Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/m_hgonjTH76WDOHRTlIkGAeKDEY.roa
File:                     m_hgonjTH76WDOHRTlIkGAeKDEY.roa (raw, json)
Hash identifier:          2c00a4OTbK2oYEUogcD4o9tLfhqxB5lIohht+IfZSM8=
Subject key identifier:   9B:F8:60:A2:78:D3:1F:BE:96:0C:E1:D1:4E:52:24:18:07:8A:0C:46
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       F3
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/m_hgonjTH76WDOHRTlIkGAeKDEY.roa
Signing time:             Thu 08 Jun 2023 09:37:20 +0000
ROA not before:           Thu 08 Jun 2023 09:37:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        36.2.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jun  8 09:37:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9BF860A278D31FBE960CE1D14E522418078A0C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:1a:c9:d1:47:4b:2e:7f:be:f8:1a:d0:ef:
                    41:41:fe:a4:e0:cc:7d:db:fa:3d:a1:f6:25:0c:7d:
                    9d:8f:64:c4:03:12:3b:4b:68:5c:ca:c2:ba:a3:9f:
                    29:5f:77:1f:4c:c1:9c:91:3c:f7:44:b4:1e:ae:c3:
                    9a:82:81:0c:25:d7:f8:d3:7c:ae:c5:3f:c6:85:05:
                    48:7e:10:35:ec:c5:9b:b8:ee:da:1c:ac:2f:75:94:
                    76:11:dc:8c:e2:e8:14:4c:a8:c1:59:e3:43:0b:24:
                    a0:61:6a:44:8f:dc:a9:4f:2f:f3:89:17:0f:4f:6c:
                    7f:63:93:b8:0d:57:a2:79:8f:31:e5:72:f8:e2:9d:
                    d6:d7:51:fd:e1:1d:cc:d4:02:58:8c:33:4c:63:f9:
                    3c:8d:b5:a1:0c:89:b7:95:5a:63:17:78:7a:d5:63:
                    3f:2a:e2:dd:82:5d:27:e3:9e:fe:fa:0b:b2:ac:85:
                    f3:6b:a8:10:64:9a:86:15:49:4e:2e:1a:d4:38:70:
                    bb:f4:28:5d:c2:01:11:ad:bb:18:1c:62:04:91:1f:
                    58:65:56:70:c7:13:3b:d4:0d:ab:12:a8:59:8b:13:
                    8c:3b:a8:c5:43:03:30:5c:33:2c:8a:1f:85:8a:0a:
                    7f:4f:9d:7f:51:69:c6:e4:53:9a:3b:dd:da:bc:f4:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:60:A2:78:D3:1F:BE:96:0C:E1:D1:4E:52:24:18:07:8A:0C:46
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/m_hgonjTH76WDOHRTlIkGAeKDEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:11:71:9d:5b:eb:65:47:95:08:2d:9c:f7:8b:ee:cf:5a:fc:
         e2:75:da:03:c5:a2:3e:3e:87:ea:3d:f7:94:a6:68:7c:c6:bb:
         5f:0d:5f:c5:b8:9c:a4:0b:a0:0e:60:4e:d3:89:51:40:08:67:
         44:fb:b1:db:13:48:40:79:62:fb:ac:40:9c:c1:f8:04:b3:12:
         5b:0b:4a:0a:b6:c5:08:af:56:f7:6d:23:97:f1:63:f6:28:52:
         14:59:7b:53:6c:0a:c9:78:fe:6c:35:3d:12:8c:d3:24:55:25:
         46:c2:90:0a:18:09:fe:66:91:97:33:a0:38:5f:54:25:26:60:
         cc:7f:32:fa:d1:5e:84:95:0e:0a:37:80:bd:a4:c5:b1:d3:c2:
         28:bd:2a:86:ac:ca:d7:dc:0f:6d:cd:0b:03:cf:51:c5:76:94:
         d7:e5:5e:8a:a7:43:66:86:e6:c3:41:8e:5e:ec:db:ff:a1:78:
         5d:0c:9c:c8:99:7f:e9:45:b0:d1:3c:50:4d:f6:2c:53:06:5b:
         ca:4f:83:b5:bd:01:bf:4d:fa:6a:14:cb:49:c1:68:f6:86:c0:
         d5:94:ca:a1:9e:ee:69:91:4d:7e:3d:3c:d9:4a:e3:e4:2f:df:
         4a:ab:89:29:de:87:2b:de:1a:1e:8f:1c:1b:d7:89:1a:7d:40:
         8b:f3:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org