Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/7z50C_pXVcvslos-RbhPEPkng-s.roa
File:                     7z50C_pXVcvslos-RbhPEPkng-s.roa (raw, json)
Hash identifier:          vmfusYeMU0681r3r8B6yRX1Q+uL5CBEn0pQo5JUlULE=
Subject key identifier:   EF:3E:74:0B:FA:57:55:CB:EC:96:8B:3E:45:B8:4F:10:F9:27:83:EB
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       48
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/7z50C_pXVcvslos-RbhPEPkng-s.roa
Signing time:             Sat 01 Apr 2023 01:29:54 +0000
ROA not before:           Sat 01 Apr 2023 01:29:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        203.191.208.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EF3E740BFA5755CBEC968B3E45B84F10F92783EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:1e:41:82:21:d2:50:60:5d:a0:58:b5:d0:
                    d5:b9:be:a0:e3:fa:d1:f8:11:4b:0b:14:47:48:22:
                    1f:45:af:36:86:a6:c1:02:77:45:ad:73:a3:43:1b:
                    9c:19:9e:d6:74:e1:a4:a3:5b:3d:0b:7f:61:9a:10:
                    92:86:47:28:a6:e3:ab:c5:a8:2b:ce:33:ea:39:e1:
                    22:4d:97:10:2a:8a:71:86:e0:cd:fd:16:73:44:e8:
                    c3:35:22:87:f0:b8:ca:a2:39:ff:e7:62:3e:50:b6:
                    d0:a5:0e:ab:5f:b8:8f:f3:be:17:41:47:c2:6d:79:
                    55:6c:1a:4b:bf:bc:00:08:9e:1e:69:a1:96:88:fc:
                    87:56:1d:49:6f:86:50:98:2f:01:5a:ca:64:03:1e:
                    0b:de:14:b7:29:65:b8:0a:4e:55:b1:2a:bb:9c:68:
                    da:e3:6d:a3:79:ad:09:3d:89:5e:bd:05:de:d3:d3:
                    4f:ed:42:5a:00:be:13:bf:d9:5c:cb:5f:b0:df:d8:
                    d6:0f:a9:79:76:8f:27:7f:22:e1:d0:42:b3:54:76:
                    0a:4f:e0:50:3f:99:5e:23:0f:fa:d2:73:35:8f:dd:
                    37:b6:6e:e0:6d:48:46:23:95:b6:90:f1:88:50:d7:
                    f1:c0:6b:b2:8e:33:55:de:7a:24:09:e5:76:4e:9e:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3E:74:0B:FA:57:55:CB:EC:96:8B:3E:45:B8:4F:10:F9:27:83:EB
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/7z50C_pXVcvslos-RbhPEPkng-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:17:5c:c5:a7:d4:0c:84:72:9d:1d:4b:bd:ca:1b:f7:05:
         2c:a1:81:47:f6:83:af:05:6e:38:87:99:5e:aa:de:df:47:01:
         93:a9:4d:62:01:30:1e:ae:26:c8:3b:dc:e4:a3:e8:76:59:da:
         27:a1:5a:e2:d4:c1:1c:c2:9e:71:de:8c:bb:52:51:af:40:e2:
         16:61:f7:d0:7f:85:4b:c2:a3:18:69:b6:56:c0:03:de:55:f4:
         59:27:a0:a5:54:29:b7:9e:9a:67:3e:4d:97:6b:42:f1:23:7c:
         43:5d:94:13:4c:80:5e:6f:a4:ba:da:de:24:c4:18:19:49:2e:
         af:a8:86:47:11:e1:21:46:f8:8e:76:1c:ca:fd:ee:70:eb:48:
         f1:9a:3d:b1:6d:45:11:ca:1c:bb:cd:79:3e:af:4d:6e:4a:33:
         11:9d:fe:65:75:86:ff:83:ec:0c:2b:31:4a:f8:3e:c0:ff:af:
         f1:e0:86:33:c3:ab:4b:67:78:b9:fc:dd:8c:c6:a0:d6:f1:d1:
         2f:7b:95:d0:29:3d:4c:12:2f:61:33:c5:5d:d1:24:0f:ca:0d:
         b0:ae:70:7d:39:37:a1:4a:6d:62:06:fa:0e:0c:a1:78:0c:0a:
         89:a2:00:79:74:3b:13:17:a6:54:bf:7f:eb:82:3c:2d:8f:aa:
         a6:c0:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org