Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/NSeu-brnjmn5Ranl3FqP32Vvm4g.roa
File:                     NSeu-brnjmn5Ranl3FqP32Vvm4g.roa (raw, json)
Hash identifier:          YAPOILVJssSSsietes8XLLLO5W51v28b76VXDvNcOPU=
Subject key identifier:   35:27:AE:F9:BA:E7:8E:69:F9:45:A9:E5:DC:5A:8F:DF:65:6F:9B:88
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       30
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/NSeu-brnjmn5Ranl3FqP32Vvm4g.roa
Signing time:             Mon 01 May 2023 01:29:31 +0000
ROA not before:           Mon 01 May 2023 01:29:31 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: May  1 01:29:31 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=3527AEF9BAE78E69F945A9E5DC5A8FDF656F9B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:a1:a2:35:44:5d:56:6b:fd:79:47:64:4a:
                    85:71:93:66:18:d6:a2:df:03:00:fe:6b:33:0f:73:
                    54:97:29:14:77:86:71:06:fc:18:45:9a:7a:39:a7:
                    45:dc:14:a6:37:f0:da:4f:5a:5e:86:4e:5c:df:e4:
                    84:63:4d:cb:8a:c9:a1:63:59:9e:9a:b7:1c:9e:a6:
                    fc:c6:70:5c:4b:dc:6f:55:5f:6f:80:0c:6a:c7:3b:
                    a8:98:6b:60:f7:18:f9:d9:cf:00:b9:28:82:37:41:
                    60:2e:56:7e:fa:85:85:1f:79:2c:2d:df:0d:25:a8:
                    d1:b1:63:dc:8c:ee:7a:45:22:95:d8:be:fc:c5:a2:
                    15:32:87:24:5d:86:cc:ca:c8:72:1f:02:f2:18:bf:
                    69:35:f5:59:fb:5f:91:c7:1e:48:9a:11:64:29:d7:
                    7f:91:16:4a:9f:34:8c:04:0f:f3:2b:01:18:4b:8a:
                    3f:2d:90:d2:dd:fe:c5:23:7b:31:ba:25:e2:32:76:
                    91:eb:4f:d3:7d:a2:ec:41:0f:64:71:b5:1c:fd:2b:
                    d4:29:39:05:ee:64:00:45:62:ac:31:69:49:6b:25:
                    72:9b:f1:bc:29:ba:f3:c5:e0:28:2b:e0:63:44:ce:
                    ee:4b:5c:67:b6:83:b5:ec:83:59:9b:88:90:1b:3f:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:27:AE:F9:BA:E7:8E:69:F9:45:A9:E5:DC:5A:8F:DF:65:6F:9B:88
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/NSeu-brnjmn5Ranl3FqP32Vvm4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:7a:d1:9f:4d:b9:89:7c:eb:c9:13:5b:2e:ed:b2:8a:41:
         45:8d:da:24:55:b3:2f:73:28:08:73:fb:4b:40:9c:6d:00:80:
         a0:a3:b5:2d:8d:9e:df:d1:d7:c6:28:83:42:46:93:d1:93:87:
         b3:5a:70:34:e7:f6:b0:87:b7:5d:18:a0:82:89:6b:08:4d:49:
         8a:d6:6f:67:76:14:af:d0:c4:38:b1:f0:92:23:00:ab:06:a3:
         7b:93:9f:27:06:85:9e:76:41:24:53:3c:a5:45:e0:f9:10:e4:
         8e:b4:d8:1e:71:cb:42:f3:a3:0a:0b:71:e1:24:85:91:f7:1b:
         76:03:35:f3:13:d7:fa:75:e2:1a:b6:e4:86:df:21:33:ee:2b:
         57:c3:d6:b2:e1:7d:97:6b:d2:14:4a:43:a0:89:07:9e:bc:2f:
         d8:99:5b:c6:c8:83:5b:fb:18:64:a9:96:f9:8f:6e:37:b7:34:
         f3:c2:09:fe:42:0e:cd:df:6f:0c:92:d7:92:65:95:6b:07:38:
         47:b7:f0:71:7e:5d:2f:ce:43:60:b5:cc:3c:4c:ee:62:a6:ea:
         71:56:d5:4f:5b:e7:d1:2e:7b:bd:98:b7:b8:d9:9f:27:92:c2:
         60:76:cd:eb:31:03:3f:de:a4:77:18:a4:4c:5d:21:5d:4c:c6:
         73:84:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org