Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/DIhN4q4dms2234XEo-_RuMZtJ1I.roa
File:                     DIhN4q4dms2234XEo-_RuMZtJ1I.roa (raw, json)
Hash identifier:          PoHIc736RI104mUjfiar0mtrqziVaJF3ILiij7xYuRA=
Subject key identifier:   0C:88:4D:E2:AE:1D:9A:CD:B6:DF:85:C4:A3:EF:D1:B8:C6:6D:27:52
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       4C
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/DIhN4q4dms2234XEo-_RuMZtJ1I.roa
Signing time:             Wed 01 Feb 2023 01:29:55 +0000
ROA not before:           Wed 01 Feb 2023 01:29:55 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        110.44.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:29:55 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=0C884DE2AE1D9ACDB6DF85C4A3EFD1B8C66D2752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:dd:c0:31:a4:60:4a:23:3c:4b:5c:64:e0:
                    72:fd:e3:f5:32:73:a9:49:50:87:b5:0a:1b:b9:a2:
                    81:c5:a6:d2:69:40:f9:4e:00:f5:dc:3b:95:4b:e1:
                    ce:20:65:fb:fb:66:9c:a5:2e:92:75:57:7a:47:12:
                    3a:7e:70:18:dc:8e:23:f9:2c:b8:db:99:58:6a:d1:
                    2b:db:4f:05:bc:8d:5e:52:57:a3:20:3d:3f:fa:87:
                    bf:4f:f0:13:ab:22:33:0d:30:e6:d3:79:32:ca:9e:
                    ba:0d:87:5e:32:cb:19:d1:18:07:e8:c8:4a:80:aa:
                    96:f5:25:af:7b:a3:e4:44:e8:03:1c:b8:78:a4:96:
                    68:61:04:d2:58:f6:eb:c6:f6:40:77:76:13:e1:22:
                    e4:54:2b:0a:48:0b:d3:d9:15:7c:3c:73:f1:1a:b1:
                    6a:61:08:ea:7e:db:f1:0f:62:04:39:a0:30:04:d4:
                    6b:ff:9e:dc:54:cb:ab:58:2d:39:e3:2a:35:06:b5:
                    3d:f4:3c:02:47:1a:be:3d:a4:71:fe:c9:41:52:6e:
                    ee:e1:19:da:95:03:1c:37:30:d2:ba:05:3f:f6:b6:
                    9c:9b:31:36:a3:a5:1b:20:9c:58:04:d0:66:83:1d:
                    2e:d7:e8:48:06:3b:02:77:f5:ee:76:c2:d8:14:b7:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:88:4D:E2:AE:1D:9A:CD:B6:DF:85:C4:A3:EF:D1:B8:C6:6D:27:52
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/DIhN4q4dms2234XEo-_RuMZtJ1I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:97:95:01:a3:38:66:78:c1:e2:20:dc:80:55:77:45:0b:a5:
         ba:48:7e:4a:ea:fe:8b:7e:d8:bd:8a:08:e8:55:e5:d7:a6:6f:
         bf:6f:44:1c:d3:91:4b:4f:e9:3b:1d:c9:e6:9e:57:2b:68:13:
         f0:6c:ae:28:8c:47:db:f4:e1:49:82:2e:01:95:41:2b:74:1d:
         d8:63:5d:ca:42:2c:a0:c7:f8:11:85:4d:e8:a6:f2:35:24:4e:
         5c:4a:fc:3a:86:c9:5c:bc:31:7a:91:a9:58:08:ab:c1:b7:0a:
         8b:3c:45:19:89:c2:9a:ab:bc:38:69:c8:fc:f6:77:6f:30:90:
         df:e6:7a:ac:f6:38:af:5b:d9:e9:4a:ab:1a:9c:55:77:f2:76:
         9d:5c:1e:6e:be:70:7f:d5:9f:c5:4e:f2:1a:44:ef:e5:5b:9f:
         5a:5b:af:01:9b:8f:d2:7e:70:dd:87:93:be:9f:4e:a9:5f:76:
         0c:43:29:11:05:42:37:66:3c:85:6f:44:69:a2:d3:90:14:00:
         a1:5c:ba:4c:8a:92:f2:04:87:c7:1b:1f:fe:e4:0f:15:51:12:
         e8:9c:c7:52:3e:24:d8:91:6f:ae:8e:22:95:3c:4d:8b:37:ea:
         73:ab:40:35:41:42:73:b0:da:14:56:9d:fd:35:0d:c4:fe:8b:
         d6:a6:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org