Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/e-sDJBwYkyZy-gFAac8s6tnJpB8.roa
File:                     e-sDJBwYkyZy-gFAac8s6tnJpB8.roa (raw, json)
Hash identifier:          MAx3AWaCRKP8lEUjlc8UtMymM31eWnkx7KBIItOHrp8=
Subject key identifier:   7B:EB:03:24:1C:18:93:26:72:FA:01:40:69:CF:2C:EA:D9:C9:A4:1F
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       35
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/e-sDJBwYkyZy-gFAac8s6tnJpB8.roa
Signing time:             Thu 01 Jun 2023 01:30:00 +0000
ROA not before:           Thu 01 Jun 2023 01:30:00 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Jun  1 01:30:00 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7BEB03241C18932672FA014069CF2CEAD9C9A41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:30:d7:e2:7c:b6:d1:2d:18:69:14:e6:52:
                    cd:3e:ef:f7:bb:12:24:f6:34:88:09:82:b8:f4:1a:
                    62:55:fd:f8:ac:63:1f:1f:c6:e1:7c:f4:c9:46:95:
                    d1:ed:1f:75:d9:ae:e3:4b:c1:cd:39:12:11:ef:6d:
                    6b:2c:fb:4b:9e:a8:09:29:fc:90:4d:fe:7e:d6:2b:
                    a9:4c:d0:b0:56:9e:9c:54:0c:da:76:4f:86:05:ab:
                    d3:f2:01:53:6f:8a:5d:eb:5b:2d:08:04:80:61:4b:
                    16:25:e0:f6:17:41:11:de:c2:48:5a:ad:9f:35:48:
                    63:18:a7:f1:69:fd:5d:d2:12:80:78:9c:8a:ff:4f:
                    64:6c:d6:90:55:7d:66:f4:e1:1c:c3:87:c8:6a:88:
                    5f:e2:16:e4:53:c4:42:27:a5:a9:55:c3:25:af:22:
                    03:ef:77:5f:1b:c6:d9:98:6b:b8:d0:81:98:3b:eb:
                    7b:76:7b:52:53:1b:fb:0d:00:14:e8:40:4c:56:ed:
                    e9:82:2b:65:2f:98:a7:a5:30:48:e2:c1:d4:45:2a:
                    a1:f4:d3:52:72:07:7e:fb:cf:c4:8f:93:e0:22:4d:
                    d0:5c:d9:a4:9e:15:22:63:6b:7e:a4:f7:cc:3f:4d:
                    ec:34:79:37:66:59:f1:2d:a1:5c:b0:a1:08:a4:33:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:03:24:1C:18:93:26:72:FA:01:40:69:CF:2C:EA:D9:C9:A4:1F
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/e-sDJBwYkyZy-gFAac8s6tnJpB8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:91:96:ea:c6:67:ee:dd:6a:1c:51:3e:86:79:67:3d:a8:d7:
         4f:01:ff:08:5c:f8:43:c0:2d:18:f8:47:33:c3:64:7a:e7:7a:
         31:66:6b:6e:fc:6b:f7:44:cd:e9:94:5b:90:07:ab:2f:93:64:
         f9:c6:26:c6:26:0b:7f:73:f0:b3:72:e4:63:51:21:2d:2f:37:
         14:b2:69:db:14:94:c6:a5:4f:33:af:b0:f4:9a:61:ae:27:67:
         e2:c1:02:71:34:ac:4a:d6:d7:df:07:a9:6c:1a:3a:73:aa:07:
         8f:b4:21:f8:11:02:2d:5b:9d:83:b0:7f:10:9a:35:e9:e3:a4:
         36:6b:38:61:39:f1:d4:ee:60:8f:7e:f5:00:4e:99:c4:61:c7:
         41:19:46:7e:ed:fe:73:0c:4e:09:de:57:b1:38:ad:87:cf:fd:
         6f:9b:3b:c6:c9:db:88:fa:65:64:00:d2:b8:19:18:28:24:28:
         a3:04:8e:ff:9f:11:58:a0:a5:cd:b4:08:19:45:b7:86:22:8e:
         19:d9:f8:c1:8c:1e:3e:7f:4e:a2:c7:ae:a1:db:15:06:63:aa:
         c4:58:c6:89:06:40:57:99:c9:37:c1:1f:66:d5:ac:3c:c1:92:
         c9:5c:a2:a0:13:ec:e4:d1:ab:21:c8:80:28:63:ff:13:82:f0:
         ae:27:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org