Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/btVBMH3Vc0JRQr_MwyUhKYHzvAU.roa
File:                     btVBMH3Vc0JRQr_MwyUhKYHzvAU.roa (raw, json)
Hash identifier:          yT8+ZASU2SN/OXTjSYc7b145lOWhhf7hfe+URGDubiI=
Subject key identifier:   6E:D5:41:30:7D:D5:73:42:51:42:BF:CC:C3:25:21:29:81:F3:BC:05
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       47
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/btVBMH3Vc0JRQr_MwyUhKYHzvAU.roa
Signing time:             Sat 01 Apr 2023 01:29:54 +0000
ROA not before:           Sat 01 Apr 2023 01:29:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        203.179.0.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6ED541307DD573425142BFCCC325212981F3BC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:43:a6:1a:38:de:73:33:d2:d4:6e:a8:b0:
                    f6:ca:aa:75:c2:89:bf:54:8d:c6:5b:34:9b:97:ee:
                    72:f1:ef:25:99:c7:68:81:7c:b9:f2:22:0d:1d:77:
                    97:f5:14:d3:3d:1b:d4:fe:72:09:bd:71:7c:11:9b:
                    ff:e4:45:7c:8f:b1:51:56:53:78:4f:31:b9:cc:f4:
                    aa:b4:ce:08:d7:d6:b8:dc:e4:83:14:63:29:1c:91:
                    bc:0a:12:0d:68:33:96:88:f6:6c:21:7a:43:17:a4:
                    5f:63:31:6c:fa:7d:50:9c:69:98:1f:2c:4a:6f:87:
                    c1:7d:d9:f9:6f:78:0c:b5:c7:06:74:b8:31:1f:72:
                    81:9c:d6:ae:e9:c7:51:ed:f2:b8:30:2f:ab:0d:44:
                    cb:80:72:66:f0:3e:b4:57:f8:83:ff:06:df:98:8c:
                    e1:75:37:54:62:0b:86:e3:91:c8:a4:90:c8:f3:05:
                    fd:85:28:74:25:2c:bb:66:53:3d:f5:68:62:bf:e9:
                    a3:08:2f:39:b8:72:b3:56:b9:e6:22:5f:ce:00:57:
                    fc:63:0e:b0:e5:49:46:23:2c:76:e3:8f:6b:99:ab:
                    9b:e9:8a:e7:ef:d1:d5:89:4c:94:56:98:ba:f6:f0:
                    0d:da:8b:bb:9b:81:b1:53:bc:a5:a4:c8:b6:04:e9:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:41:30:7D:D5:73:42:51:42:BF:CC:C3:25:21:29:81:F3:BC:05
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/btVBMH3Vc0JRQr_MwyUhKYHzvAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:da:4e:05:df:35:bf:b9:11:26:38:95:d0:8f:f1:45:b0:1d:
         38:9c:98:36:9f:dc:8c:59:ca:b5:cd:d8:ef:d6:66:68:fc:5f:
         c1:1e:cb:b8:67:04:94:c1:7c:e4:ac:c5:a5:df:3f:50:34:96:
         aa:cf:c1:2f:2c:a7:c6:b3:73:a3:f7:6c:66:53:44:dc:f6:27:
         64:fe:9c:74:aa:9a:b2:1f:d4:5e:50:52:37:f2:50:61:4d:d1:
         9b:2a:a7:2a:cd:78:0b:bf:6c:c9:d0:7c:96:e6:04:27:0c:8f:
         22:e6:77:7a:21:52:d4:55:c5:ff:e4:d2:b4:54:5c:59:1d:3e:
         35:09:7a:e0:da:1b:d0:db:b3:49:9d:e2:d4:43:2c:f1:a6:cc:
         d4:e1:fc:66:0b:df:66:d3:db:5b:ea:2e:bf:21:51:cd:fa:ae:
         a4:d4:17:f2:42:21:e5:bd:c7:a0:03:c7:67:a8:92:f3:1d:46:
         84:07:4f:97:5c:0e:4f:f1:74:94:54:46:67:fd:cb:84:cd:9c:
         d7:8c:4e:c7:d4:c6:8f:79:9e:62:32:79:6c:67:be:db:c6:b7:
         b1:0e:4e:16:e9:23:bd:68:09:71:6c:12:91:02:f1:94:c9:4a:
         71:a4:ae:e0:e5:94:f8:b3:26:07:8b:7e:db:6e:1f:2a:b5:c7:
         7a:ca:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org