Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/cik_KvDIgo8Fbt8tO4CxOh358Lg.roa
File:                     cik_KvDIgo8Fbt8tO4CxOh358Lg.roa (raw, json)
Hash identifier:          iqA7zClxXnWq9JhuXLzzjvI67rdUeLoEqe6pW2KrheQ=
Subject key identifier:   72:29:3F:2A:F0:C8:82:8F:05:6E:DF:2D:3B:80:B1:3A:1D:F9:F0:B8
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       0D
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/cik_KvDIgo8Fbt8tO4CxOh358Lg.roa
Signing time:             Mon 20 Feb 2023 03:32:56 +0000
ROA not before:           Mon 20 Feb 2023 03:32:56 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:32:56 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=72293F2AF0C8828F056EDF2D3B80B13A1DF9F0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:6e:fb:73:be:af:d6:3d:c1:aa:15:9e:09:
                    2f:20:8e:7c:b6:53:7a:ef:71:81:cd:ec:a1:6c:ca:
                    99:3b:a6:a7:26:dc:81:d8:10:6c:54:43:ef:83:82:
                    5f:a0:db:b0:0e:6f:06:89:aa:2e:3a:f3:b0:73:d7:
                    da:a0:97:f4:57:f6:e4:ab:d0:35:4c:2f:c5:c3:7a:
                    d3:d6:8e:83:78:f6:52:bb:3b:e8:f1:8b:3b:b4:38:
                    7b:37:f1:19:07:f4:99:1e:66:c8:48:88:5e:1b:fb:
                    af:6e:71:47:94:79:cb:cd:f4:f0:04:19:b7:7a:40:
                    38:22:71:c7:e3:c8:2c:20:f2:d1:ef:be:4c:09:03:
                    f8:af:3f:db:50:27:36:9b:9d:37:01:61:b2:79:3b:
                    11:c1:46:f8:75:80:c7:61:7d:f5:29:ca:05:ed:f3:
                    ed:84:e8:6d:12:21:88:29:8d:d2:d9:5e:79:6f:55:
                    77:56:db:fb:a9:12:a8:e4:15:6c:bc:92:fb:2e:a3:
                    f3:d3:87:a4:c1:a6:98:94:c9:77:80:44:dc:30:82:
                    ef:ec:7c:37:45:6b:55:3c:5b:25:da:ff:85:38:ca:
                    e7:f0:b8:d1:cb:bc:41:d0:fb:0f:58:2f:4e:37:d4:
                    e2:3a:52:99:35:8c:73:23:0b:86:be:88:89:15:9e:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:29:3F:2A:F0:C8:82:8F:05:6E:DF:2D:3B:80:B1:3A:1D:F9:F0:B8
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/cik_KvDIgo8Fbt8tO4CxOh358Lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b5:a7:56:5c:a8:0f:66:a7:96:a5:54:c0:28:95:14:d7:9d:
         08:f0:51:98:84:18:b4:8a:1b:b7:fe:25:e7:d8:83:ee:f0:66:
         d9:e1:be:de:b2:c7:9d:f6:92:5b:92:a1:50:d7:82:c5:e5:bb:
         06:95:1b:0a:d0:ca:99:93:e5:58:8c:ae:d5:9e:38:41:a8:f2:
         ab:de:ec:2b:50:5f:cc:cd:d7:21:c8:bc:76:3c:2c:e2:43:64:
         88:b1:a2:a1:5f:a5:b9:f7:dc:e5:08:66:c8:0b:37:4f:df:fe:
         98:8f:e6:65:52:80:08:d5:48:5c:ae:c9:5e:0d:a4:ef:5c:86:
         0d:a4:64:98:b1:9f:63:1b:f3:0a:88:d2:0e:6f:47:27:c2:8a:
         0d:0c:81:c6:1c:d0:52:5e:aa:1e:b6:85:be:b5:9e:f5:39:b7:
         98:c5:94:87:73:6f:5c:a8:6e:53:ea:a1:c1:de:45:25:94:fd:
         c7:f7:2f:f3:4e:8d:53:f0:35:3d:a1:8d:f6:e5:a7:63:b2:43:
         35:59:3e:ad:96:d7:fe:a0:3d:b2:87:49:4a:96:9c:bd:d3:14:
         3f:2a:93:cd:a6:6d:f9:1e:2d:fb:70:94:91:9b:3c:7e:3a:49:
         cc:2c:e3:6d:85:ce:eb:78:65:f9:c1:b2:83:2a:7f:28:d8:7a:
         55:02:7c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org