Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/7oVKLNfzHs-dWjz6-YD3YWuVahk.roa
File:                     7oVKLNfzHs-dWjz6-YD3YWuVahk.roa (raw, json)
Hash identifier:          oziZq4WWfpCfPOXdiVrHD9k60MZVQl4fTW5unapA8ww=
Subject key identifier:   EE:85:4A:2C:D7:F3:1E:CF:9D:5A:3C:FA:F9:80:F7:61:6B:95:6A:19
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       C2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7oVKLNfzHs-dWjz6-YD3YWuVahk.roa
Signing time:             Sun 01 Jan 2023 01:29:32 +0000
ROA not before:           Sun 01 Jan 2023 01:29:32 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        202.213.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:32 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=EE854A2CD7F31ECF9D5A3CFAF980F7616B956A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:4e:d9:89:27:11:bc:cf:b9:5f:39:ea:32:
                    d6:b6:34:44:08:7e:ed:5d:d1:07:74:84:26:92:86:
                    db:aa:a4:b6:6a:94:74:a0:fd:65:90:d7:76:c0:1f:
                    af:b6:0e:34:70:92:af:71:da:e0:64:78:3f:49:40:
                    a5:a4:0c:e8:aa:46:01:b3:88:d8:1e:21:3d:fb:63:
                    5a:2d:63:a0:ee:d6:e2:63:8c:d8:f4:bb:a8:3d:68:
                    93:3e:f4:5c:5c:82:20:86:0a:0d:79:02:ce:a9:35:
                    35:6a:ca:ce:0b:93:32:b0:91:7d:93:02:a6:60:c3:
                    1b:3b:45:ef:2b:83:c6:07:ac:13:b4:1c:dd:60:53:
                    ae:da:51:91:c2:73:31:da:33:e5:24:2e:82:27:92:
                    b6:e9:86:a0:4b:8c:33:79:65:38:20:31:33:e1:11:
                    2d:3f:06:3c:a4:b9:5e:f8:18:45:24:3a:f1:6b:23:
                    50:83:bc:8c:e8:7d:59:85:8d:a9:d7:2a:e8:d9:8f:
                    81:98:8d:2a:d1:ad:aa:cc:65:da:ce:86:fe:78:c2:
                    87:c6:9d:49:75:4d:f4:15:cd:2f:77:ae:72:32:5e:
                    ec:79:dd:b1:81:27:c4:49:9c:91:2d:ca:b6:29:a5:
                    bd:49:6a:8e:41:7b:39:af:31:4c:67:ce:ea:e2:6c:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:4A:2C:D7:F3:1E:CF:9D:5A:3C:FA:F9:80:F7:61:6B:95:6A:19
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7oVKLNfzHs-dWjz6-YD3YWuVahk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:0c:f7:94:cb:0c:49:19:a2:dc:a3:f9:5c:ae:09:bb:db:
         f9:09:90:35:c5:c3:0c:f7:5a:cb:e1:c8:58:66:22:be:d5:ef:
         76:08:80:08:31:7e:4d:73:26:f7:39:a5:0b:d4:bd:c5:d7:ac:
         47:4f:79:55:6a:fb:47:16:87:74:a1:2a:1a:28:d1:65:f7:73:
         78:e5:4c:ba:65:33:45:b4:fc:fb:76:37:42:45:0d:09:10:0b:
         ca:ef:ca:c1:31:2c:3a:83:6e:d1:d8:24:55:07:82:0a:3f:0c:
         7e:c3:1b:a5:df:55:dc:66:3b:8b:e6:0a:e1:b3:96:0c:78:26:
         a5:7b:38:fc:27:2b:3a:4a:25:c6:37:30:17:1f:ee:d2:5d:b9:
         94:f2:10:6e:3a:7d:69:48:21:a4:dd:8a:8d:cc:8f:0a:db:a0:
         03:9c:98:96:af:43:cd:ee:9e:44:7b:61:7a:31:20:72:82:19:
         bb:dc:73:a1:0e:0d:99:18:d8:bf:ea:3f:35:be:1e:c4:18:ef:
         c4:d0:db:28:c6:12:28:a4:13:fd:f4:07:ba:d5:71:50:8c:cf:
         28:50:78:38:fd:f7:3a:17:d6:04:90:ae:21:5b:ab:65:a4:fc:
         4a:73:0e:bd:ea:c7:ba:d1:20:b7:1b:7f:62:a8:b1:67:99:fe:
         5a:35:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org