Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5izJE-OD83zrtUYeyyiIoxsu5Yw.roa
File:                     5izJE-OD83zrtUYeyyiIoxsu5Yw.roa (raw, json)
Hash identifier:          xVa9BoY+tDaIoPW2WmYrniVZzazBKX9Iq/giV+fr8Tg=
Subject key identifier:   E6:2C:C9:13:E3:83:F3:7C:EB:B5:46:1E:CB:28:88:A3:1B:2E:E5:8C
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       59
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5izJE-OD83zrtUYeyyiIoxsu5Yw.roa
Signing time:             Sun 01 Jan 2023 01:29:36 +0000
ROA not before:           Sun 01 Jan 2023 01:29:36 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        164.70.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Jan  1 01:29:36 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=E62CC913E383F37CEBB5461ECB2888A31B2EE58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:1d:51:f5:88:6d:e3:32:33:3c:cb:94:a5:
                    90:6c:64:e2:85:b4:e9:f9:08:67:52:6f:0d:30:b2:
                    ae:11:97:1c:a3:60:2b:50:7e:07:f8:e2:e8:5f:f4:
                    75:ea:e8:9f:21:38:ce:09:82:69:91:64:72:e1:9d:
                    8c:23:06:d9:ee:21:df:da:3e:3c:4f:f7:0b:4b:63:
                    69:8d:6c:53:bc:87:da:03:2c:36:64:8f:47:52:7d:
                    0b:fa:0b:fa:d0:c5:93:e6:cb:07:73:92:03:8a:f9:
                    ea:a0:c2:a0:e2:3b:c4:9b:6a:e3:44:47:86:3d:f8:
                    24:0c:26:1c:86:b6:01:33:df:45:13:11:21:08:eb:
                    8b:40:3a:49:1c:f8:31:13:5a:38:fa:11:e6:08:06:
                    e0:d5:5b:bf:c8:aa:fe:2b:9f:67:29:57:b1:06:a6:
                    07:b1:59:07:54:55:78:5b:c8:8b:d0:f7:3e:7b:a0:
                    49:5a:5d:f4:d1:a5:38:a0:6a:a6:46:5a:92:4e:7d:
                    77:fc:19:2d:52:ab:89:76:27:bc:a6:be:67:62:64:
                    27:6b:ed:4c:3f:60:4d:34:83:6c:32:17:44:32:a8:
                    5f:18:53:49:dd:80:de:b3:07:48:14:a4:39:b9:af:
                    48:e6:df:6f:33:c3:10:78:32:80:b8:1a:7e:84:8b:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:C9:13:E3:83:F3:7C:EB:B5:46:1E:CB:28:88:A3:1B:2E:E5:8C
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5izJE-OD83zrtUYeyyiIoxsu5Yw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.70.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         cc:62:68:05:49:26:6b:fa:c1:80:68:9b:09:89:23:76:b8:97:
         bd:0a:1a:61:c9:c2:d4:03:e8:bc:51:6c:6c:5b:fa:b8:41:55:
         66:c6:93:a8:e0:8e:a0:fc:c3:ac:92:da:71:d8:c9:e9:d8:a6:
         3d:8b:fa:02:8d:b0:fb:29:f1:eb:42:57:90:3a:32:ee:f1:a1:
         c4:be:9f:6c:76:d0:3f:7d:6f:73:bc:39:03:e7:23:92:17:c6:
         b4:f8:fe:99:65:4d:b9:fc:6d:34:04:51:dc:72:43:eb:6c:a8:
         a4:e9:41:ad:6c:8f:74:f2:0d:b6:08:02:53:ea:b1:60:4c:14:
         d2:80:41:32:39:55:c4:bb:9e:ac:4b:04:d3:55:0d:47:25:ab:
         85:40:1b:fa:d5:fe:ff:7c:4a:26:d9:95:ed:69:51:da:d6:ff:
         a8:40:ad:27:0f:80:72:a8:23:8d:3d:b2:b0:14:f5:7d:a7:07:
         40:8d:27:43:2a:7c:6e:3d:a7:ef:6d:0f:9d:7f:ec:f3:ef:bf:
         f3:c9:ed:e6:85:07:63:e0:04:b1:2d:6e:ec:8d:78:22:33:d8:
         d4:10:9d:c4:1f:01:0d:fe:a9:98:9d:6f:3d:4f:56:e5:7b:fc:
         28:b0:c9:4b:4f:85:b2:d7:00:c2:e5:05:73:c2:d4:33:a3:92:
         3f:ae:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org