Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gi8lyDFQ5XXOT089qMJ3f1w06R4.roa
File:                     gi8lyDFQ5XXOT089qMJ3f1w06R4.roa (raw, json)
Hash identifier:          6175NLEtBOMIOWiETRJyU14Q3RTIcp8vKpkCLRDZZYk=
Subject key identifier:   82:2F:25:C8:31:50:E5:75:CE:4F:4F:3D:A8:C2:77:7F:5C:34:E9:1E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       34
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gi8lyDFQ5XXOT089qMJ3f1w06R4.roa
Signing time:             Mon 01 May 2023 01:29:44 +0000
ROA not before:           Mon 01 May 2023 01:29:44 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4694
IP address blocks:        211.133.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: May  1 01:29:44 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=822F25C83150E575CE4F4F3DA8C2777F5C34E91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:34:01:10:5e:ea:44:57:05:af:61:14:0d:
                    aa:28:bd:53:29:db:77:27:ee:f5:94:6c:95:7e:d4:
                    fe:a4:6a:e8:52:22:e4:d0:79:a8:eb:86:f3:40:95:
                    91:f8:92:c8:b5:c3:96:c2:75:d5:3c:fc:c1:c5:ba:
                    34:99:83:8c:22:0a:10:a9:fb:28:d1:ff:8a:0b:8b:
                    8d:aa:e0:4d:3d:9e:ec:75:fb:bb:25:8c:1c:30:3d:
                    11:a0:1f:90:c9:fb:ee:bc:c8:45:76:74:db:7e:6f:
                    6a:72:d1:62:78:be:d9:a7:d8:3c:8b:cb:06:cd:ee:
                    66:46:de:af:59:16:54:ec:d8:30:b5:1d:9c:6c:82:
                    fb:2a:7c:14:7d:74:50:18:fd:4a:66:7a:84:19:fc:
                    46:e4:ff:43:f5:65:51:96:60:8e:1a:bc:3e:be:a9:
                    24:2c:da:b3:be:b6:01:cb:13:cf:86:af:cb:75:8d:
                    48:96:22:d4:7d:8a:18:60:d6:d8:db:79:5a:55:fc:
                    f4:02:4d:21:df:34:c4:f9:1f:49:cb:96:17:38:81:
                    d5:a7:63:4b:85:2c:c3:b8:17:84:57:3e:a3:c1:4c:
                    1d:be:eb:eb:2e:31:b8:1e:57:e2:bc:3d:9e:2c:a3:
                    53:55:d9:0a:71:f5:dd:26:88:f5:3c:01:ae:e1:e7:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:25:C8:31:50:E5:75:CE:4F:4F:3D:A8:C2:77:7F:5C:34:E9:1E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gi8lyDFQ5XXOT089qMJ3f1w06R4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:7d:76:55:b8:8d:d4:71:9e:05:98:99:54:fe:e3:fa:e5:6d:
         41:6a:bd:3e:19:ae:e9:b3:d1:40:a9:1f:66:c9:94:2d:bd:54:
         20:25:25:5c:c6:d2:14:2c:36:63:a9:7e:97:c2:80:e7:b9:ed:
         c8:e1:d9:e6:f5:0b:41:b7:4a:a3:8e:3b:0f:87:73:cc:8d:80:
         05:97:6b:c9:62:74:2a:f6:c2:28:69:46:87:dd:a7:bb:48:5c:
         e9:e1:90:2f:7f:f3:8f:2a:12:c2:43:2c:47:83:30:63:a6:a2:
         8a:ab:16:8e:c4:91:39:bb:20:9a:44:08:18:f7:26:b2:af:a5:
         05:fd:54:87:5f:63:90:f9:64:3a:90:bb:79:6f:c9:1f:17:34:
         be:21:ae:74:e4:9c:39:b7:04:c4:81:43:88:2e:d2:9a:b5:31:
         74:ad:35:e0:49:75:41:03:77:42:a8:7b:b3:e9:b5:4e:f0:1b:
         26:de:4d:cd:44:8b:b4:89:fa:90:e4:a4:5e:ff:6b:79:64:4e:
         0a:c7:ce:8e:e8:a1:08:1a:f5:23:1f:8a:83:41:bd:c1:12:30:
         f9:28:f3:9f:27:55:06:8c:83:b2:ea:0e:eb:a2:b9:74:d9:e8:
         3c:bc:a9:fc:9d:f5:32:f1:ec:cd:41:c5:fd:4c:91:7b:bb:cd:
         92:32:77:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org