Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/FOyvZPnV9VgZebybRZJf4OArFDI.roa
File:                     FOyvZPnV9VgZebybRZJf4OArFDI.roa (raw, json)
Hash identifier:          MWVlpYqEs6vvyIbo16bZApxfGPcVOH5z+s26LII64pI=
Subject key identifier:   14:EC:AF:64:F9:D5:F5:58:19:79:BC:9B:45:92:5F:E0:E0:2B:14:32
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       B1
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FOyvZPnV9VgZebybRZJf4OArFDI.roa
Signing time:             Thu 13 Apr 2023 09:52:57 +0000
ROA not before:           Thu 13 Apr 2023 09:52:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:52:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=14ECAF64F9D5F5581979BC9B45925FE0E02B1432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:3b:7d:47:ed:cc:09:ee:90:b8:61:63:59:
                    4b:e4:97:1b:34:c3:74:58:db:ad:f6:6b:90:18:83:
                    45:9f:4e:58:84:ed:0c:0f:30:df:0b:af:82:4e:2b:
                    67:72:f0:e7:2d:ba:bb:1a:51:ab:02:b7:0e:58:a1:
                    5f:29:2b:d3:1f:a3:72:b5:59:ad:68:cc:c1:90:00:
                    67:bd:c1:be:3d:fa:da:17:70:a0:7c:c2:f0:38:c0:
                    4f:42:fd:3a:b7:27:9d:90:0e:5f:8c:ea:a5:07:3c:
                    40:bf:e7:0c:fb:54:a3:e7:76:92:82:1b:d6:23:82:
                    e8:82:95:63:bc:08:57:4d:09:e8:71:da:97:9f:f7:
                    b2:e4:0b:e8:3e:57:65:a8:7d:fc:69:c5:8f:e3:f0:
                    dd:7a:66:3e:67:a2:1c:f5:fb:2d:bc:dd:17:ab:80:
                    5d:50:76:5b:d9:ee:a0:d7:00:87:a6:79:6c:53:0a:
                    f9:2e:57:70:8e:51:60:90:2c:be:cc:a2:32:ba:1f:
                    47:e1:11:17:94:e6:bd:02:70:da:f8:98:2c:dc:3b:
                    38:54:45:dd:3f:36:d8:36:de:69:6e:66:21:6a:c4:
                    84:3e:86:2b:e5:53:a6:5f:25:5e:4a:f7:d0:62:6d:
                    f6:86:7b:3b:ee:50:d7:99:e5:6f:be:10:b4:c8:32:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:AF:64:F9:D5:F5:58:19:79:BC:9B:45:92:5F:E0:E0:2B:14:32
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FOyvZPnV9VgZebybRZJf4OArFDI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:f5:b1:8c:85:37:f5:c4:21:a6:d0:90:46:6e:2d:a6:70:11:
         1f:14:21:a4:26:5a:ba:4c:b7:4b:1f:d6:58:8c:e6:67:51:a3:
         2f:ff:da:ab:c7:1d:d2:e6:cc:e5:81:7d:e2:71:f9:ef:15:ab:
         7d:4e:cc:46:ed:70:a6:37:86:dc:12:ac:16:97:bb:f3:15:57:
         ae:86:98:03:10:76:c9:73:16:b7:6f:7c:05:78:00:65:88:37:
         6e:39:56:0d:5f:29:f4:ac:f4:69:f0:c8:ad:ce:61:f4:b5:4f:
         28:42:a0:2d:c6:79:1e:c3:bb:1c:e5:f0:28:f1:3d:be:f7:ff:
         48:cb:bd:fc:5e:8a:2e:42:91:3e:fb:94:a6:5e:2d:6f:b0:25:
         c3:8a:cf:cc:ed:10:3b:1a:05:4c:a0:92:19:0f:59:6f:51:e1:
         38:97:05:f4:b6:9d:36:c2:7c:94:c3:1f:12:c4:d1:a8:2b:4e:
         c9:11:8f:73:4c:35:46:6b:2f:0b:4c:eb:4c:aa:75:cc:a6:5f:
         40:43:1b:b8:4b:78:1f:c9:90:98:3b:4e:a7:eb:3f:17:e4:ca:
         81:bb:c0:fe:2d:4a:0b:61:d7:4a:55:6c:0b:07:df:c8:19:e5:
         0e:02:cb:58:a1:57:a9:de:18:a5:df:4b:18:92:90:07:28:4b:
         cf:35:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org