Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/pdIznWP2kO7G0XkXzuMFU7eJ38c.roa
File:                     pdIznWP2kO7G0XkXzuMFU7eJ38c.roa (raw, json)
Hash identifier:          A2rXpT6e8y7LyjVvd4S3qe4UmfRcCUPTZT6XYYVfhwU=
Subject key identifier:   A5:D2:33:9D:63:F6:90:EE:C6:D1:79:17:CE:E3:05:53:B7:89:DF:C7
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       30
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/pdIznWP2kO7G0XkXzuMFU7eJ38c.roa
Signing time:             Thu 01 Sep 2022 01:28:49 +0000
ROA not before:           Thu 01 Sep 2022 01:28:49 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        219.100.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Sep  1 01:28:49 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=A5D2339D63F690EEC6D17917CEE30553B789DFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:80:6e:f3:f6:99:d8:fc:b4:14:b3:08:06:
                    c9:7d:c1:7b:86:e0:6b:0b:ee:36:8c:b1:e5:88:4b:
                    0f:ea:a5:ed:78:53:4d:97:76:9a:29:b7:d4:a3:c2:
                    09:3b:40:06:b7:9c:2d:3e:2d:73:e8:72:db:4d:c3:
                    43:79:33:36:3e:d4:a2:e2:c2:47:a4:2c:e9:e5:a1:
                    91:02:03:05:4f:b5:f1:c5:98:4a:b9:91:9c:72:09:
                    5e:ae:d2:92:89:63:4a:2d:33:94:f3:c6:62:b1:84:
                    40:ac:c6:7c:52:62:be:27:a0:1a:5b:d0:64:b9:3b:
                    50:c7:b6:21:48:32:f7:ef:18:7b:97:53:a9:c1:61:
                    19:8c:42:63:6f:44:8f:cf:2e:ab:92:15:4e:61:c1:
                    0e:19:fd:17:2d:a5:4c:2c:92:5a:e0:a5:87:70:10:
                    44:a0:d5:8f:a6:bd:15:f6:68:a7:dc:b4:4f:a6:c9:
                    d3:8c:96:cb:b8:b0:75:1c:f7:91:39:72:66:23:3a:
                    10:89:cf:d8:1c:02:db:25:fb:31:5f:c4:6b:4b:ba:
                    11:1a:4d:a0:a2:a1:80:b2:cc:f9:c0:c4:71:06:3f:
                    8a:4e:e5:c8:52:87:14:96:a0:a7:45:a6:23:58:65:
                    55:e5:9b:fd:cc:88:21:ca:ff:18:9d:90:bd:6b:86:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:33:9D:63:F6:90:EE:C6:D1:79:17:CE:E3:05:53:B7:89:DF:C7
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/pdIznWP2kO7G0XkXzuMFU7eJ38c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:f3:ae:11:45:8b:c2:8b:ab:28:8a:4d:20:cb:ab:23:65:
         a3:0f:c4:58:c2:9c:07:70:3b:71:53:d5:0c:fe:f3:9e:90:60:
         2a:f1:e2:9c:51:8c:fe:2d:49:3e:ad:38:b9:2a:73:22:b9:fc:
         1b:ec:7c:34:c4:0f:8e:ff:21:3d:59:7a:b0:a6:8b:8d:83:a7:
         71:c0:d8:d4:16:09:0d:2f:62:b9:fa:d2:2a:fa:a4:22:8a:33:
         ff:3c:2e:c9:36:bb:e5:64:77:40:dc:ff:7a:84:77:3c:e7:68:
         37:16:25:0b:e6:4c:17:40:8c:8f:d3:10:5b:bd:c6:79:27:f4:
         94:1e:91:44:e6:43:4f:b9:8e:fd:d3:21:42:12:95:f2:d8:a5:
         02:ae:92:f8:ab:e9:2a:56:29:c8:13:fd:7a:2e:b8:2d:0c:02:
         88:27:8d:ca:d5:63:1f:65:b6:96:1f:e5:65:b6:57:b5:6f:ff:
         83:37:f8:81:d2:bd:1c:37:93:cc:2e:5d:b5:b7:18:f1:62:37:
         cb:f3:aa:f4:68:eb:a2:54:82:a8:83:2e:97:bf:d5:5b:01:8d:
         6f:b2:28:f4:df:43:db:ac:63:26:4e:43:b5:63:4d:70:cf:d9:
         00:7e:f9:49:a0:97:ac:77:f5:ac:de:59:a5:b0:a6:c7:9e:16:
         50:d7:26:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org