Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/42DWn1nWkKb2UnZ_mhEfT_imUUs.roa
File:                     42DWn1nWkKb2UnZ_mhEfT_imUUs.roa (raw, json)
Hash identifier:          ak+tFDbWR2g5fSx5kYe5T3odZMpiHckxONPoJSZLhjw=
Subject key identifier:   E3:60:D6:9F:59:D6:90:A6:F6:52:76:7F:9A:11:1F:4F:F8:A6:51:4B
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       E5
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/42DWn1nWkKb2UnZ_mhEfT_imUUs.roa
Signing time:             Sun 01 Jan 2023 01:31:08 +0000
ROA not before:           Sun 01 Jan 2023 01:31:08 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        150.249.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:08 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=E360D69F59D690A6F652767F9A111F4FF8A6514B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:97:d7:34:b1:4e:27:f8:25:ac:8d:67:c8:
                    69:ef:85:e1:35:5d:9f:2a:5d:6b:20:74:c4:41:27:
                    c3:12:47:ba:27:c4:2f:17:87:bb:86:85:55:89:32:
                    86:9f:a4:80:3a:6c:50:23:c8:ea:96:96:14:b3:f0:
                    b6:58:85:ac:61:60:58:50:18:8f:47:1d:1d:91:b6:
                    ca:2a:94:39:fc:d9:b5:c5:2e:dc:1d:a5:fc:f2:70:
                    82:45:15:94:b3:97:9a:2f:b2:58:36:94:88:2a:97:
                    57:0f:ed:53:0e:e9:d6:a4:07:53:2a:9d:92:3b:6a:
                    ce:04:ba:cf:10:88:18:e4:06:ff:c4:58:81:a4:1f:
                    90:16:df:36:87:a9:a3:a6:94:e3:3f:c7:2e:65:4c:
                    76:c8:65:07:a6:0c:bb:7d:c5:40:22:04:90:5b:a8:
                    08:2d:35:80:91:f3:e8:9f:7e:2a:e7:85:0e:d5:41:
                    a5:4f:95:08:2e:72:a6:e3:d3:0b:21:02:44:a8:81:
                    fc:a5:e8:83:74:d7:48:ee:4a:28:6c:2f:61:7a:01:
                    2a:0d:c4:5c:fc:e7:33:77:b1:57:e7:88:56:74:a4:
                    a2:2a:9f:43:1b:03:d3:d5:42:6e:fc:83:4b:b9:dc:
                    dc:e0:9d:6d:23:c9:9b:5d:72:12:79:d1:e5:25:11:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:D6:9F:59:D6:90:A6:F6:52:76:7F:9A:11:1F:4F:F8:A6:51:4B
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/42DWn1nWkKb2UnZ_mhEfT_imUUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:1e:ec:78:ca:26:c4:88:78:a0:26:6d:80:09:e3:c8:9a:
         39:6a:f9:ab:14:80:f8:6c:90:fc:b8:f3:ff:38:b1:4d:d2:dc:
         e5:ee:79:57:95:ef:36:3b:8a:5c:fa:c7:9c:f6:98:10:00:ca:
         b1:1d:97:69:ab:d6:65:9e:fa:76:3a:6c:06:c0:4c:f4:7b:63:
         68:2d:80:32:d1:2f:79:f6:5e:1d:97:46:06:4c:14:7a:be:8b:
         2f:99:8b:3e:ec:db:e7:03:3e:0e:71:58:29:97:83:45:6c:1c:
         34:b3:57:42:8a:27:ca:1c:dd:d6:47:ac:cf:dd:a8:db:73:02:
         65:bc:6b:60:ee:de:e8:64:c5:29:0a:38:a8:00:2e:e9:f9:ac:
         6a:a1:48:93:6a:2f:84:73:4f:cb:42:e3:14:72:e1:7d:18:d3:
         2b:e3:3e:44:ff:13:02:b5:05:93:8d:ad:fd:a7:b0:85:f9:d1:
         0f:d5:8b:e2:51:90:62:32:ab:51:72:c1:80:eb:ee:73:69:4c:
         b7:f6:2b:78:be:e4:b1:1e:69:f0:e6:4f:2b:8e:cb:5b:f6:6e:
         df:6d:5c:3a:7b:01:81:bc:46:36:8f:55:e5:72:13:f9:d4:68:
         d4:69:a8:58:00:d9:14:67:61:8b:56:55:4a:c0:0b:db:26:96:
         84:a0:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org