Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GoHI4VmOCXoxWmpQJ5DGNhuVOl0.roa
File:                     GoHI4VmOCXoxWmpQJ5DGNhuVOl0.roa (raw, json)
Hash identifier:          gkWb4QsgFdoK2uzScwsNOALAhMpEw5TcEDetO+Cbavg=
Subject key identifier:   1A:81:C8:E1:59:8E:09:7A:31:5A:6A:50:27:90:C6:36:1B:95:3A:5D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       12
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GoHI4VmOCXoxWmpQJ5DGNhuVOl0.roa
Signing time:             Tue 07 Jun 2022 00:31:00 +0000
ROA not before:           Tue 07 Jun 2022 00:31:00 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4694
IP address blocks:        61.206.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun  7 00:31:00 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=1A81C8E1598E097A315A6A502790C6361B953A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:d6:0f:3e:ce:33:62:8f:6b:17:c8:b8:d9:
                    f0:8b:e3:14:a6:05:18:1e:95:94:78:a7:0d:49:80:
                    3e:d1:35:48:91:d9:fa:84:03:e0:88:d6:58:7f:70:
                    3e:5e:55:e6:40:0d:86:62:c6:bf:3a:14:91:f8:16:
                    02:ec:39:e5:61:37:cb:71:fe:b0:35:e8:07:66:c9:
                    32:36:d9:ea:37:5c:15:f6:41:3a:c6:64:7a:e1:d3:
                    9c:de:e7:1d:05:33:30:b9:a8:1a:8f:bd:3c:f9:e3:
                    e2:3c:3c:66:86:04:1b:b3:01:ec:5e:dd:f1:b0:a1:
                    78:0a:e6:0f:80:3c:e9:9f:20:c4:b0:8a:a8:c0:1f:
                    14:90:cb:9b:5e:b0:b9:2a:fb:43:b3:c5:9d:6e:d7:
                    3a:f1:29:47:64:ba:06:cf:a4:1c:af:69:85:25:25:
                    6f:e8:2c:0e:bf:e1:68:9f:d1:5b:93:98:24:f5:5c:
                    77:ae:17:20:db:56:c5:d8:17:fd:b2:94:51:19:2c:
                    77:35:6c:23:e5:e1:c9:fe:60:5d:30:09:65:10:7e:
                    89:3b:bb:12:66:ea:05:19:a2:3f:a8:9e:c5:fa:5e:
                    ba:dc:f7:9b:c5:26:8e:e4:c7:3e:f8:95:22:aa:4a:
                    fc:88:b6:f3:84:eb:f9:03:ac:0b:bc:54:da:9e:1c:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:C8:E1:59:8E:09:7A:31:5A:6A:50:27:90:C6:36:1B:95:3A:5D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GoHI4VmOCXoxWmpQJ5DGNhuVOl0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:23:8c:18:1f:21:c2:9b:77:b2:75:5b:5a:c3:de:6a:fc:ee:
         d1:e1:0f:42:77:b7:d0:bf:56:06:36:92:5e:72:fe:fa:d4:50:
         53:46:aa:70:e0:04:d0:0f:da:e6:4b:e0:7d:35:23:20:85:ae:
         55:45:f3:06:7f:38:ea:f5:f7:2b:e7:84:79:77:ca:1a:e7:8f:
         7b:95:99:1e:c6:03:00:f4:33:9d:25:80:79:6c:2d:82:48:0a:
         94:ad:1b:8b:5f:e6:7a:c5:77:ce:6b:10:a8:79:8f:6d:e3:0c:
         52:c4:2b:09:e0:ac:9c:ed:0a:39:91:d5:b5:7f:0e:5f:b0:92:
         90:66:00:b1:11:02:98:15:4d:ae:e9:0e:6c:34:09:c6:ec:00:
         c8:f9:d5:80:f2:a9:98:8d:c8:91:a5:c5:46:d2:06:a7:76:90:
         56:fa:fc:50:d6:e7:79:28:ac:92:0c:08:69:80:7d:08:fa:80:
         72:f7:61:24:38:6b:23:ee:04:f0:87:59:fc:3d:d6:ce:b1:8a:
         b2:31:8b:cb:64:b6:5c:9c:30:09:e0:6d:bf:af:70:d2:b2:1b:
         b4:be:5e:73:a4:44:59:c5:b2:a2:f7:22:b7:be:b8:72:84:8f:
         f7:1b:94:53:0f:54:62:ed:4e:b3:ad:dd:aa:f9:2f:cb:7d:9f:
         35:8c:82:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org