Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4V-Xf9PCUBntQjYOwliQhjwPXVs.roa
File:                     4V-Xf9PCUBntQjYOwliQhjwPXVs.roa (raw, json)
Hash identifier:          KKWftNEnYuhieCxTBJKgePU0bT9Ns2ko3Whk7VapkFc=
Subject key identifier:   E1:5F:97:7F:D3:C2:50:19:ED:42:36:0E:C2:58:90:86:3C:0F:5D:5B
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       EB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4V-Xf9PCUBntQjYOwliQhjwPXVs.roa
Signing time:             Wed 01 Feb 2023 01:29:27 +0000
ROA not before:           Wed 01 Feb 2023 01:29:27 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        211.2.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:29:27 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=E15F977FD3C25019ED42360EC25890863C0F5D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:a9:ab:04:aa:93:01:35:87:b9:b4:f9:c7:
                    6f:48:ce:2d:ef:a2:ee:38:65:64:59:f4:56:ef:98:
                    1e:4d:7d:ad:aa:70:fb:1c:24:ba:ba:22:02:04:b4:
                    27:fc:5b:f3:30:13:50:c1:e6:41:7c:cc:5d:19:bf:
                    56:d0:09:42:d6:87:c1:e1:dc:ec:ad:3d:a6:1d:51:
                    cb:d0:d2:1d:0c:32:57:a0:9a:36:22:18:66:f1:a1:
                    f9:38:48:94:f5:28:f5:ce:96:91:7b:f6:d8:5e:f2:
                    76:1a:c8:3e:99:20:58:3a:af:79:22:fa:e6:94:43:
                    89:33:81:ed:82:91:ae:e1:bf:8c:94:9d:10:fe:e3:
                    a9:98:6f:21:ef:30:33:32:f8:67:d4:4b:24:82:29:
                    48:92:35:db:39:3e:cc:88:7c:6c:77:cb:a9:ac:38:
                    2b:1b:06:54:5c:cd:b5:ae:53:a5:95:0e:64:5f:9a:
                    80:fd:9f:47:81:ad:10:58:0f:57:bc:4b:96:f4:46:
                    59:74:ca:ee:fa:c1:49:f8:ed:3d:6f:03:ca:46:1e:
                    4a:6e:4f:45:b1:93:be:68:ce:71:10:b1:93:33:2b:
                    23:3b:31:2e:b9:62:bd:d7:10:77:6c:d3:31:78:58:
                    73:c7:2c:cc:2d:04:5b:1b:4c:fd:08:d0:0b:42:8b:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5F:97:7F:D3:C2:50:19:ED:42:36:0E:C2:58:90:86:3C:0F:5D:5B
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4V-Xf9PCUBntQjYOwliQhjwPXVs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:17:db:1a:ca:1a:fe:72:b9:8a:81:83:03:ec:d8:ea:44:
         69:09:d6:8b:7b:15:d1:c2:10:b8:07:8c:87:37:82:bc:3f:66:
         31:87:35:e9:0c:b1:e3:b4:68:68:bb:2c:12:f2:e0:06:90:ab:
         18:b7:5e:b2:49:c2:17:20:87:af:28:66:a1:6d:2d:64:0c:f3:
         ca:96:6d:3b:a8:64:71:1c:8c:75:53:67:38:1f:37:e0:63:d5:
         df:b2:09:c9:dc:07:1f:6b:9e:0c:85:02:78:0d:e4:50:b6:c7:
         c4:0f:c1:89:67:86:22:0f:f1:b4:37:01:9e:ba:4c:e7:ca:1d:
         b7:5a:85:ac:39:fe:3a:98:ce:a8:57:d6:d9:c1:e4:5e:98:ea:
         0c:17:17:76:49:a7:86:f4:ba:7b:03:0e:04:7c:48:6b:1a:08:
         58:c2:3f:7d:74:cc:cf:dc:47:8b:20:a9:24:bf:6f:d2:77:95:
         9b:c0:47:8d:cf:57:6d:ba:c0:7f:62:6b:2e:43:d1:24:95:74:
         7e:27:c8:4c:3c:b8:b8:77:c6:f9:84:ab:9b:2e:03:d1:95:44:
         44:23:8c:1b:90:04:f4:73:3c:af:00:95:3f:1f:9f:46:ad:07:
         62:5f:83:b0:92:c3:2f:32:86:52:73:ad:28:10:2d:ff:3e:06:
         22:18:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org