Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/u1mFJbbIAYTK6ci6EY8DqAH6QzM.roa
File:                     u1mFJbbIAYTK6ci6EY8DqAH6QzM.roa (raw, json)
Hash identifier:          KWSFtWKvDlpSrOgmzwCsIWYI7spr75IrOtdAQaAby7M=
Subject key identifier:   BB:59:85:25:B6:C8:01:84:CA:E9:C8:BA:11:8F:03:A8:01:FA:43:33
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       06
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/u1mFJbbIAYTK6ci6EY8DqAH6QzM.roa
Signing time:             Thu 26 Jan 2023 04:16:03 +0000
ROA not before:           Thu 26 Jan 2023 04:16:03 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        133.88.87.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:16:03 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=BB598525B6C80184CAE9C8BA118F03A801FA4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:ac:5c:6d:ea:48:b8:0e:ed:36:36:6a:c5:
                    c9:ad:70:47:27:54:a4:f4:ee:0c:2b:b8:c4:fb:ec:
                    22:e6:a0:62:6e:03:16:ce:aa:ba:a1:46:77:38:ab:
                    2d:a2:80:c4:a2:cc:29:b8:6c:cb:75:54:13:1d:9d:
                    cb:32:04:7b:20:fa:d8:89:87:db:72:f1:29:a0:e5:
                    c8:07:04:00:5e:88:ea:c4:e9:c1:31:10:b3:ce:25:
                    85:d5:8a:47:c6:f8:02:77:e6:0b:ea:b8:7d:74:00:
                    6a:4f:bf:81:39:ea:0a:99:72:1a:c8:d8:29:a3:00:
                    80:52:e9:94:02:97:74:9a:49:00:0f:7c:e1:43:4c:
                    73:d4:62:28:8a:a8:50:9e:59:8b:2d:76:1e:78:3c:
                    81:2b:47:a1:1d:d2:a3:21:47:77:01:6d:b1:b9:1b:
                    66:55:46:e5:1b:d1:8f:da:14:9d:4e:72:93:18:8f:
                    d0:26:49:48:b9:cb:4c:c5:10:eb:13:fe:1c:36:f4:
                    82:b2:71:63:ea:20:04:be:30:0b:34:26:03:7a:54:
                    8a:5c:47:0e:4a:15:13:1c:bd:59:6e:9e:79:03:12:
                    b9:c2:2f:e2:93:d6:07:d2:f5:ab:de:43:81:82:6e:
                    80:97:e1:3d:b6:17:5c:e6:12:f2:a0:d1:ae:43:3e:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:59:85:25:B6:C8:01:84:CA:E9:C8:BA:11:8F:03:A8:01:FA:43:33
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/u1mFJbbIAYTK6ci6EY8DqAH6QzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:16:a6:c5:cb:3b:d5:04:23:3f:90:06:53:22:91:b2:ba:2b:
         b4:d0:c6:b9:93:fd:55:3d:3f:78:9a:fe:6f:d7:28:b9:dc:d2:
         74:26:b4:f3:54:0a:72:f2:91:79:d0:90:bf:42:99:49:d8:f3:
         49:5f:c4:8a:d6:2e:35:1a:e7:88:f6:26:9f:43:17:6a:23:14:
         d5:b7:c9:11:22:fc:5f:73:f5:f4:2e:62:0f:2f:61:f5:9f:0e:
         90:87:63:a5:81:2a:b6:03:4c:74:c0:50:f4:7e:c1:38:70:43:
         e1:a6:1e:08:85:4f:6d:7b:b1:6b:60:eb:1a:0d:11:38:32:9e:
         e3:22:80:52:58:48:39:4d:4d:d7:71:b8:10:f1:a9:66:3f:5f:
         46:6e:ea:ce:f7:db:eb:e8:7f:ff:8b:04:bf:27:e7:f5:35:5c:
         4d:76:ab:db:3b:d6:c5:3d:2c:fc:1e:1e:fb:b5:9b:a5:b8:1a:
         42:a1:17:3c:0f:5d:ee:3d:73:9e:70:8c:88:fb:3e:22:51:f1:
         c0:33:b9:eb:2d:72:f9:96:1c:51:d5:a3:12:4c:f1:20:82:41:
         8e:2f:7e:be:65:fd:af:74:63:40:10:26:72:57:43:c8:9e:af:
         46:f0:e7:9d:d2:82:90:02:a4:bd:a7:a5:b8:b7:73:ab:93:f4:
         29:b1:87:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org