Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/L1eSloTOyfZ8zBHvHWyD_vUPfN4.roa
File:                     L1eSloTOyfZ8zBHvHWyD_vUPfN4.roa (raw, json)
Hash identifier:          01AVIHSsmwQthZN8O+fhhTMS+3WrzqSdFgopH5+grZ0=
Subject key identifier:   2F:57:92:96:84:CE:C9:F6:7C:CC:11:EF:1D:6C:83:FE:F5:0F:7C:DE
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       F4
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/L1eSloTOyfZ8zBHvHWyD_vUPfN4.roa
Signing time:             Thu 08 Jun 2023 09:37:27 +0000
ROA not before:           Thu 08 Jun 2023 09:37:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        36.2.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jun  8 09:37:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2F57929684CEC9F67CCC11EF1D6C83FEF50F7CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:48:82:28:04:d7:f7:f5:55:43:ad:6b:53:
                    db:91:db:3a:eb:72:b9:2f:83:03:d7:0a:e8:1d:8d:
                    10:19:a4:91:c9:01:ba:a4:c6:ec:1c:32:60:33:d1:
                    ba:0a:44:fc:f2:13:90:4d:11:bd:bc:ba:f7:a9:ad:
                    7f:0e:71:14:74:2d:f8:b0:65:4a:c5:4d:34:4d:a0:
                    e3:c1:ef:57:e0:2f:ff:fc:b2:bb:ea:6f:bc:0c:16:
                    79:2f:ad:f1:85:33:39:49:b5:02:9e:50:7d:e6:02:
                    14:1e:c2:02:1a:48:10:7b:da:cb:bc:37:a5:bc:30:
                    59:74:1b:64:97:a1:f2:ae:f5:25:74:40:93:9c:c9:
                    06:9f:b3:3e:d3:f4:ba:6c:c6:a3:d8:45:c6:f3:82:
                    ef:54:40:1d:a1:5b:0c:45:4b:ec:dd:55:3a:0a:00:
                    b3:90:14:63:cc:55:f7:63:fd:2b:53:a9:ed:d1:a0:
                    3e:6e:1d:9a:ea:2c:68:35:c9:08:6b:19:e3:83:98:
                    43:2a:d6:68:31:b6:c1:1d:db:0c:f8:bb:84:6c:4d:
                    ff:5d:02:7e:55:92:68:be:54:6c:64:75:4c:7b:33:
                    e7:63:7c:66:8a:e0:cb:0a:a6:eb:b3:ba:83:bb:81:
                    4e:9d:8f:bb:e2:2a:b2:84:b3:eb:76:a3:20:f9:a3:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:57:92:96:84:CE:C9:F6:7C:CC:11:EF:1D:6C:83:FE:F5:0F:7C:DE
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/L1eSloTOyfZ8zBHvHWyD_vUPfN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:6a:87:ea:b9:28:87:54:91:6a:ed:55:7b:c8:a2:5a:c0:
         34:5d:f9:cd:8f:db:09:d3:6d:28:c9:fe:91:40:42:6e:48:0d:
         c7:76:6b:c1:ed:de:d7:96:f0:81:1e:a4:9a:a8:d2:d0:07:b2:
         46:56:98:ca:69:f6:5f:2d:a2:b9:0c:3c:4d:43:61:18:d1:cd:
         8c:25:63:2e:05:f5:f7:3d:6d:b1:26:8f:e5:f4:d3:01:5b:4f:
         bd:d1:4a:b2:7f:7c:a4:45:6b:29:4e:e4:0c:9c:a4:3a:dc:e3:
         0f:45:52:75:3e:d2:2f:10:af:70:ff:ac:18:d4:7f:e2:83:46:
         48:75:e2:60:02:20:62:ea:bf:15:58:1d:85:0b:cd:82:c5:50:
         80:e6:97:0d:e7:7a:b0:81:93:e1:88:b9:48:2e:61:22:12:71:
         2b:eb:ad:25:a2:f4:ed:e3:c6:8d:08:55:fb:ff:ee:86:aa:e0:
         cf:eb:d7:55:76:e8:eb:27:f4:49:25:e3:f3:a5:c9:da:1f:e3:
         e4:0d:35:d5:11:b3:a5:0e:2e:94:11:71:79:26:d9:69:a8:1a:
         64:e7:dd:6a:af:c1:5e:cf:02:0b:c6:2d:0c:ed:fc:1f:45:6b:
         07:6c:a8:cb:5b:b2:d6:56:a0:fb:11:0a:44:52:96:42:2e:22:
         98:5b:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org