Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2432/GUaidMorcMVn3KSiwjCCSeq2tE8.roa
File:                     GUaidMorcMVn3KSiwjCCSeq2tE8.roa (raw, json)
Hash identifier:          RdWl5AWGDqvlk8d2gvVFtFayJ4lpJPU/+FWsKsEnVn8=
Subject key identifier:   19:46:A2:74:CA:2B:70:C5:67:DC:A4:A2:C2:30:82:49:EA:B6:B4:4F
Certificate issuer:       /CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Certificate serial:       3F
Authority key identifier: E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/GUaidMorcMVn3KSiwjCCSeq2tE8.roa
Signing time:             Thu 13 Apr 2023 09:53:05 +0000
ROA not before:           Thu 13 Apr 2023 09:53:05 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7671
IP address blocks:        157.3.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
        Validity
            Not Before: Apr 13 09:53:05 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1946A274CA2B70C567DCA4A2C2308249EAB6B44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:98:88:19:a5:76:86:9a:ff:48:23:2b:0c:
                    d4:d9:fd:5a:65:6f:c7:9c:47:1f:5f:9f:bc:2a:65:
                    1b:75:e0:47:cb:56:ae:a1:17:c8:d4:59:b8:af:8b:
                    ab:37:02:19:aa:a4:45:ca:27:38:38:0f:c2:56:e1:
                    85:49:08:72:6e:47:af:20:6b:39:9b:e4:25:31:43:
                    0b:6b:4c:b8:3b:5d:09:36:b7:57:f7:ba:4e:60:0d:
                    5d:26:00:ac:2f:c0:ce:e4:b5:17:67:57:c9:bb:5c:
                    76:8b:26:15:65:82:f3:62:e0:5f:b3:b4:3f:74:06:
                    c6:aa:4e:33:f1:61:17:1a:0c:60:fa:1a:5e:92:01:
                    e4:c2:9e:34:aa:3e:4b:40:a1:16:ce:66:97:30:54:
                    7a:26:a2:27:a8:3b:89:4f:7d:37:5c:4f:b5:bc:f9:
                    ac:c3:30:40:cf:ad:3c:02:98:62:84:87:ff:3a:88:
                    5e:d6:40:81:ad:79:b4:20:6b:64:52:43:d2:1f:de:
                    9a:3b:e0:f8:a2:ae:c4:7a:56:a0:39:79:32:ce:57:
                    6c:08:25:8d:57:e7:fd:2e:c4:19:1a:ed:99:d3:ef:
                    4b:73:70:29:c5:5e:16:7f:d5:80:08:37:ac:af:1a:
                    7e:f5:18:80:03:3e:73:9b:28:3b:d7:21:4d:df:13:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:A2:74:CA:2B:70:C5:67:DC:A4:A2:C2:30:82:49:EA:B6:B4:4F
            X509v3 Authority Key Identifier:
                keyid:E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/GUaidMorcMVn3KSiwjCCSeq2tE8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:58:b9:6a:8b:dd:ca:e7:2c:bb:f7:f3:be:d0:53:bc:32:ae:
         2b:93:82:20:40:d7:7d:96:fb:d8:6b:0e:7a:ee:82:87:97:3c:
         f5:01:df:48:ef:7b:42:8e:f2:55:4f:e4:2a:81:70:81:38:e7:
         08:ff:c9:f9:f4:8b:87:42:c1:13:df:02:5e:b2:fc:cd:c8:71:
         19:c8:d2:a8:d2:b2:cb:44:f3:ea:cb:fe:f0:05:ec:81:89:29:
         17:76:40:57:9c:12:71:d2:2c:6f:d7:1c:f4:8c:86:6d:bf:2d:
         7b:31:ea:58:06:39:45:83:7b:cc:86:7c:d4:a7:12:b5:21:28:
         13:93:aa:4c:01:9c:a6:ff:39:fe:d5:a7:5b:c5:82:fc:7a:c1:
         78:0a:a5:dd:41:4b:68:63:b4:d0:b0:62:20:e8:e9:e3:20:79:
         a2:e9:6c:55:30:97:a9:49:10:f7:22:5e:92:bf:9b:04:5d:22:
         15:cd:bb:3a:3d:b7:8e:a6:ca:72:bb:cf:f6:5a:7b:ab:b2:d9:
         b9:66:59:45:b1:26:45:dc:f9:4e:a6:2b:dc:b3:88:77:7f:df:
         52:c3:ef:87:34:8a:c9:5f:db:9b:9b:63:e7:a2:f2:78:6d:61:
         06:f5:e4:11:ff:08:3a:c7:3c:d4:ca:c2:a5:eb:75:a4:bc:e4:
         9d:49:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org