Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dwx_fdc_zjhIfbi_d15y138-QM0.roa
File:                     dwx_fdc_zjhIfbi_d15y138-QM0.roa (raw, json)
Hash identifier:          bqlulWKu14ap1nb0I7li4dPq59TyeZRTAgLaNJme94I=
Subject key identifier:   77:0C:7F:7D:D7:3F:CE:38:48:7D:B8:BF:77:5E:72:D7:7F:3E:40:CD
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       23
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dwx_fdc_zjhIfbi_d15y138-QM0.roa
Signing time:             Wed 01 Mar 2023 23:28:24 +0000
ROA not before:           Wed 01 Mar 2023 23:28:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     4694
IP address blocks:        61.115.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar  1 23:28:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=770C7F7DD73FCE38487DB8BF775E72D77F3E40CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:ec:f0:b4:36:87:52:60:fc:22:6f:75:92:
                    fd:11:65:37:b4:69:0c:a3:a2:97:13:fd:85:3b:36:
                    be:4c:bc:4b:d0:12:7f:0d:21:a1:b5:76:c0:a7:8b:
                    47:27:b8:fd:3d:3c:20:b6:7f:18:ae:0b:00:b4:54:
                    28:67:f1:8a:47:d3:1e:87:b3:14:91:24:19:bf:b4:
                    c5:95:2f:24:a0:13:83:ec:f5:e2:54:af:22:d8:89:
                    8d:b6:c6:ee:cd:ff:c2:1d:2e:f8:c9:39:71:7f:5a:
                    86:3c:d0:4c:b1:20:49:ee:dd:a1:c1:fb:67:a5:70:
                    4c:1e:b0:da:1b:cb:c1:61:75:75:59:af:99:97:70:
                    8d:82:6f:d0:a4:a0:66:39:3a:23:42:c0:b6:fe:d1:
                    f0:f5:6d:63:94:b7:4d:77:1e:4e:cc:93:96:bc:de:
                    e6:66:0b:c6:17:0b:ac:90:51:de:0d:3e:2a:a2:5f:
                    c6:e6:c8:5f:b3:4f:76:c6:36:38:ef:15:e6:01:19:
                    e7:1b:69:e6:5d:ab:8d:f9:d1:f1:91:20:99:1d:1b:
                    c1:54:89:86:92:5a:a0:c6:60:0a:e1:86:10:83:f9:
                    bd:3d:95:2f:1e:ac:1c:0c:79:b9:93:94:b1:3e:1d:
                    47:8e:7b:dd:9a:ff:64:00:55:73:e1:13:da:81:3e:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0C:7F:7D:D7:3F:CE:38:48:7D:B8:BF:77:5E:72:D7:7F:3E:40:CD
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dwx_fdc_zjhIfbi_d15y138-QM0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:6f:2d:a3:7b:7b:d4:f7:eb:55:e8:c4:e5:a0:d6:6a:49:
         ee:d9:77:a9:cd:cf:0e:0d:ec:d6:b6:9f:7d:78:c1:f8:f7:62:
         a6:83:e6:5e:97:4a:ff:f9:7a:e0:de:b3:d7:91:b4:99:92:2d:
         d3:10:fb:ad:1a:0d:ed:cc:23:5e:f9:a6:29:92:de:39:71:d6:
         72:e6:ea:5c:60:37:f7:49:69:70:b9:4b:bb:40:9b:4a:89:ce:
         48:70:2b:27:af:42:8b:31:4d:13:8e:71:a1:43:7d:b1:f7:61:
         f2:df:08:06:ab:ee:26:24:10:78:40:25:59:86:0c:5f:89:6b:
         b8:6e:be:7f:c9:ba:f3:c2:3d:3b:56:fa:0a:ec:8b:4a:32:ab:
         5b:d7:e5:4f:39:ac:94:31:48:ac:85:2d:4f:57:a4:db:47:a0:
         f6:e4:04:9d:d1:32:bf:fa:2d:1e:89:be:71:32:69:fc:ff:e9:
         53:d7:1a:27:50:d4:3a:64:ad:dd:ea:2c:c2:33:5b:98:b6:3c:
         51:25:b1:8c:9c:d5:46:43:02:d1:6a:c4:6f:09:1b:c9:45:8e:
         55:45:59:b1:e6:cf:e7:84:69:ec:f2:e5:3e:85:09:6a:93:e1:
         83:0c:f2:a9:3e:81:a0:ff:f0:aa:a7:a5:c3:86:ec:29:75:36:
         32:06:7b:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org