Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/285/VETZJ8gekTPzWtGK4yW9rWjhoYc.roa
File:                     VETZJ8gekTPzWtGK4yW9rWjhoYc.roa (raw, json)
Hash identifier:          SmdfYmuUgABgbTvoLBZZmFClFiD+OOkYcq6HHSf/Kgk=
Subject key identifier:   54:44:D9:27:C8:1E:91:33:F3:5A:D1:8A:E3:25:BD:AD:68:E1:A1:87
Certificate issuer:       /CN=A3590C569DD668350463F6F7CF91383D3040AF26
Certificate serial:       37
Authority key identifier: A3:59:0C:56:9D:D6:68:35:04:63:F6:F7:CF:91:38:3D:30:40:AF:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o1kMVp3WaDUEY_b3z5E4PTBAryY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/VETZJ8gekTPzWtGK4yW9rWjhoYc.roa
Signing time:             Thu 13 Apr 2023 09:53:22 +0000
ROA not before:           Thu 13 Apr 2023 09:53:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9363
IP address blocks:        210.251.160.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3590C569DD668350463F6F7CF91383D3040AF26
        Validity
            Not Before: Apr 13 09:53:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5444D927C81E9133F35AD18AE325BDAD68E1A187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:7d:23:15:95:38:30:b9:60:df:26:be:cb:
                    50:7c:d2:17:32:ae:50:02:48:e9:0d:71:9b:fc:d0:
                    b5:f1:63:20:c4:93:af:67:59:9a:bf:c6:2a:b0:d3:
                    8b:39:20:10:bb:8b:00:84:06:fe:f2:26:b3:3e:34:
                    ef:08:d7:93:37:b6:6c:57:b3:8b:97:dc:a7:23:de:
                    14:05:54:fd:3f:3d:61:5e:ef:fc:f8:35:8f:08:2d:
                    78:cb:2a:b8:37:1f:be:59:89:d9:9e:f2:98:6b:aa:
                    51:d6:74:67:de:70:9e:18:a0:2c:77:f4:09:02:63:
                    f8:ad:51:e5:54:19:55:75:44:46:3c:a9:46:ca:95:
                    25:cc:5d:f9:90:92:1e:22:cf:bd:c0:55:0e:46:ef:
                    27:cb:91:50:cc:dc:d2:27:a7:55:52:28:c2:10:a1:
                    c3:a3:ed:a7:19:71:52:da:82:43:50:7a:1e:2f:a8:
                    44:72:7d:74:cb:cc:42:63:c6:9f:9f:5b:24:cc:06:
                    af:8a:99:70:51:5b:ab:1b:67:80:40:0a:fa:a4:8a:
                    f7:63:7a:41:af:fb:e3:0b:c3:ee:1c:7d:15:6d:9c:
                    03:d0:88:e6:02:0b:67:a8:21:30:41:e5:8f:14:4c:
                    a4:d0:6f:11:62:6c:c0:6f:09:b0:74:cb:9e:cb:5c:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:D9:27:C8:1E:91:33:F3:5A:D1:8A:E3:25:BD:AD:68:E1:A1:87
            X509v3 Authority Key Identifier:
                keyid:A3:59:0C:56:9D:D6:68:35:04:63:F6:F7:CF:91:38:3D:30:40:AF:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/o1kMVp3WaDUEY_b3z5E4PTBAryY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o1kMVp3WaDUEY_b3z5E4PTBAryY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/VETZJ8gekTPzWtGK4yW9rWjhoYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:14:b0:52:f5:dd:eb:93:30:2d:84:3b:6a:30:1c:14:b7:
         e4:f6:ad:a4:93:cb:6c:07:39:49:b4:84:72:9c:d5:1f:1a:29:
         3c:02:3a:fa:cc:46:e8:aa:a9:9d:cd:aa:18:0f:66:bf:cc:1c:
         fd:97:5b:9f:d0:2b:3e:24:bd:1c:c1:20:ef:07:c8:74:b9:77:
         c6:2b:4c:e7:c8:c3:3f:d3:88:18:cd:a2:63:9a:c1:75:e8:ef:
         6e:a7:e8:df:b8:d1:d1:d1:35:4f:ab:ec:a6:0e:ee:d5:11:65:
         53:43:b9:12:54:7b:d4:03:80:bb:26:af:76:49:34:c1:9b:c1:
         c9:92:83:e7:76:00:b6:1c:18:8a:f3:b4:e3:fa:28:69:c7:da:
         84:e6:5b:51:20:a4:97:aa:c9:53:6c:57:25:c4:11:46:6a:13:
         7a:c5:a5:46:05:56:1a:47:4a:b3:c9:10:a6:e4:11:7f:b8:17:
         6a:30:2c:54:9a:f0:25:3c:53:42:c4:63:2a:40:7e:ec:38:8c:
         39:3a:0a:c9:d8:9b:3e:40:83:71:a8:4d:d7:3c:be:bf:51:80:
         4b:cb:d4:6c:6b:5f:ff:ad:77:a6:b8:ab:ec:32:4b:18:01:8d:
         0e:f0:66:4b:ac:70:d6:90:89:e8:8c:36:14:26:20:91:c1:7b:
         2a:55:d2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org