Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/iAhFmSyYlhPnjcw51q3sZxv4hVw.roa
File:                     iAhFmSyYlhPnjcw51q3sZxv4hVw.roa (raw, json)
Hash identifier:          8dvPkgZz43kS9JJ/EWjOJk882KwwBVLC+GgTUj2fp7o=
Subject key identifier:   88:08:45:99:2C:98:96:13:E7:8D:CC:39:D6:AD:EC:67:1B:F8:85:5C
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       0B
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/iAhFmSyYlhPnjcw51q3sZxv4hVw.roa
Signing time:             Thu 25 Aug 2022 08:28:36 +0000
ROA not before:           Thu 25 Aug 2022 08:28:36 +0000
ROA not after:            Fri 25 Aug 2023 07:39:18 +0000
asID:                     9615
IP address blocks:        219.101.96.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 25 08:28:36 2022 GMT
            Not After : Aug 25 07:39:18 2023 GMT
        Subject: CN=880845992C989613E78DCC39D6ADEC671BF8855C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:1e:d5:eb:ca:0d:1f:3d:9a:26:eb:f1:c5:
                    32:38:d3:60:f2:29:13:2b:d2:c7:ae:fe:d3:7c:99:
                    00:cc:af:33:f1:97:22:a7:6a:99:b6:d6:56:1b:a4:
                    7f:aa:7c:9f:95:be:0c:94:98:89:e4:49:e4:bd:df:
                    26:9d:3e:0d:b9:5c:85:ad:d1:f1:82:9c:93:ab:ec:
                    e2:13:35:8c:aa:c2:a4:c8:39:fe:8e:cd:82:66:b2:
                    e9:93:3d:94:ca:f5:b8:44:72:f8:3e:d4:17:f3:3f:
                    d0:04:a9:0e:53:26:70:22:e1:ac:01:47:f6:68:d9:
                    d9:ec:7e:db:ad:e8:7f:07:94:23:01:67:41:68:12:
                    4d:a1:78:87:e1:b1:c5:78:19:ef:a7:05:7e:04:39:
                    90:f0:70:e4:88:2b:11:b8:23:7f:71:43:f4:c7:6f:
                    7c:8f:f1:b6:27:25:9a:3c:cf:97:b1:0a:41:89:ed:
                    fe:18:7e:89:88:74:c1:7f:1f:6c:bb:24:57:dd:76:
                    ba:4a:3e:9a:3b:4a:09:39:83:8b:cd:7a:8c:70:67:
                    da:e3:f4:fd:3e:b5:eb:1f:ac:2a:05:1c:a2:fe:08:
                    b5:91:9e:2d:e9:a8:0a:9c:52:80:32:b8:08:11:ec:
                    56:53:9f:fd:bc:2e:59:22:60:56:68:48:6d:9a:38:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:08:45:99:2C:98:96:13:E7:8D:CC:39:D6:AD:EC:67:1B:F8:85:5C
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/iAhFmSyYlhPnjcw51q3sZxv4hVw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.101.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:5c:16:83:65:08:7d:a6:3e:fd:c7:af:a8:42:aa:e9:b7:
         90:70:f6:0a:6a:c2:c4:c3:29:a4:bb:a1:6e:f9:2d:41:e1:e9:
         b4:8f:b3:a2:08:12:49:5c:08:d8:77:92:2f:30:3b:d4:1f:f6:
         73:d3:f0:11:0c:ec:b9:17:be:90:ec:3b:5a:f6:83:3a:86:21:
         94:fa:39:e0:0c:3a:a8:2e:6f:49:b2:12:09:98:b2:a5:45:a3:
         e1:1f:d0:87:80:ce:1e:fd:b0:eb:46:3f:80:7b:9a:d6:39:47:
         8e:d6:a8:ec:3c:d7:d8:ae:31:92:43:b5:5b:31:a3:6d:ba:ba:
         a2:79:b9:ae:a3:9f:d0:1f:29:8e:21:e0:d4:0b:2e:eb:a4:21:
         fc:04:5d:a4:9e:54:bf:0f:75:bf:75:cd:88:70:fa:83:f5:84:
         98:8d:4a:7f:cc:0e:da:59:c8:c3:89:9c:87:01:c1:58:dd:80:
         1f:00:3e:c3:52:35:0b:cd:3a:e3:69:d6:67:b9:4f:2a:83:10:
         c5:8f:2f:f4:f9:ef:5e:38:18:77:3d:30:ae:92:cd:9a:c8:96:
         0f:e7:ad:99:7b:04:2a:0c:ae:0e:4c:e3:e7:a4:68:aa:fa:cd:
         7a:6c:eb:78:35:89:30:9f:35:b7:10:64:4b:f1:19:e1:69:cd:
         4e:9d:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org