Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/4xeqITENX7eQSGZZqUC52EjI49k.roa
File:                     4xeqITENX7eQSGZZqUC52EjI49k.roa (raw, json)
Hash identifier:          9s4/Rj1b3IOBG5vReGb9WniWmnBx1zdmHmNIdVDUJzE=
Subject key identifier:   E3:17:AA:21:31:0D:5F:B7:90:48:66:59:A9:40:B9:D8:48:C8:E3:D9
Certificate issuer:       /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial:       27
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/4xeqITENX7eQSGZZqUC52EjI49k.roa
Signing time:             Wed 01 Feb 2023 01:29:38 +0000
ROA not before:           Wed 01 Feb 2023 01:29:38 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     18131
IP address blocks:        192.47.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
        Validity
            Not Before: Feb  1 01:29:38 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=E317AA21310D5FB790486659A940B9D848C8E3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:a5:72:15:60:31:ae:4e:57:14:c1:9d:66:
                    ca:49:b6:4d:45:a6:ca:fa:20:c2:b8:a0:42:e7:a3:
                    4e:e4:79:9a:33:64:c1:cb:d8:da:9d:64:25:d9:69:
                    f6:7b:a2:63:9e:f0:95:cb:4a:e0:63:f5:fd:a8:ea:
                    84:64:a7:b0:bf:33:cd:64:65:a9:cd:6d:5c:4d:44:
                    53:10:7e:e4:71:f2:a1:0f:c9:99:9f:4b:f0:ad:21:
                    79:df:42:ec:31:31:ab:e7:2f:bc:3f:ff:51:46:e4:
                    f3:70:4a:f9:90:aa:48:92:e3:88:91:64:bd:f9:90:
                    aa:4c:78:6c:fb:40:c4:95:ba:02:6e:0d:c8:a0:a6:
                    7f:ad:43:6b:f3:e3:e2:c3:9d:db:c0:5d:43:5b:49:
                    dd:9a:c2:6c:02:9e:e2:79:88:c5:4f:99:af:33:c5:
                    47:07:9c:a9:a2:be:2d:cd:3c:d6:2c:2b:97:17:ca:
                    dd:70:97:1f:ab:70:9d:73:b5:c5:a3:2b:75:dd:14:
                    12:a4:2c:5f:47:1e:49:bd:59:ff:3c:92:9f:a1:8d:
                    89:c4:fc:e7:65:1e:b0:10:5b:a2:e2:0f:65:9a:d0:
                    15:b4:25:84:87:0a:2b:d9:3f:5c:51:11:9f:b1:a1:
                    5e:17:42:d5:c7:b9:9b:43:6e:84:0e:bb:ac:0c:0a:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:17:AA:21:31:0D:5F:B7:90:48:66:59:A9:40:B9:D8:48:C8:E3:D9
            X509v3 Authority Key Identifier:
                keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/4xeqITENX7eQSGZZqUC52EjI49k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.47.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:7d:d5:ff:64:63:9b:a1:42:a3:74:06:3b:35:56:b0:73:
         18:5b:ec:b5:01:ab:cf:40:16:63:72:53:0c:5d:89:15:38:9b:
         92:1c:ae:85:dc:e9:76:73:c8:42:9a:aa:02:67:ec:94:c4:b0:
         1e:c1:10:f4:8c:f3:15:c9:47:65:41:da:aa:1e:47:ae:a1:f7:
         56:88:03:0a:28:d3:7e:05:1d:9e:a6:7d:be:c4:30:85:28:19:
         7b:d4:e8:cf:a4:2b:c1:6f:e5:9e:d9:72:be:2f:49:38:c4:8c:
         67:76:f6:55:e9:84:05:61:84:1d:cc:e1:b7:79:e6:0d:a4:75:
         4c:6f:8c:c8:4d:5a:8e:bd:2f:30:ed:e0:18:70:c3:aa:b9:19:
         b3:c4:c2:fa:26:8f:01:b3:63:94:f1:6d:ce:e9:55:26:4b:bf:
         71:14:d7:4f:f7:e2:a9:70:96:bf:f8:1a:a7:ee:9b:88:99:db:
         67:f5:c3:2e:cd:0c:a8:32:54:05:5f:c2:71:84:6a:94:90:b4:
         c4:77:57:2c:5e:64:f9:ef:f9:fd:0b:49:30:5c:e0:f8:54:34:
         56:3a:b9:f1:b5:23:d6:f6:3a:23:53:a7:5f:52:a4:0e:7e:ba:
         7e:4f:3f:bb:40:c7:3e:5e:fd:99:6d:79:b8:13:df:fd:27:c8:
         ef:ea:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org