Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/JtSziXIzZQKz6cF2B9C14VA4HEI.roa
File:                     JtSziXIzZQKz6cF2B9C14VA4HEI.roa (raw, json)
Hash identifier:          PNUrTp0FjKLaloRN3ynJxmznYW+zH7RduW4XyW0JwcI=
Subject key identifier:   26:D4:B3:89:72:33:65:02:B3:E9:C1:76:07:D0:B5:E1:50:38:1C:42
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       89
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/JtSziXIzZQKz6cF2B9C14VA4HEI.roa
Signing time:             Sun 01 May 2022 01:30:19 +0000
ROA not before:           Sun 01 May 2022 01:30:19 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        203.141.52.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:19 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=26D4B38972336502B3E9C17607D0B5E150381C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:13:f3:72:02:0f:76:b7:63:c6:b2:6d:67:2f:
                    dd:94:1d:76:f9:ab:3a:4a:b0:c3:75:7e:12:df:b1:
                    a9:9c:97:63:e0:14:40:00:b7:9a:75:69:12:22:f8:
                    87:a9:26:8e:ce:6f:81:eb:40:a6:6b:27:51:25:8e:
                    ec:df:b2:e7:27:5f:f0:83:fe:85:06:80:18:0b:2d:
                    02:c9:fc:f6:8c:a9:12:76:fe:a8:75:de:cc:c0:61:
                    a3:3e:18:a9:c8:6b:50:eb:d4:25:35:0f:e2:6d:f0:
                    97:92:50:22:db:fe:28:0d:84:1f:b5:f0:e4:e4:fa:
                    3b:20:90:4a:69:86:10:b9:c0:9e:bb:49:db:7a:91:
                    34:ec:57:93:cc:bd:50:f9:cb:f3:f6:56:f8:82:3b:
                    12:7e:d5:32:7e:c0:1d:44:7f:72:a5:7e:21:d8:d8:
                    fc:bd:11:7f:80:99:da:af:2c:c2:d4:76:a5:84:ad:
                    79:31:74:08:da:6d:aa:50:8e:eb:2f:17:71:74:4d:
                    af:b1:af:fc:22:d5:b1:3c:3f:ce:88:ef:98:6c:68:
                    a9:64:2e:5c:7b:0e:6c:bb:79:4e:50:cb:de:dd:99:
                    8e:33:8f:1c:35:fe:44:72:5e:18:b5:d0:f2:ac:11:
                    7d:80:c3:26:84:97:fa:03:25:60:47:21:f8:00:e3:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D4:B3:89:72:33:65:02:B3:E9:C1:76:07:D0:B5:E1:50:38:1C:42
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/JtSziXIzZQKz6cF2B9C14VA4HEI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:17:3c:53:f5:43:9d:38:b2:1e:10:31:23:74:5f:b4:31:e3:
         0b:64:55:8a:1f:8f:29:4d:58:d2:44:2f:d4:4e:b5:06:24:df:
         c1:0f:50:f9:b2:59:f7:99:14:95:62:9e:e0:53:e2:66:e8:73:
         96:51:e3:b5:da:16:b6:b9:71:c8:33:8a:f8:ef:69:fc:52:1f:
         be:a4:97:1a:a5:25:d8:d9:22:8d:cc:8c:d4:eb:b3:1a:31:de:
         7d:32:39:72:11:46:49:c5:f8:41:05:62:51:6e:98:c9:c7:80:
         06:03:38:c1:b3:b7:d5:cc:0f:ab:8d:11:86:fd:6e:94:a7:30:
         f2:d6:23:a6:d5:26:51:0f:f1:a4:00:90:36:48:55:74:79:74:
         db:ad:82:f8:d1:3a:8d:c4:cf:9a:d8:68:d1:27:3b:cd:e0:32:
         c1:4b:80:70:34:fb:71:95:d4:96:a0:00:56:f6:c5:bd:eb:03:
         13:99:01:48:d1:b6:02:3e:57:14:ec:a4:03:a4:b4:1a:25:23:
         e8:b3:f9:6f:88:5f:d9:02:84:23:6e:ef:06:cc:3b:63:56:b7:
         cc:da:6d:32:20:93:99:73:18:27:da:73:05:e2:eb:50:c3:55:
         46:9a:49:5b:3d:33:5e:3a:d2:c0:54:b9:62:0b:3d:64:51:2f:
         ad:ef:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org