Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ogbjy5t2ORVwlxcdgZTF3YY0RBo.roa
File:                     Ogbjy5t2ORVwlxcdgZTF3YY0RBo.roa (raw, json)
Hash identifier:          ez4TgedbUszeSMdJ5wgleBGQYzSiv1VWTjSb8//ONHo=
Subject key identifier:   3A:06:E3:CB:9B:76:39:15:70:97:17:1D:81:94:C5:DD:86:34:44:1A
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       DE
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ogbjy5t2ORVwlxcdgZTF3YY0RBo.roa
Signing time:             Sun 01 Jan 2023 01:31:03 +0000
ROA not before:           Sun 01 Jan 2023 01:31:03 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        61.120.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:03 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=3A06E3CB9B7639157097171D8194C5DD8634441A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:a3:84:17:3d:63:45:37:a0:7f:ef:4b:94:
                    6d:a2:e0:4f:36:ce:00:40:91:66:d0:44:89:f6:f1:
                    65:a0:53:6a:61:e8:f6:da:33:63:b4:c3:3a:ac:20:
                    83:34:7c:7c:d6:05:b9:41:84:f8:b1:53:c9:07:cc:
                    39:a2:2a:ea:af:7a:3f:23:36:67:b2:62:80:84:c7:
                    40:eb:8e:d0:44:bf:d0:58:c3:24:3b:fb:8b:cf:2f:
                    30:ba:08:59:8e:1d:ad:53:0e:71:09:20:ec:3e:2a:
                    aa:1f:b0:4c:b7:5b:c5:1b:60:c2:e6:b0:c8:32:b6:
                    b3:17:7f:16:90:34:e4:a9:c1:5c:a2:ae:30:9f:9c:
                    1e:32:14:16:a3:cf:c1:56:24:40:f0:34:39:54:96:
                    e9:d2:8c:bb:47:c2:74:32:63:06:3d:e5:e8:03:10:
                    58:45:a8:c6:0a:d6:80:4f:e7:b1:61:35:a3:99:d5:
                    72:3b:60:7b:c3:80:eb:03:5a:fd:0e:18:f9:1e:c4:
                    af:57:4c:cb:72:ca:1e:a9:a0:d8:c5:d0:07:de:29:
                    42:d8:79:ad:7a:39:91:bd:e5:99:d3:33:62:3b:d5:
                    f3:8a:62:78:d8:dd:10:6c:16:50:b0:3a:b1:10:98:
                    6f:46:1b:b0:b1:6f:3a:d6:40:07:c3:eb:9b:c0:5f:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:E3:CB:9B:76:39:15:70:97:17:1D:81:94:C5:DD:86:34:44:1A
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ogbjy5t2ORVwlxcdgZTF3YY0RBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:12:17:83:09:b4:cc:ce:97:17:9b:48:eb:d7:40:d5:b3:f6:
         92:f8:fb:a2:17:b3:cd:4b:ee:3e:52:8d:a7:0e:36:e0:44:f5:
         be:c1:20:da:b2:a6:59:f9:29:76:ed:a2:1f:ca:c9:51:37:15:
         49:c3:5f:5c:be:80:a2:f2:a9:5c:6a:c0:f6:f1:12:17:59:22:
         cf:6d:b2:ae:3c:91:b3:01:4b:7c:a6:51:99:3e:3e:73:83:9d:
         28:a6:43:c5:2d:92:38:49:e2:4d:9f:44:27:c1:c7:7b:d5:65:
         93:2f:07:e9:24:10:fc:df:1e:63:d5:6b:10:95:34:30:86:ef:
         6f:a9:9a:09:d0:25:d6:d9:61:0d:52:48:d2:65:0e:d4:d9:37:
         53:43:27:97:89:64:ae:6b:84:4e:b3:43:d6:2d:19:d8:65:b6:
         96:4a:a3:0a:84:85:53:0b:0f:4d:39:2a:08:ac:65:8d:28:37:
         a0:a4:bb:45:54:e1:ea:7f:00:90:0f:52:47:29:1a:f2:00:cb:
         af:63:a5:9e:9f:4d:88:2b:20:41:99:b5:5c:59:ed:99:90:f3:
         12:26:29:12:ee:73:ee:ac:42:25:dc:6c:0d:43:b4:19:31:5f:
         e6:bb:1d:5a:a1:37:50:87:81:2a:db:83:fd:e5:69:aa:ed:5a:
         0e:e5:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org