Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Jgns2pwCrqjD-RjqAtBXrePpcGY.roa
File:                     Jgns2pwCrqjD-RjqAtBXrePpcGY.roa (raw, json)
Hash identifier:          W4rh8YcPIBlumiuyx0xzOEtPQYym4qQXT1OcqF2bnlo=
Subject key identifier:   26:09:EC:DA:9C:02:AE:A8:C3:F9:18:EA:02:D0:57:AD:E3:E9:70:66
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       56
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Jgns2pwCrqjD-RjqAtBXrePpcGY.roa
Signing time:             Wed 01 Feb 2023 01:30:00 +0000
ROA not before:           Wed 01 Feb 2023 01:30:00 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        219.113.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:30:00 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2609ECDA9C02AEA8C3F918EA02D057ADE3E97066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:18:ab:b2:e7:e0:5f:ca:a4:99:43:33:b0:
                    6b:76:5b:cf:1b:08:f8:a8:af:11:8b:e7:3a:02:9f:
                    8e:d1:57:87:87:98:56:7e:7c:69:00:b9:21:dc:50:
                    8b:8c:5f:c7:9e:fc:17:f0:12:2d:88:01:62:5f:6b:
                    6d:4f:ed:64:ba:d4:2c:c1:69:67:a6:14:28:79:ee:
                    c0:c0:0d:9f:e7:e7:b1:f5:de:9b:d5:3f:d6:f3:50:
                    b4:5e:0d:c2:f9:ee:3a:f0:b6:8d:be:16:78:51:55:
                    48:4c:7b:33:7c:c4:40:30:7d:6f:fe:e8:2c:02:fb:
                    df:ea:01:ba:88:4b:f9:5a:bc:37:09:9f:1e:c5:63:
                    a7:e7:19:c4:86:4d:a5:25:e1:63:99:40:81:77:c8:
                    63:66:0f:3d:2c:bc:79:c3:ee:a8:f9:77:bc:6c:5e:
                    9b:f0:9f:7a:e7:ba:67:7e:0b:2a:3f:68:6f:16:fb:
                    f3:af:8d:a3:d7:32:81:a8:8b:fc:eb:b1:62:9f:5e:
                    1c:5a:24:fb:87:8d:ac:7e:a4:e5:ee:d4:14:8a:92:
                    67:f7:75:a7:96:cf:e3:04:5e:ae:12:5c:e3:25:5c:
                    5c:58:cd:d1:ab:97:a7:a6:5e:5d:cc:51:67:52:d6:
                    f4:4d:ae:7e:d3:81:7f:dd:38:af:a4:27:35:7b:06:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:09:EC:DA:9C:02:AE:A8:C3:F9:18:EA:02:D0:57:AD:E3:E9:70:66
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Jgns2pwCrqjD-RjqAtBXrePpcGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:54:08:84:fd:39:c8:f7:05:33:c1:c0:ac:e7:a0:24:0f:
         13:96:c4:82:99:46:8b:90:78:52:d0:f3:39:25:58:d1:15:e2:
         45:67:31:fc:5f:4b:d1:9c:ba:db:b0:7c:37:c1:d5:4c:69:48:
         05:13:c6:b6:7d:16:cf:81:91:0c:4f:63:04:6c:e8:ee:12:c0:
         92:c3:43:de:02:2f:ee:da:10:e9:c4:b1:7a:fb:4e:9d:e0:b4:
         ce:48:0f:7b:23:07:4c:25:d2:5f:29:12:40:db:fe:f8:34:31:
         27:d2:cb:71:50:26:c9:d0:1a:e2:c2:e3:f3:f1:c2:96:f2:6d:
         62:a9:3c:7e:76:f3:e2:0c:bd:e6:9c:6c:3d:29:f6:78:f0:55:
         0b:60:37:48:85:1c:ed:84:d8:d5:28:d0:fd:2c:ce:5f:a3:76:
         1f:21:d9:51:cd:f2:fc:9e:30:8d:70:50:e6:33:d1:23:18:f6:
         5d:cd:80:0a:1b:06:4c:e8:03:44:52:e8:bd:33:9f:d6:32:7e:
         52:b0:1f:7b:c4:28:e8:0c:b7:26:dc:c1:db:b0:1d:06:17:79:
         00:ef:f3:75:a7:69:2b:c4:cf:43:2f:80:36:98:e9:0d:f1:f9:
         d1:06:35:c6:9a:4a:5c:dd:d2:fe:5c:73:54:75:48:05:29:af:
         ca:09:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org