Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/h1ks_AN6uZOistWvrN2svOS3pE4.roa
File:                     h1ks_AN6uZOistWvrN2svOS3pE4.roa (raw, json)
Hash identifier:          N8s/3cZ/zIvfyvtIVsD3NC23i9GDW35obWKNwkQeAN4=
Subject key identifier:   87:59:2C:FC:03:7A:B9:93:A2:B2:D5:AF:AC:DD:AC:BC:E4:B7:A4:4E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       29
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/h1ks_AN6uZOistWvrN2svOS3pE4.roa
Signing time:             Wed 01 Mar 2023 23:36:31 +0000
ROA not before:           Wed 01 Mar 2023 23:36:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     4694
IP address blocks:        211.10.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar  1 23:36:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=87592CFC037AB993A2B2D5AFACDDACBCE4B7A44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:d9:c9:ad:5f:af:ee:04:e3:81:75:a9:bb:
                    89:d6:96:5a:ef:7a:35:73:a2:ff:bc:e7:81:1a:36:
                    9b:09:93:a4:13:22:6b:1b:03:ae:4a:30:78:b8:be:
                    25:4c:3f:20:c9:9e:02:55:fe:2f:cb:5a:c1:41:58:
                    c8:67:60:41:a8:d9:4b:61:e0:d2:ef:ff:37:47:12:
                    1a:b6:96:3f:c0:fe:b0:bb:27:b2:ab:99:15:a5:76:
                    51:94:93:49:5b:b4:ca:a7:51:75:68:27:7f:45:31:
                    22:ed:50:02:97:2a:af:03:1c:79:15:14:a0:ac:11:
                    a4:13:06:49:e4:cc:6f:b1:0c:00:e7:f2:41:39:74:
                    2b:98:28:89:c2:79:f7:fb:0d:8b:de:c2:4d:0a:4b:
                    5a:7d:a2:f8:c3:ae:66:70:88:2d:a7:bf:d6:9c:53:
                    a5:05:5a:60:6b:46:10:83:2c:b6:e7:18:37:d2:3c:
                    a9:b4:e9:a9:39:d9:11:2e:61:c1:50:77:2b:92:75:
                    8c:d8:1b:08:b6:ab:f7:d3:5d:d1:87:41:eb:05:66:
                    e1:82:e3:87:9c:2d:42:a6:0a:6e:3a:31:de:a4:1e:
                    61:33:cc:8f:cf:7a:08:34:dd:36:85:aa:09:ef:1b:
                    aa:e2:c6:0f:ab:a9:90:15:9e:19:4b:45:2f:af:ba:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:59:2C:FC:03:7A:B9:93:A2:B2:D5:AF:AC:DD:AC:BC:E4:B7:A4:4E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/h1ks_AN6uZOistWvrN2svOS3pE4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:22:4c:2f:7f:b8:b5:39:da:7c:7e:a8:69:a2:36:80:6f:
         41:a4:4c:31:8b:c6:e2:ff:65:0d:f4:24:8a:fe:e5:37:8f:5d:
         32:05:47:9f:f7:05:02:9d:9b:45:b5:34:33:d7:49:d3:9b:55:
         6a:d0:b0:70:94:17:21:71:5f:8a:f5:91:0d:95:22:39:da:64:
         32:06:2a:50:0c:eb:8c:b0:ac:6a:06:3e:29:6f:38:b7:b2:5c:
         16:7a:e7:de:be:2e:25:88:8b:a5:14:9f:bf:89:b6:b5:a6:0d:
         14:0c:29:ae:7b:ef:4d:7d:00:a0:83:06:c3:2c:e5:eb:2a:d5:
         9f:d5:c2:e3:21:7c:83:52:30:46:8e:fc:22:0c:40:f0:78:79:
         6e:e1:52:f8:a7:9c:6b:2b:73:a0:9d:78:b7:34:89:38:bc:21:
         18:9d:ea:52:94:9c:0d:4a:d2:4c:63:15:ca:51:b2:69:90:81:
         48:f2:5a:d2:fa:81:2b:6b:39:a4:ce:74:64:37:b0:49:cd:5f:
         6a:86:73:eb:51:d9:9e:2d:b4:a0:ac:c0:ba:e8:6f:2a:da:41:
         6b:2b:ba:29:0a:e3:a8:ba:7a:4d:85:ac:2f:02:70:55:28:0f:
         67:b0:0d:70:15:ec:51:f8:f2:23:c0:f7:ad:fc:09:45:cd:99:
         52:51:b7:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org