Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/pKOK2kUCX2Vp__Toiiw3mQ-AGAw.roa
File:                     pKOK2kUCX2Vp__Toiiw3mQ-AGAw.roa (raw, json)
Hash identifier:          tJExd4XEcvXkkgGdYo0NhdsK9o2n1qWonWncxv+Ci8E=
Subject key identifier:   A4:A3:8A:DA:45:02:5F:65:69:FF:F4:E8:8A:2C:37:99:0F:80:18:0C
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       8A
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/pKOK2kUCX2Vp__Toiiw3mQ-AGAw.roa
Signing time:             Sun 01 May 2022 01:30:19 +0000
ROA not before:           Sun 01 May 2022 01:30:19 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        203.216.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:19 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=A4A38ADA45025F6569FFF4E88A2C37990F80180C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:c3:8f:06:0f:75:e2:cd:aa:81:65:a7:54:
                    b2:c8:6d:a0:91:ec:cd:b9:7d:86:41:bd:3f:89:ab:
                    d1:2d:90:30:ec:4d:93:9a:d0:84:db:0e:01:c9:7a:
                    b0:56:1f:9c:51:be:fe:fc:b1:e8:78:eb:e3:b4:cc:
                    70:d3:8d:1b:bb:fd:1e:8f:c9:6a:95:ab:18:8f:26:
                    bf:ad:b3:ba:5a:ac:bb:6a:a0:5d:7d:44:32:be:70:
                    e4:9b:5e:e2:8b:c3:ff:c3:6e:be:c6:7d:61:db:f5:
                    a8:9e:be:71:00:73:6e:fc:ba:df:6b:61:55:11:1d:
                    ad:ac:9c:21:dd:44:b9:d8:08:aa:04:3c:e2:7a:84:
                    d0:a0:78:c1:37:54:db:7d:6b:8f:87:9b:85:ab:4c:
                    29:76:6a:32:f0:ba:ba:c2:66:bf:31:d7:b7:48:79:
                    90:5c:ff:1f:fc:f1:e1:c8:71:f2:23:82:40:96:99:
                    13:af:30:9e:29:f3:f4:ef:d9:0c:75:e1:27:83:3e:
                    04:29:03:d0:92:57:ea:09:60:af:3a:1d:ff:d7:cb:
                    d3:ab:22:3a:8d:15:c8:5d:b5:d1:30:14:63:3f:f9:
                    0f:6f:fc:e5:b0:77:7f:77:0f:1f:ef:4b:84:5c:94:
                    72:dd:0d:30:ad:42:96:dc:a0:c8:eb:bb:32:ef:8a:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:8A:DA:45:02:5F:65:69:FF:F4:E8:8A:2C:37:99:0F:80:18:0C
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/pKOK2kUCX2Vp__Toiiw3mQ-AGAw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:84:94:0b:34:a5:03:c1:2a:4a:a9:32:7f:45:1d:6b:3b:
         2c:df:1e:30:2a:e4:66:ad:1b:86:33:98:c1:36:a4:ed:2e:91:
         99:c5:1e:cc:ed:27:74:26:91:6b:cd:15:d7:be:a0:c5:93:d6:
         20:bd:02:9e:9a:60:b5:28:ef:4b:40:81:60:72:c7:dd:45:12:
         5b:c3:63:9c:aa:45:d6:f4:b9:c9:32:79:18:90:39:68:2f:aa:
         73:fa:99:99:50:bb:06:8c:b3:e3:9f:e0:75:ed:35:d9:4f:d7:
         17:2f:71:d7:a4:e8:d4:57:e2:01:8e:89:96:02:f7:bb:7c:6d:
         bf:dc:38:a7:13:48:dd:b6:05:cc:ee:a0:3a:91:8f:57:4a:cd:
         93:44:61:d2:8c:86:bc:1b:0f:97:a1:7b:a3:39:ef:87:f5:93:
         0b:0b:c9:f5:f9:0b:6d:66:ff:dc:15:81:59:eb:12:80:8d:2e:
         ab:21:4b:2f:75:10:2a:81:1e:41:43:40:30:6f:53:33:57:3f:
         a6:27:31:ed:db:60:68:c1:a6:04:7c:4b:64:32:52:02:2b:54:
         82:df:57:b2:79:44:46:fa:49:84:32:d3:7e:c0:e4:7d:80:b9:
         ca:2c:32:a3:64:76:64:5a:a7:52:63:e5:23:70:fd:6a:0f:89:
         12:e2:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org