwnciM__1LOHk.roa
Signing time:             Thu 13 Apr 2023 09:53:15 +0000
ROA not before:           Thu 13 Apr 2023 09:53:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        203.209.176.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BFD481D849CB357674EAD9F09DC88CFFFD4B3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:7c:fa:3e:29:e2:80:96:9a:51:ee:c6:78:
                    e3:c5:78:80:ff:1f:a9:d8:1b:62:c9:a3:9f:d1:11:
                    47:6a:bd:1c:6a:e2:01:91:22:7a:1c:54:e0:ab:c8:
                    4e:e5:8d:f3:69:f4:dd:a0:8d:f6:cc:56:c0:24:fe:
                    a0:06:5c:62:1f:5f:27:4d:49:07:a9:10:69:15:8b:
                    60:1b:b0:dc:d6:29:0c:9d:28:1b:38:6d:5d:5f:ad:
                    fb:1e:9e:2b:ab:1e:11:6f:59:4c:f7:ce:f9:a9:8a:
                    33:16:10:d3:30:db:fb:44:85:8c:c9:65:0f:ac:1a:
                    df:96:15:e6:db:47:4a:ad:94:7b:22:07:df:51:9b:
                    00:1c:8d:fc:2a:f8:07:15:8b:0f:cd:12:ca:bf:4f:
                    7f:10:a7:d5:e1:71:ef:f4:c8:30:9e:a4:32:d8:14:
                    f5:7e:28:2e:a4:93:db:f9:ec:83:a4:b1:45:41:41:
                    2d:f3:cb:6e:12:bd:e2:b6:28:e4:83:96:fb:90:2e:
                    b8:a2:06:58:c9:28:9a:6f:f1:ea:d9:54:bb:c0:f5:
                    a4:ea:4a:1c:63:d6:0e:18:79:c0:88:7a:30:aa:63:
                    fe:7e:93:45:0d:7f:b9:45:1b:88:58:2d:f6:11:9b:
                    08:e4:40:33:4a:c1:29:c4:e2:60:3d:19:5c:ee:b1:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:81:D8:49:CB:35:76:74:EA:D9:F0:9D:C8:8C:FF:FD:4B:38:79
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/v9SB2EnLNXZ06tnwnciM__1LOHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:53:49:cc:23:91:5f:b2:3d:a2:23:47:fc:56:f5:56:78:
         67:4b:42:42:80:d5:34:c0:d5:8c:3c:79:01:4e:c9:af:51:f4:
         dc:9d:06:23:77:85:c8:a5:cb:dd:f1:9d:6d:65:bc:c7:2d:c5:
         0f:de:b2:5a:fc:e7:a3:68:28:25:7c:70:b6:6a:a0:34:32:19:
         71:6e:31:18:f4:97:db:e7:65:37:dd:cc:94:e6:f0:78:51:08:
         51:52:a6:98:82:63:a3:8c:27:0a:e4:d1:f1:09:08:8f:6b:20:
         7a:b1:d0:c8:8e:ff:4e:06:77:2b:d1:41:6b:6e:92:c6:28:70:
         5f:7c:fc:a3:86:eb:b8:b2:4a:13:30:28:9c:6f:9a:c7:f1:1b:
         e5:7c:f6:ef:14:6d:31:fe:5c:dd:f6:5d:0a:5b:af:4c:bb:a0:
         6e:6a:e6:22:59:37:98:d7:9a:32:98:3e:23:5c:c0:c6:73:50:
         89:d9:c4:bd:1e:c1:bc:3e:10:55:1f:06:53:25:fb:2d:05:80:
         20:74:fe:9a:18:f4:ec:5c:3d:43:74:30:de:a7:3b:41:87:bb:
         d6:e6:b1:5f:b2:26:fb:e5:93:db:b1:a5:50:22:7b:7d:db:ec:
         7f:0d:e7:67:67:c0:3d:c5:d0:52:2b:08:0b:e1:d4:56:2d:5b:
         e3:89:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org