Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/7rmhv1p9lKG2xiXERCPxzpfwEQM.roa
File:                     7rmhv1p9lKG2xiXERCPxzpfwEQM.roa (raw, json)
Hash identifier:          69qbIAoYsXqtoKgojNlJrBTG2ITz4K24oNcUcg/t14U=
Subject key identifier:   EE:B9:A1:BF:5A:7D:94:A1:B6:C6:25:C4:44:23:F1:CE:97:F0:11:03
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       B7
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/7rmhv1p9lKG2xiXERCPxzpfwEQM.roa
Signing time:             Thu 13 Apr 2023 09:52:59 +0000
ROA not before:           Thu 13 Apr 2023 09:52:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        210.231.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:52:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EEB9A1BF5A7D94A1B6C625C44423F1CE97F01103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:06:34:3c:e6:b9:a0:09:b4:1a:40:da:ec:
                    08:13:3e:19:0f:94:5f:67:fd:68:13:13:56:e3:33:
                    d8:a5:a7:e4:aa:63:b2:43:af:3c:c1:36:d3:32:b5:
                    3a:28:a7:e7:40:db:1a:41:1a:06:da:ed:05:0b:f4:
                    c8:91:88:d3:22:07:be:73:45:c1:c9:a5:91:60:73:
                    00:ad:6f:19:d6:44:bb:6e:77:c9:97:cc:62:0e:6f:
                    b5:7f:9a:b9:4a:62:07:68:b2:6f:78:dc:dd:93:c2:
                    d3:8b:41:72:67:cb:9e:0a:b4:c3:33:0d:4d:2e:1c:
                    bd:0b:f9:f0:9b:cc:1d:73:34:d6:1e:37:4c:fb:60:
                    a7:c3:1d:28:39:e4:bd:55:31:18:fe:57:57:9a:5b:
                    72:ec:fa:de:13:25:dc:12:53:f1:c7:b8:c2:8b:8f:
                    29:c3:63:cd:25:62:7a:37:a6:c2:34:7a:4c:d5:3f:
                    6d:0c:5e:f5:76:1d:0b:53:13:d9:8c:07:82:99:b1:
                    37:35:7d:80:e5:d9:b7:61:03:9a:f5:e7:27:c4:30:
                    20:06:31:fa:82:05:2e:87:54:19:f4:f4:8a:09:2d:
                    a3:bf:76:87:5e:2f:f6:18:b7:db:bf:d8:7b:55:03:
                    ba:f1:f2:3b:0e:88:f5:03:ac:d4:88:b1:37:d5:f5:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:A1:BF:5A:7D:94:A1:B6:C6:25:C4:44:23:F1:CE:97:F0:11:03
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/7rmhv1p9lKG2xiXERCPxzpfwEQM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:60:03:1c:25:74:99:f5:39:11:c1:88:92:60:2a:22:f6:b8:
         fd:d4:a4:7f:ac:87:21:15:14:eb:e6:25:be:bd:95:36:e4:a8:
         88:ce:74:be:81:79:8a:57:01:46:22:d9:97:76:44:ed:ab:9e:
         a1:d6:5f:7f:a3:ea:79:78:7b:10:8c:97:b2:02:92:20:e3:92:
         3c:da:86:eb:4f:b4:50:49:c9:fa:d6:a0:77:8b:ee:bc:f2:0f:
         0f:ac:d3:7b:49:3b:b9:82:8d:f4:78:4b:80:8c:c7:5d:5a:ab:
         49:26:fe:ca:7f:58:81:d6:96:0f:3e:34:92:72:2a:71:43:3b:
         56:62:38:5c:7c:c3:3f:99:27:a3:2f:93:2d:20:72:23:2b:17:
         05:b8:b5:22:90:db:d9:74:68:64:d4:65:65:fe:22:23:89:ec:
         66:80:c9:20:95:c9:70:af:e1:77:0c:f9:5d:e1:d4:bf:a0:8b:
         a2:aa:2d:b1:05:0a:4c:04:12:e4:2d:94:5e:40:29:ee:78:18:
         e8:31:64:ab:c5:70:03:4d:cd:e7:e3:08:ad:a0:8e:48:2d:aa:
         f8:56:55:da:f5:33:71:cb:d9:d1:65:64:76:b8:31:5b:cb:63:
         42:3e:b0:53:a2:8f:08:67:c9:57:89:d7:53:cc:57:44:9e:01:
         f4:7d:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org