Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/hdf8h5jBo64dUXo3jwvZbbhkCsM.roa
File:                     hdf8h5jBo64dUXo3jwvZbbhkCsM.roa (raw, json)
Hash identifier:          yAjISVM0iPBN3xR1gX9QWw9CnDFZ2GHIgqL7rAexVGU=
Subject key identifier:   85:D7:FC:87:98:C1:A3:AE:1D:51:7A:37:8F:0B:D9:6D:B8:64:0A:C3
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       68
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/hdf8h5jBo64dUXo3jwvZbbhkCsM.roa
Signing time:             Thu 01 Jun 2023 07:36:07 +0000
ROA not before:           Thu 01 Jun 2023 07:36:07 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        112.136.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jun  1 07:36:07 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=85D7FC8798C1A3AE1D517A378F0BD96DB8640AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:9a:a3:38:a3:2a:2a:14:bb:e3:41:e4:5a:
                    c4:54:47:d9:29:e8:3b:c8:90:50:10:cd:13:de:3d:
                    79:e1:e4:f8:bb:2f:ff:73:54:e5:e7:26:04:4f:57:
                    a6:51:9a:cc:6f:83:37:c2:67:ee:7a:b7:d3:8d:9b:
                    ba:b4:f6:da:97:b4:36:fa:00:3e:04:0b:3f:98:de:
                    be:ac:b8:b2:02:54:01:46:67:70:47:55:71:ee:8c:
                    cf:a4:11:31:b7:34:98:23:03:84:8b:e9:2b:5d:93:
                    d4:0c:27:00:ec:72:b3:06:6e:a6:6e:a1:e5:f3:c0:
                    d7:ed:e6:0c:3f:46:9b:28:d9:93:19:30:e8:ea:81:
                    0e:ba:a8:e8:ce:bd:1d:e4:d7:31:f3:e2:cc:ae:a0:
                    86:c7:10:c6:99:36:6c:09:34:85:52:09:a2:16:f7:
                    a6:bf:c2:6a:6b:6a:fd:1a:57:fd:10:8d:2e:02:89:
                    e6:a7:ad:d3:d6:44:a3:9c:20:a9:3f:ca:72:01:4b:
                    8f:4d:98:c7:1f:5b:2e:d5:fa:2a:6e:1e:54:12:c4:
                    87:c8:d4:ce:af:80:3e:33:8c:63:8c:d5:ab:26:7c:
                    2e:37:b5:59:c4:a2:ce:26:a1:1b:a7:f1:60:8a:af:
                    0a:0d:18:88:3c:2b:90:39:7c:10:d5:3d:8d:3a:db:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:FC:87:98:C1:A3:AE:1D:51:7A:37:8F:0B:D9:6D:B8:64:0A:C3
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/hdf8h5jBo64dUXo3jwvZbbhkCsM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.136.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:46:29:31:35:34:70:da:24:66:cc:e9:07:42:c8:47:78:
         a2:ed:c9:f0:fb:63:7c:bd:9c:8c:af:b9:05:77:54:35:16:b6:
         29:c4:26:32:85:7c:6d:b5:53:d1:d9:30:52:16:41:ee:75:df:
         82:e3:77:ad:e8:7f:b0:e8:c3:cd:2a:57:4e:87:89:d2:e9:78:
         ae:3e:9a:b9:45:f3:af:ea:d3:59:af:96:c6:eb:e6:a3:7f:74:
         f8:e6:05:0a:d2:0e:80:0e:06:9f:f3:8f:fd:d8:2e:0a:71:90:
         24:0d:10:e0:1a:5f:a9:bc:25:64:45:41:9b:b7:77:90:17:e8:
         7b:4e:9f:8d:9d:5d:ca:18:b4:a2:02:1e:d7:b4:c7:d7:b2:6d:
         e2:c3:d3:a8:b2:c6:6f:28:25:6a:19:b8:e0:07:8a:0d:9e:ad:
         df:54:f5:32:74:68:c4:f5:9a:e0:d7:22:8d:79:27:03:8b:c0:
         3b:3c:0d:1f:d1:34:23:30:cc:4c:87:af:ca:4f:ea:68:43:e9:
         8b:cb:22:30:9c:67:92:a7:da:b1:d8:8f:40:2c:22:d4:4b:bb:
         f1:9e:8c:85:12:bf:37:f5:d8:ca:44:8e:fd:3b:e0:33:94:c7:
         88:81:38:78:76:d2:bb:46:d2:f0:60:90:33:16:27:e4:7b:1d:
         2e:7f:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org