Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/4k7zW7oGUMmYhubXYXBjlYWhXm0.roa
File:                     4k7zW7oGUMmYhubXYXBjlYWhXm0.roa (raw, json)
Hash identifier:          P1GQJw/eUKEDrgkVn0jj9Yf6XGAn5tp+f1cCapuPFTQ=
Subject key identifier:   E2:4E:F3:5B:BA:06:50:C9:98:86:E6:D7:61:70:63:95:85:A1:5E:6D
Certificate issuer:       /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial:       17
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4k7zW7oGUMmYhubXYXBjlYWhXm0.roa
Signing time:             Sun 01 Jan 2023 01:30:09 +0000
ROA not before:           Sun 01 Jan 2023 01:30:09 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     9351
IP address blocks:        157.70.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
        Validity
            Not Before: Jan  1 01:30:09 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=E24EF35BBA0650C99886E6D76170639585A15E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:94:73:6d:76:fc:52:da:48:75:25:02:31:
                    78:d5:3e:c1:87:f7:17:fb:a1:1e:80:48:69:25:e7:
                    9a:86:0f:2d:6d:18:4a:f9:04:08:90:16:59:97:c8:
                    a4:70:0e:ce:d1:ce:d9:d8:ed:79:36:78:a4:b4:26:
                    78:ff:78:4d:0c:97:82:fb:ab:cf:a9:0c:58:90:16:
                    ad:5b:d6:a4:fa:b3:a3:2d:42:eb:ea:68:45:33:f7:
                    a5:98:80:56:b6:6e:24:18:7c:cf:2a:57:80:b4:91:
                    3f:d4:3d:a9:40:76:3d:c6:21:d1:9d:13:2d:f9:cb:
                    d4:65:33:77:92:d6:8a:96:91:3c:fa:7d:5a:97:2d:
                    e0:30:1a:60:b4:e7:6d:1f:c4:f1:70:e8:b7:bd:8b:
                    f4:6c:ae:f9:1f:5e:e0:06:a1:8f:06:16:07:29:72:
                    0f:a2:03:78:48:40:1c:bb:79:53:06:43:33:32:8f:
                    2a:95:de:db:2c:91:7f:91:a4:f8:75:b1:ee:7c:ac:
                    ff:af:43:5c:3a:20:4f:f7:6b:20:5c:56:10:49:cc:
                    bc:0a:53:94:a8:bc:4a:9b:a4:b5:9c:ba:dc:3b:aa:
                    1c:c0:34:a6:10:61:8b:cf:b2:9a:2e:1b:bd:71:8e:
                    90:29:cf:92:8c:f0:d4:9a:9b:8d:f1:80:12:65:2c:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:F3:5B:BA:06:50:C9:98:86:E6:D7:61:70:63:95:85:A1:5E:6D
            X509v3 Authority Key Identifier:
                keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4k7zW7oGUMmYhubXYXBjlYWhXm0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:df:68:93:45:1e:41:0c:f6:5d:c6:06:70:d9:97:9d:8a:ff:
         7c:13:63:89:d1:2c:34:55:e7:4d:e9:e5:5b:6b:b9:87:35:54:
         97:43:62:99:a4:8a:60:98:68:e2:69:5f:f9:f8:f5:46:f2:94:
         1c:1b:b5:35:b5:34:54:45:44:c5:6d:9f:6b:cb:af:57:d2:b1:
         7d:54:fa:e6:ca:11:6a:d1:2c:9b:1c:5f:c3:79:1e:54:46:bd:
         67:de:c4:3c:d2:5a:c7:28:b6:29:43:72:97:5a:07:e5:f6:51:
         85:a9:88:19:9e:54:d4:8f:d3:01:6d:92:bd:d1:0a:2a:23:f5:
         58:64:ef:ab:39:e2:2c:64:c7:95:8a:a8:ce:90:5c:58:2e:b7:
         37:e8:6c:7d:ae:41:7c:0e:50:41:6e:fc:38:14:bf:55:39:cf:
         0c:57:5a:7c:7b:40:7f:1d:8a:a8:f2:65:a1:e6:dc:02:3a:e2:
         f1:f1:91:f5:dc:08:9b:86:b3:9f:6f:4c:f0:af:d7:db:51:04:
         54:ad:b7:27:4f:74:6d:4f:65:97:e4:e5:7f:62:eb:bb:74:e2:
         2a:12:c5:ea:f6:d5:5d:11:ed:ff:e4:3e:5e:7d:3e:78:61:b8:
         03:d1:2f:e6:cd:92:cb:82:16:ae:f7:08:22:96:44:88:dd:f6:
         ad:b8:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org