Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/tV5WuZCdSgLJfuwXHWe1dfcKriM.roa
File:                     tV5WuZCdSgLJfuwXHWe1dfcKriM.roa (raw, json)
Hash identifier:          88AmxqPFn4jheiUe/qmTzrbx4/YN/eRQyCP5rJ4QkRQ=
Subject key identifier:   B5:5E:56:B9:90:9D:4A:02:C9:7E:EC:17:1D:67:B5:75:F7:0A:AE:23
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       57
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tV5WuZCdSgLJfuwXHWe1dfcKriM.roa
Signing time:             Wed 01 Feb 2023 01:30:00 +0000
ROA not before:           Wed 01 Feb 2023 01:30:00 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        61.198.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:30:00 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=B55E56B9909D4A02C97EEC171D67B575F70AAE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:30:3c:1c:c6:e4:03:38:69:3c:c4:03:2d:
                    a4:7a:8c:bd:ff:5e:b7:71:9e:9f:fe:d5:24:83:06:
                    1b:51:d2:45:21:b1:b6:02:70:b6:ce:d6:5f:ed:e3:
                    f6:29:09:94:2e:c2:a5:43:fe:34:e1:9f:fc:49:a3:
                    aa:61:aa:2b:7c:4d:1e:c5:48:4c:26:b4:0a:84:a0:
                    bd:36:5c:d7:d1:a5:98:88:d5:e9:43:85:22:f1:34:
                    e4:1f:d8:4c:37:c3:54:2c:0c:64:f2:e7:ac:6f:75:
                    45:4d:8c:c3:18:39:34:9c:fc:7b:2f:7f:54:d1:42:
                    3b:a6:81:5d:a9:f6:ec:35:91:fc:c5:5d:cd:dd:59:
                    40:93:71:15:2c:0e:86:59:8f:67:ef:d1:99:b1:b7:
                    52:a4:d8:f4:a5:b5:f3:01:62:64:5a:a9:07:45:f3:
                    ec:51:09:61:60:d3:b1:87:a5:2e:c0:d5:c9:df:ef:
                    ec:29:4c:9f:0e:c6:6c:d6:c6:88:7b:c9:a0:9c:f5:
                    97:12:97:da:89:2d:06:df:b1:6e:85:47:66:a2:63:
                    db:0b:f0:6b:7b:76:3c:ed:fb:9b:72:d2:ab:b1:85:
                    7f:e0:16:f0:69:60:c0:68:de:7b:8c:9c:bd:2a:8a:
                    1e:8f:10:c1:55:4f:a4:5f:1e:b2:fb:c8:65:f7:fa:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:56:B9:90:9D:4A:02:C9:7E:EC:17:1D:67:B5:75:F7:0A:AE:23
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tV5WuZCdSgLJfuwXHWe1dfcKriM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:fb:f7:5a:b1:b5:0e:23:4f:8e:01:4d:1e:aa:98:12:78:ed:
         08:cc:4e:61:2e:58:c8:e1:1e:98:1e:d5:90:3e:8c:4e:c5:3c:
         5f:6c:ef:ec:7a:4b:03:18:4d:80:9b:c0:e0:b1:2a:3e:2b:9a:
         78:e4:c6:d7:e6:df:c7:04:92:e8:15:d8:1d:4e:28:a9:5e:f3:
         ef:fc:97:a9:d6:fa:a3:84:82:50:22:90:01:ae:d2:d5:d5:ec:
         3d:59:51:ac:eb:1d:28:cb:5f:9b:07:b9:a5:5c:4b:87:f0:70:
         03:8e:f0:ec:b4:84:40:48:50:a3:69:62:32:4c:64:76:04:ea:
         42:c0:d8:90:bd:cb:25:87:5f:c9:09:b4:c1:c1:cd:4d:2c:62:
         6e:24:80:73:49:a2:70:d3:67:c3:3a:65:7a:12:5f:30:f9:c8:
         91:e3:8e:7e:f4:ce:a5:8d:bb:ff:f6:66:cc:a7:f8:63:bb:15:
         45:ae:f9:24:f4:8e:72:aa:86:7d:ec:83:66:dc:a7:08:69:ed:
         67:ab:ae:4e:52:37:f2:cf:ca:76:d6:df:fc:4d:6e:19:c8:26:
         69:f0:b8:1e:aa:49:0f:2d:f3:05:78:9a:6d:fe:fb:95:13:fa:
         a2:1f:88:d3:a8:5e:8c:73:25:5c:77:6a:4c:0d:2e:04:9c:36:
         dd:a2:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org