Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/qj09YbnQeGj_1D6wN5yNCRw9iNc.roa
File:                     qj09YbnQeGj_1D6wN5yNCRw9iNc.roa (raw, json)
Hash identifier:          G15CnZJMtdyHYxowPlidfzJWBbldWw76xeMeg8wsVVM=
Subject key identifier:   AA:3D:3D:61:B9:D0:78:68:FF:D4:3E:B0:37:9C:8D:09:1C:3D:88:D7
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       0B
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/qj09YbnQeGj_1D6wN5yNCRw9iNc.roa
Signing time:             Thu 26 Jan 2023 04:19:52 +0000
ROA not before:           Thu 26 Jan 2023 04:19:52 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        218.45.64.0/19 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:19:52 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=AA3D3D61B9D07868FFD43EB0379C8D091C3D88D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:9f:9a:b4:2e:a1:29:46:59:fd:e8:f2:c4:
                    d3:df:f9:4b:2f:78:b1:3e:5a:7b:cf:13:4f:01:d5:
                    fa:d4:67:98:1c:13:e8:5d:f6:2d:3e:0b:f3:e0:a7:
                    f7:83:a4:fb:ba:89:6a:ab:a0:8c:44:c7:25:fa:0b:
                    d0:f6:64:09:72:85:17:e5:59:d8:52:0c:0e:13:08:
                    7c:57:f4:9c:6c:9a:46:e5:5c:e5:b7:69:e6:ce:91:
                    75:55:2d:6b:2c:6b:f7:5d:4e:57:5d:33:87:8c:51:
                    48:fe:5f:36:55:67:db:c6:dd:f9:1f:ad:ac:cd:0a:
                    67:0a:8d:af:cf:c9:31:82:60:5d:ae:3c:ca:bc:6a:
                    be:9a:0a:c8:ed:ad:de:52:a0:94:1f:86:0a:cd:3f:
                    bf:86:a2:9a:2c:47:b5:7c:e3:3e:59:12:08:5a:4f:
                    20:e2:23:f8:78:01:a7:22:57:87:aa:8b:da:ed:3d:
                    88:f2:f5:14:58:41:a7:7b:3f:c6:6a:6b:16:4e:c6:
                    d8:81:ff:1f:04:25:3e:5d:d4:b2:11:b0:b7:06:01:
                    96:a0:3d:1c:29:61:db:e8:bb:64:b7:72:f8:fd:6d:
                    be:2d:45:ff:f4:a4:40:6c:18:db:33:37:99:f3:52:
                    ae:20:25:2e:4e:c0:46:2c:ae:2f:cc:35:e6:c4:11:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3D:3D:61:B9:D0:78:68:FF:D4:3E:B0:37:9C:8D:09:1C:3D:88:D7
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/qj09YbnQeGj_1D6wN5yNCRw9iNc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:37:b0:93:e0:d7:53:52:df:a1:da:3c:ab:4b:bc:d5:24:dd:
         4f:00:1a:ec:08:6e:12:b8:b7:b4:a2:18:f1:ac:93:4d:ca:48:
         bf:7c:67:48:5e:05:96:f8:43:2a:33:37:61:65:a6:e3:be:87:
         5a:89:f8:2a:51:55:1d:ca:a2:ff:40:dd:41:97:2f:3f:f8:be:
         09:ae:b6:8d:c8:ef:50:36:d0:3a:f0:32:b4:2a:b0:89:f6:10:
         8b:74:f0:b7:0f:83:c6:4c:f0:fa:6d:8b:40:4e:72:c8:94:28:
         71:09:e9:be:17:b5:62:f8:42:f6:e8:0e:c6:0e:f0:cb:c3:40:
         00:a7:c9:ef:7f:2e:fe:58:20:b1:62:6e:73:f9:e6:01:78:ac:
         a1:bc:c1:af:e1:41:97:38:a6:13:f4:92:6d:48:49:63:07:6f:
         69:00:1d:e1:e2:65:32:20:99:39:c8:02:cd:96:c0:8a:6f:9f:
         e4:4d:f2:77:4b:6f:95:3c:68:fe:36:ba:e9:8e:70:ef:7b:72:
         9c:5c:14:ad:25:91:80:5c:1e:a5:4e:1c:de:35:9f:7b:52:bd:
         a8:39:55:87:81:0c:8e:a8:0e:b8:99:1b:2f:21:e3:25:88:bc:
         a4:16:c5:39:d9:1e:19:81:2d:92:19:05:31:26:28:6e:e1:4c:
         ab:db:63:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org