Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/N7GWqbXa-224EaTYZNKEktqDkPY.roa
File:                     N7GWqbXa-224EaTYZNKEktqDkPY.roa (raw, json)
Hash identifier:          Q7L3sHjGn089RyOVqRb6j/6474qTSibti/18g7H+n4A=
Subject key identifier:   37:B1:96:A9:B5:DA:FB:6D:B8:11:A4:D8:64:D2:84:92:DA:83:90:F6
Certificate issuer:       /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
Certificate serial:       1F
Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/N7GWqbXa-224EaTYZNKEktqDkPY.roa
Signing time:             Sun 01 Jan 2023 01:30:10 +0000
ROA not before:           Sun 01 Jan 2023 01:30:10 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     9351
IP address blocks:        193.116.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
        Validity
            Not Before: Jan  1 01:30:10 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=37B196A9B5DAFB6DB811A4D864D28492DA8390F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:94:10:b0:87:d2:b2:b4:07:e6:5d:e7:8e:
                    f5:fe:4b:b4:2c:2b:6b:b6:71:64:e8:cb:2e:62:ae:
                    32:8e:db:a7:2e:68:96:d8:c6:a9:11:6e:00:10:94:
                    e3:4f:12:89:b1:fe:4c:72:ee:11:ba:e4:09:2e:46:
                    85:62:1a:02:d3:e2:23:12:e5:d7:8a:4f:3f:75:44:
                    b8:6f:39:aa:61:be:2a:ca:1b:0b:9e:f9:e6:d1:02:
                    0b:73:5f:3d:3b:d5:e8:e0:4d:d9:bb:97:04:a5:6d:
                    7f:4d:2c:69:1f:73:81:83:e2:26:dd:1e:d2:9f:2e:
                    01:d3:a7:00:80:7a:80:d4:d7:39:c6:af:71:4c:ff:
                    06:68:77:c1:fb:b4:01:97:78:15:fb:f9:49:3e:31:
                    10:f6:74:c2:a9:1f:4b:b3:31:8d:33:48:0c:0d:c6:
                    96:ed:46:46:44:d8:83:5d:59:c0:74:a7:c1:87:21:
                    fd:b7:de:14:00:84:3f:24:28:bf:f3:72:19:09:07:
                    19:33:a7:8f:b6:40:82:8d:02:46:b6:a5:17:62:4d:
                    3d:8a:c5:84:64:4c:16:b4:c7:5f:f3:63:62:44:d4:
                    3f:fb:bf:3f:c6:c1:ca:17:8e:dd:3b:1f:4a:b1:da:
                    e3:99:66:b2:c4:4c:fb:07:de:37:86:c2:ee:39:4f:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B1:96:A9:B5:DA:FB:6D:B8:11:A4:D8:64:D2:84:92:DA:83:90:F6
            X509v3 Authority Key Identifier:
                keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/N7GWqbXa-224EaTYZNKEktqDkPY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:a7:9f:48:20:21:93:49:d9:b4:73:20:1f:3d:ce:82:af:cd:
         69:d3:83:09:a3:af:cd:9b:3f:d6:bd:fb:36:49:68:96:67:36:
         df:c2:81:d7:b3:28:ec:b8:fb:e7:4d:8e:a3:aa:57:f0:3e:4d:
         c0:e8:01:e0:c4:05:e0:48:9b:d2:03:a0:d6:19:25:5f:09:3d:
         0f:aa:5b:f6:09:31:fe:e5:14:e2:d5:19:5e:f5:ec:5d:e6:53:
         4b:04:39:06:6c:2d:9f:72:8a:46:c4:f9:5c:2f:c9:fd:53:db:
         d5:b2:ee:86:b1:cf:a8:4b:af:f3:5c:98:fc:e5:ca:89:66:d6:
         e9:e3:97:67:9c:49:ce:fe:21:c8:36:f3:b0:f8:fd:a5:5c:0c:
         af:0c:a5:fb:7a:36:18:14:28:3a:da:85:fe:bc:8b:22:da:84:
         01:db:2c:5b:08:11:e9:8f:cd:ab:e4:1b:e5:8c:af:b4:20:11:
         d3:4d:92:46:a0:39:86:67:a0:07:e2:52:42:0b:3a:74:5a:44:
         09:7e:5c:44:2f:98:9d:aa:69:c7:7a:ec:45:c9:1f:d7:a6:75:
         af:67:7d:bb:da:06:ac:5c:ef:6a:ee:36:86:54:4e:83:f4:50:
         5b:cc:98:3d:64:66:d3:72:3c:2b:8f:eb:49:8c:0f:05:b8:2b:
         39:96:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org