Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/eEVI7VnsPOF3vgWwt3blFQxz3G0.roa
File:                     eEVI7VnsPOF3vgWwt3blFQxz3G0.roa (raw, json)
Hash identifier:          fYrqj19s8szFL15qG63XHiygbRyPn5xTbSzK3L+eh+M=
Subject key identifier:   78:45:48:ED:59:EC:3C:E1:77:BE:05:B0:B7:76:E5:15:0C:73:DC:6D
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       5E
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/eEVI7VnsPOF3vgWwt3blFQxz3G0.roa
Signing time:             Wed 01 Feb 2023 01:30:04 +0000
ROA not before:           Wed 01 Feb 2023 01:30:04 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        203.133.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:30:04 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=784548ED59EC3CE177BE05B0B776E5150C73DC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:14:98:76:ee:eb:0b:8b:bf:62:51:99:58:
                    70:cf:7b:60:5a:b4:05:22:a7:20:53:e5:f2:97:a7:
                    09:12:46:c3:b3:09:ab:4e:b5:67:89:c1:7d:12:21:
                    59:17:db:1e:69:12:9f:09:64:fe:c6:9b:11:19:e5:
                    85:9f:3f:4e:94:18:c7:ce:86:53:14:4c:4e:85:e0:
                    78:37:de:9b:55:41:30:89:52:88:b9:3a:b7:22:fb:
                    8a:61:e4:a1:c6:32:fc:bf:79:fb:f9:26:73:93:11:
                    ac:fb:ef:ef:97:a3:f7:c4:e7:83:e8:55:66:fd:7b:
                    12:90:af:81:a5:86:15:97:ae:75:c7:55:6d:89:7e:
                    85:a4:5a:07:13:0c:31:8a:e0:ca:d1:28:41:0a:24:
                    50:68:d6:f0:5b:e0:c6:6b:94:75:45:24:48:f8:14:
                    23:1c:27:7f:5b:b6:8e:5b:1f:58:f6:cd:a1:4d:d9:
                    67:85:18:40:24:73:1f:4b:56:fa:5d:26:e1:bf:94:
                    4a:39:cb:75:ec:75:94:a9:12:c6:d3:5d:7c:65:4b:
                    fe:44:91:64:bf:97:24:31:16:1d:93:b8:76:f3:04:
                    ee:1c:9f:10:1c:5c:04:29:6e:e0:da:e7:c5:fb:fb:
                    9e:61:3f:ae:88:b1:fe:49:3c:e9:86:5c:9e:b2:d4:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:45:48:ED:59:EC:3C:E1:77:BE:05:B0:B7:76:E5:15:0C:73:DC:6D
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/eEVI7VnsPOF3vgWwt3blFQxz3G0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.133.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:48:36:ac:4f:45:04:fa:f7:2a:eb:fb:4c:77:98:7a:78:6c:
         bb:1d:b4:c2:18:4e:ae:9b:98:4a:00:5e:95:65:ec:70:17:eb:
         3f:7d:b4:bd:40:f4:3e:6b:53:7d:ad:8d:26:6f:b3:65:49:4d:
         e9:a9:6c:3a:9c:ba:4e:fc:e0:ce:a0:a5:53:09:e0:83:c3:59:
         ea:3d:4e:ba:be:fb:52:5c:3f:08:fc:ab:d0:e1:c1:70:4f:e5:
         93:f1:2f:f1:92:9f:a3:d0:aa:3e:20:93:3b:b5:1c:ff:97:44:
         65:8d:16:a1:79:c2:6f:d4:93:12:15:95:ad:b8:a9:1e:46:53:
         ff:83:0d:5e:26:70:c8:8a:90:aa:f4:7a:2c:28:e1:df:ff:52:
         85:21:58:43:c5:de:c8:8e:17:40:60:94:a3:a4:60:c5:f5:2b:
         9b:48:d9:da:d6:d7:2c:eb:a2:3d:25:f8:4e:f3:10:89:41:8f:
         6b:d5:b4:92:1e:df:3a:db:23:32:e1:ed:8d:65:27:a5:99:74:
         6d:3f:12:98:13:e0:8d:54:5b:73:00:df:88:dd:4b:89:9d:ad:
         b9:cb:7d:b1:75:da:41:d2:22:f3:dd:f3:99:0b:9e:8f:5a:27:
         ab:66:a4:fe:e3:80:37:32:34:78:48:83:dd:1e:9a:83:2e:24:
         fa:02:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org