Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/MiUr6J_KbKRT9u9vvHtEILbRYmw.roa
File:                     MiUr6J_KbKRT9u9vvHtEILbRYmw.roa (raw, json)
Hash identifier:          YvRYo/4igaHM6fV3tuyglkGnt0MFTJB+qs+kjbJ83G8=
Subject key identifier:   32:25:2B:E8:9F:CA:6C:A4:53:F6:EF:6F:BC:7B:44:20:B6:D1:62:6C
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       25
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/MiUr6J_KbKRT9u9vvHtEILbRYmw.roa
Signing time:             Mon 01 May 2023 01:29:35 +0000
ROA not before:           Mon 01 May 2023 01:29:35 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: May  1 01:29:35 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=32252BE89FCA6CA453F6EF6FBC7B4420B6D1626C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:8e:6b:6f:14:71:53:66:59:a9:ec:e1:81:
                    0e:ec:73:9b:64:26:a2:7c:77:55:f5:bb:02:f5:77:
                    ac:24:43:63:2f:f7:d4:bc:40:db:f7:63:33:cb:44:
                    29:3b:14:04:59:1c:c6:d4:5c:50:14:13:9b:e0:e6:
                    cc:cf:bc:72:78:a2:78:52:2f:c3:8f:61:4c:06:e9:
                    f7:56:85:6b:27:bb:f8:c1:1e:2d:2e:6a:4f:95:16:
                    0a:d3:22:86:60:41:93:fb:77:2e:f9:87:c4:3d:21:
                    aa:85:35:cb:69:cb:44:0c:3a:3a:0e:d5:83:16:8f:
                    b7:e1:80:c8:86:83:dd:e5:68:d8:8f:b4:fe:d1:7a:
                    47:0a:2f:e3:f0:1d:5c:d7:01:67:fc:f5:44:d8:59:
                    24:c1:e3:1d:5d:8d:06:f4:dc:a5:09:48:25:b3:1f:
                    3d:62:ec:6c:41:c9:d4:39:e9:d0:82:cb:53:5a:5d:
                    18:60:fb:db:14:e7:bb:2c:15:7f:ee:76:57:68:78:
                    a9:fe:6d:63:0e:e8:4d:de:bf:3d:69:e3:09:c3:bb:
                    58:c7:4e:31:47:7d:cf:fa:f0:4d:7c:2f:7b:57:55:
                    88:98:0b:05:1c:c5:b3:78:fd:6b:4b:60:65:d4:f6:
                    64:7c:e9:ea:96:03:99:d1:a9:06:5d:6e:39:55:f3:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:2B:E8:9F:CA:6C:A4:53:F6:EF:6F:BC:7B:44:20:B6:D1:62:6C
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/MiUr6J_KbKRT9u9vvHtEILbRYmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:45:be:41:9f:4a:9f:f5:83:9b:c5:54:c9:b2:fc:3b:4d:6f:
         f2:86:3f:93:63:5c:02:f8:85:ec:4e:b1:b1:af:64:de:d2:03:
         6e:3a:dd:f7:b6:b7:0a:f4:6f:37:97:3e:08:2c:30:87:43:60:
         93:a6:25:96:ee:bd:8f:5d:8d:03:8b:02:fd:06:35:1c:c2:50:
         f4:ab:42:c7:7f:88:d1:57:83:57:0a:ba:3e:a2:d8:47:41:b9:
         bc:39:da:01:43:a9:af:c9:98:b4:02:8c:f1:d6:15:73:24:bd:
         78:6c:84:60:56:7b:d1:05:c2:64:ee:3f:cb:fe:44:03:ec:15:
         78:8c:b5:0f:5f:e1:43:e2:24:be:dc:0a:09:b1:2c:f2:44:58:
         11:01:4a:b7:58:7d:33:b9:27:0a:0a:55:0f:dc:df:d3:98:c9:
         19:c3:87:48:c2:2c:77:b2:49:71:a3:1c:d2:49:c7:f9:11:2b:
         99:31:b7:e6:3d:75:6c:43:b4:40:57:6e:2a:18:cd:5a:46:f9:
         ae:2a:71:42:93:30:ae:16:36:4d:01:fb:ec:4a:b8:96:fe:d0:
         0a:a3:46:c8:16:11:4b:87:79:af:25:4f:d8:47:c4:80:54:76:
         e7:82:66:7a:fb:32:b0:ef:a3:ef:97:0a:c9:17:f9:66:dc:07:
         20:62:85:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org