Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3795/9ISWyJ72oeltZWVfExfJHLPtxSg.roa
File:                     9ISWyJ72oeltZWVfExfJHLPtxSg.roa (raw, json)
Hash identifier:          FE0cCpzpVWvL0fwqkjC0oMh27BnYSf++VYP5sf3JSF0=
Subject key identifier:   F4:84:96:C8:9E:F6:A1:E9:6D:65:65:5F:13:17:C9:1C:B3:ED:C5:28
Certificate issuer:       /CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB
Certificate serial:       02
Authority key identifier: 3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/9ISWyJ72oeltZWVfExfJHLPtxSg.roa
Signing time:             Fri 28 Oct 2022 08:59:04 +0000
ROA not before:           Fri 28 Oct 2022 08:59:04 +0000
ROA not after:            Sat 28 Oct 2023 08:53:50 +0000
asID:                     2516
IP address blocks:        202.236.182.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB
        Validity
            Not Before: Oct 28 08:59:04 2022 GMT
            Not After : Oct 28 08:53:50 2023 GMT
        Subject: CN=F48496C89EF6A1E96D65655F1317C91CB3EDC528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:70:d0:f5:1a:b8:12:77:02:1c:cb:e9:30:
                    ae:41:ae:f7:4b:ff:dc:f1:1d:b3:3e:cf:11:97:1f:
                    35:d2:27:4d:89:7e:01:0a:29:d9:cb:cb:1c:f2:6c:
                    13:d4:ac:99:af:99:f4:5e:cc:27:d5:d0:46:a0:c4:
                    2f:23:8d:2f:09:68:2d:28:e9:0f:0b:bd:67:9c:f6:
                    c3:49:38:bc:85:e5:d3:90:61:33:47:6a:b9:26:e5:
                    c5:0c:50:2a:86:ca:56:f8:fc:a2:8f:a8:74:f8:5a:
                    6f:32:d3:26:09:37:b6:06:07:b1:c2:28:0e:84:8b:
                    dc:23:23:22:2d:09:8d:74:82:c6:b2:53:15:e3:10:
                    72:aa:36:e9:88:a9:b3:da:12:a0:36:3f:53:22:4a:
                    ba:29:b7:d5:2d:71:40:66:2c:0e:9a:04:35:db:8b:
                    32:c2:ff:b8:2f:85:0d:94:70:64:3b:e9:d4:65:94:
                    5b:5f:d0:98:f4:d6:00:66:1b:3b:ad:4a:9a:bf:49:
                    6c:c4:6a:32:fb:52:2b:2d:81:53:aa:c5:22:7e:f6:
                    32:e3:ab:cc:0b:4c:78:24:c5:83:d9:03:56:96:22:
                    55:13:3a:51:3a:25:33:8d:16:81:eb:49:b7:ce:fe:
                    76:aa:c6:6d:62:81:38:ba:6c:0e:5f:2f:85:bd:d1:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:84:96:C8:9E:F6:A1:E9:6D:65:65:5F:13:17:C9:1C:B3:ED:C5:28
            X509v3 Authority Key Identifier:
                keyid:3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/9ISWyJ72oeltZWVfExfJHLPtxSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:f0:7c:aa:29:94:9c:fd:2f:b7:6a:31:7d:ee:6b:cf:f8:6f:
         63:4a:36:ed:f4:19:3a:60:f0:dc:b7:9b:c8:ef:35:06:be:1e:
         f5:3b:4a:56:df:ac:32:b5:17:af:b1:93:34:65:d3:95:c3:53:
         8c:eb:c3:b4:92:2d:80:73:14:59:e2:1c:1d:65:b2:cd:06:bf:
         c6:fe:d8:4c:7b:8e:a1:f4:c6:e7:10:16:c4:ac:1f:0f:5d:5a:
         34:00:0d:a5:e0:04:dc:59:af:c5:b3:67:a7:82:d2:09:2d:4f:
         07:64:58:de:d7:e5:d5:6c:36:e2:d9:80:7f:59:73:0f:36:0f:
         ee:de:31:d2:37:fd:c0:8e:e8:c5:3c:55:35:f1:50:9f:06:25:
         13:b2:3f:92:2c:c7:b4:e4:31:51:9a:3a:fa:6a:e0:6b:66:76:
         b9:03:d8:99:0d:ac:f5:c2:69:27:d8:71:ed:ec:24:21:27:70:
         54:86:18:38:59:12:74:a7:a1:b0:50:49:f0:58:45:21:27:eb:
         6a:06:6c:44:a0:76:0a:1d:92:9c:0a:26:fc:50:8f:16:b1:76:
         ac:57:b7:25:7a:8d:39:14:92:02:94:b1:92:78:a8:de:92:f4:
         5f:6e:32:c0:58:ea:fd:d6:61:f6:54:56:d5:19:57:3a:fe:4f:
         5b:15:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org