Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/5m29RMm1ROwzUvQ1Hf2B-4Pefpo.roa
File:                     5m29RMm1ROwzUvQ1Hf2B-4Pefpo.roa (raw, json)
Hash identifier:          /978H3AHd9+BBwPcXa+ulcd/B+Z1H038RhzLH5NV3zA=
Subject key identifier:   E6:6D:BD:44:C9:B5:44:EC:33:52:F4:35:1D:FD:81:FB:83:DE:7E:9A
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       39
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/5m29RMm1ROwzUvQ1Hf2B-4Pefpo.roa
Signing time:             Thu 13 Apr 2023 09:53:56 +0000
ROA not before:           Thu 13 Apr 2023 09:53:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63774
IP address blocks:        202.226.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: Apr 13 09:53:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E66DBD44C9B544EC3352F4351DFD81FB83DE7E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e3:bd:7a:ef:50:fa:dc:bf:36:12:c3:06:6b:
                    8d:e7:9e:f9:fe:7b:58:3c:b4:b0:5b:1a:94:12:9a:
                    65:ae:22:90:ce:52:8c:f6:73:9c:4b:65:9e:0f:63:
                    2a:73:57:3f:84:47:b8:e4:7b:89:39:78:7e:2f:c5:
                    14:31:dc:13:e0:13:7c:79:0e:45:dd:88:db:f0:83:
                    6a:b3:a1:6b:86:31:9a:21:e6:25:82:b8:21:33:04:
                    4c:05:1b:37:e5:27:64:56:80:69:0c:2f:f5:f5:14:
                    7f:cd:fd:40:ee:6a:5f:b5:fb:a9:08:7c:36:c5:17:
                    09:1e:8c:39:05:f5:6f:99:02:80:8e:bf:0e:85:cc:
                    60:23:f7:62:57:f4:eb:12:51:27:42:f7:41:57:94:
                    62:ee:ae:31:42:59:79:a5:b5:0f:27:21:e7:eb:c3:
                    34:a6:68:19:90:22:1a:ae:e8:fc:df:a0:6e:71:fa:
                    1d:17:2a:68:aa:14:68:2e:c9:2d:d8:10:04:57:93:
                    2c:3c:c8:1b:7a:f0:58:7e:a8:1a:f0:03:3f:22:c5:
                    e8:83:25:c7:0e:ff:de:62:b7:07:7e:2e:33:12:ca:
                    72:6a:71:ec:4a:8f:aa:0a:71:ab:02:cf:45:54:38:
                    39:e5:7d:e0:6b:b7:19:48:a1:24:1f:d5:64:2c:f3:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6D:BD:44:C9:B5:44:EC:33:52:F4:35:1D:FD:81:FB:83:DE:7E:9A
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/5m29RMm1ROwzUvQ1Hf2B-4Pefpo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:db:13:6f:df:a5:a0:c1:1e:73:94:25:a5:8c:cb:af:07:
         32:0c:33:37:b6:c3:c8:01:2f:02:a1:55:4b:8a:e0:ee:1c:19:
         5b:22:1e:73:85:12:6c:bc:2a:57:1d:06:02:c9:d7:ac:31:9d:
         3f:67:f0:9e:bc:b7:f5:39:28:82:05:ba:5c:d5:47:2a:19:e8:
         b3:07:eb:7a:d0:c6:38:e8:38:ef:bf:47:d8:52:3f:4b:3f:95:
         10:ca:74:30:7b:c9:92:05:d8:82:ea:0d:d5:28:c1:e8:fc:1c:
         d5:87:1b:9b:25:24:65:b1:d2:59:49:33:d3:73:28:15:cd:1c:
         5b:36:a1:86:ff:95:35:85:46:8f:36:d7:64:6f:6c:3e:8e:7c:
         7d:48:05:3c:03:a5:74:e6:10:cd:d9:68:01:51:53:46:91:9c:
         2f:d3:ab:aa:97:94:fc:c9:0d:bb:15:74:b9:11:a4:b0:6b:37:
         43:a2:73:14:41:e8:77:cd:85:c3:bf:6d:be:7a:72:aa:ea:9b:
         89:e0:33:74:2f:ee:79:38:f7:66:18:fd:6d:90:d3:9e:9e:97:
         79:37:32:58:a1:e9:50:c8:4e:0b:56:c7:e6:22:5f:99:ae:ec:
         f1:4f:36:1b:e4:bb:2c:32:71:56:ca:1a:dd:9d:93:79:4f:d2:
         f5:4d:a8:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org