Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/8EhBxTJk9IYNttJH1DCm45GQ-Jc.roa
File:                     8EhBxTJk9IYNttJH1DCm45GQ-Jc.roa (raw, json)
Hash identifier:          dl1ZZxl4HwNPFZ15YUowi3IHdIvk1Es8ock+MtQSWg8=
Subject key identifier:   F0:48:41:C5:32:64:F4:86:0D:B6:D2:47:D4:30:A6:E3:91:90:F8:97
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       45
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/8EhBxTJk9IYNttJH1DCm45GQ-Jc.roa
Signing time:             Thu 01 Sep 2022 01:28:59 +0000
ROA not before:           Thu 01 Sep 2022 01:28:59 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     9351
IP address blocks:        150.91.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Sep  1 01:28:59 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=F04841C53264F4860DB6D247D430A6E39190F897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:82:d0:0f:b1:87:67:78:27:b7:f2:d6:e9:
                    23:d0:58:47:08:85:90:d2:c6:44:cc:b4:65:80:a9:
                    07:c9:30:58:f6:8e:74:bb:b2:69:df:0c:17:9c:75:
                    13:e6:a7:60:3d:b0:33:ca:2f:ad:6b:57:29:02:0a:
                    d3:02:3d:de:5c:14:17:f5:39:b4:d5:20:30:db:cf:
                    dc:f3:4f:d6:2a:59:5d:c0:e2:2d:67:cb:5b:89:8e:
                    00:82:84:61:85:69:fb:30:17:e2:2b:26:d6:fb:1a:
                    df:f4:0c:2d:b5:df:07:76:c1:b7:87:68:3a:05:05:
                    95:6d:d8:48:c7:01:f2:f2:60:e3:09:b2:c2:f6:55:
                    d8:0d:30:40:dd:2f:79:c0:55:25:f8:c0:da:39:fc:
                    9d:60:25:f0:38:4f:37:22:a4:fd:8a:28:7d:59:24:
                    87:e6:fc:14:df:04:43:25:a5:8a:73:bf:8b:8d:2e:
                    c6:6b:2b:c4:0e:69:33:15:cb:ce:4f:d9:2f:7d:69:
                    cd:fa:8a:cb:ad:45:25:12:39:3c:dd:4f:23:a4:df:
                    38:ea:da:e7:9d:f5:12:c4:2c:97:23:46:33:3f:16:
                    a5:cd:19:bf:fb:9c:f8:85:3e:a5:04:02:d8:be:f8:
                    1d:b6:82:b5:5e:6b:77:b9:dd:29:e7:d3:e5:3e:ca:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:48:41:C5:32:64:F4:86:0D:B6:D2:47:D4:30:A6:E3:91:90:F8:97
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/8EhBxTJk9IYNttJH1DCm45GQ-Jc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:83:43:ea:a3:92:22:6f:5d:92:40:7e:40:48:99:a6:50:
         29:92:5c:f6:35:88:b2:8d:e6:d7:c3:e6:be:99:0e:81:79:23:
         5a:e8:9f:78:ac:62:21:72:0b:53:5b:12:13:38:71:7f:fe:e4:
         f2:af:59:bb:4d:b2:44:ef:a1:1a:1e:ae:8c:fe:00:99:94:5e:
         3b:46:34:f0:80:61:d1:43:0e:bf:6d:17:73:ce:ef:ce:5d:b4:
         a2:ee:b6:e9:41:18:46:e8:d1:42:a2:ad:68:47:88:62:b4:41:
         d8:e6:9b:73:f3:81:62:2e:6e:24:3a:90:b6:1b:3d:20:f3:9d:
         9c:3b:ad:c9:ff:13:d9:6f:ee:c9:11:a8:9d:32:d4:67:a6:31:
         8d:ee:c9:1f:8c:b7:c6:80:ec:19:03:a4:a2:bb:1d:a7:4d:0c:
         f6:a0:37:51:3b:f1:9d:28:7f:d7:5b:1f:08:b8:99:de:01:f3:
         8a:5e:01:b3:4a:d6:f7:67:11:76:d8:1a:98:2b:ca:6b:81:3d:
         ad:87:ef:0a:ee:85:c4:4a:8b:29:ae:5e:6e:dd:f9:36:39:7b:
         0c:b9:55:4f:9a:36:6b:61:22:87:5f:36:4c:27:1c:7a:18:45:
         f9:37:0c:e5:94:95:ba:7b:62:70:23:21:1e:c1:81:6d:a1:dc:
         e1:7b:b5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org