Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Wx9qyn1cFsAFC-DeBlmyDvWAFNM.roa
File:                     Wx9qyn1cFsAFC-DeBlmyDvWAFNM.roa (raw, json)
Hash identifier:          OakaPMNF55OrDQUw3UBc3AxBrmpzSgCzQBcXYfDGkmA=
Subject key identifier:   5B:1F:6A:CA:7D:5C:16:C0:05:0B:E0:DE:06:59:B2:0E:F5:80:14:D3
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       ED
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Wx9qyn1cFsAFC-DeBlmyDvWAFNM.roa
Signing time:             Wed 01 Feb 2023 01:29:28 +0000
ROA not before:           Wed 01 Feb 2023 01:29:28 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        219.104.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:29:28 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=5B1F6ACA7D5C16C0050BE0DE0659B20EF58014D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:86:ad:a7:9d:f5:b9:45:8b:e4:9d:1c:d8:
                    bb:87:dc:91:2d:78:d5:ae:a7:fc:4c:ee:08:f5:f3:
                    1c:b0:da:98:96:d1:bf:e5:e5:32:9e:2f:73:5f:2a:
                    0e:dc:f7:72:0e:75:14:21:83:5b:d5:6f:d7:63:c8:
                    2e:ab:e5:ad:3e:05:d7:05:0b:17:3b:8a:82:62:ab:
                    d4:96:89:eb:e2:00:aa:c2:62:b5:c6:b3:d5:23:94:
                    77:b4:b5:3a:ac:8f:0f:3a:aa:76:d5:13:a4:b9:63:
                    ed:58:c6:f7:36:7f:86:40:55:34:26:f4:2d:06:c6:
                    24:99:ac:46:c2:f1:e7:51:b9:62:7a:90:4e:d7:e8:
                    e7:3a:b3:55:9f:d7:93:c9:47:a0:19:c6:a9:d2:7b:
                    fe:66:e4:6f:3c:60:05:0e:a7:d2:34:6d:4e:73:85:
                    8f:51:2b:45:d5:3e:e5:14:5d:89:ca:12:89:e0:31:
                    1e:17:f1:0b:f0:ee:db:42:d7:d0:6a:63:81:eb:79:
                    89:97:7c:a1:49:68:68:48:65:70:c1:f7:ac:83:e6:
                    9a:92:2d:78:c9:b8:21:1f:8a:d6:c8:30:cd:bf:17:
                    d6:51:61:45:f0:8b:84:58:2e:13:3c:a7:18:50:88:
                    30:57:a0:b4:6c:58:95:9b:cd:ce:98:24:07:9c:66:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:6A:CA:7D:5C:16:C0:05:0B:E0:DE:06:59:B2:0E:F5:80:14:D3
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Wx9qyn1cFsAFC-DeBlmyDvWAFNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:75:84:1a:10:e6:2f:65:2a:4f:7e:82:b6:44:93:fe:9d:
         c3:5c:b0:6e:c7:75:45:63:74:6a:a7:6c:66:34:50:08:b4:99:
         11:c4:9b:2e:e0:17:c1:dc:3c:e3:07:61:5e:50:09:0e:b7:90:
         11:27:bf:c3:7b:db:11:86:b3:a9:08:3f:50:c0:d7:e2:1d:28:
         0a:08:d8:f3:94:9b:f4:54:98:05:12:72:57:94:b4:ce:44:8c:
         40:aa:0b:8e:9d:92:b2:c1:7c:f2:14:7f:47:44:e9:5c:f6:8c:
         7f:8d:dc:40:2a:7f:63:bb:2d:45:87:b4:f9:c5:29:25:b4:39:
         3b:fe:b4:1c:2d:07:39:d5:9e:61:37:6c:01:eb:4e:c8:f9:b7:
         7d:5c:33:9e:ff:7f:59:6d:c0:17:37:dd:a3:b6:d4:da:47:15:
         18:b7:5e:c9:da:52:5b:14:51:9c:9c:31:e7:ad:3f:ac:e8:22:
         e2:80:b0:77:7b:02:ab:d4:1a:b3:fd:51:9f:77:9c:17:0a:be:
         a7:c8:7d:a8:f3:1e:45:12:f0:d8:3d:a4:e4:35:0f:4a:96:34:
         f2:cc:a0:0a:56:56:de:5b:c5:9b:2a:ed:38:90:3b:d7:d0:bc:
         df:19:cf:94:63:e7:de:66:78:1b:3e:c8:80:79:53:a2:93:6c:
         24:b4:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org