Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qerJwFa0w-ZRIYtAtxjukq25Jzs.roa
File:                     qerJwFa0w-ZRIYtAtxjukq25Jzs.roa (raw, json)
Hash identifier:          L/SC0LMJ9garLp4fckJWecH/xaGtGues6MCdX/1ixW4=
Subject key identifier:   A9:EA:C9:C0:56:B4:C3:E6:51:21:8B:40:B7:18:EE:92:AD:B9:27:3B
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       3B
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qerJwFa0w-ZRIYtAtxjukq25Jzs.roa
Signing time:             Tue 01 Feb 2022 01:31:17 +0000
ROA not before:           Tue 01 Feb 2022 01:31:17 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        164.70.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Feb  1 01:31:17 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=A9EAC9C056B4C3E651218B40B718EE92ADB9273B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:88:c0:66:27:5d:18:0b:e5:85:8d:2e:48:
                    f4:85:b3:ed:c0:8d:53:f8:a1:4b:ac:89:4e:a3:d2:
                    1c:00:2e:68:59:ac:d1:e3:34:2e:96:c8:00:d3:79:
                    fe:4a:9c:37:a1:cc:81:15:95:68:9f:17:0f:50:a9:
                    d5:bb:04:8e:85:d0:b0:17:85:a2:fe:76:05:27:dd:
                    d3:3e:ca:6a:e9:40:98:cd:58:10:f6:0c:85:c0:40:
                    6b:af:c2:40:b7:e5:94:0f:5e:32:05:a1:fc:de:a5:
                    ed:d0:f7:d7:9e:4a:f4:a0:c0:d6:9b:d1:fa:4f:cb:
                    6b:b0:b0:a5:c8:82:f6:56:49:f0:6e:df:4d:3a:ed:
                    8e:d8:03:f9:55:d1:71:ef:90:50:dd:a7:f5:84:68:
                    dc:50:33:15:0d:16:c8:19:2c:c2:73:21:55:1a:b1:
                    76:6a:34:c7:3b:c8:95:57:11:4a:71:09:86:08:9b:
                    85:8d:55:9c:36:e4:49:e6:da:d6:0c:4c:9e:de:02:
                    7b:d4:b5:86:02:de:4f:f4:08:94:93:32:d7:b2:ce:
                    23:89:30:cb:c7:1f:5f:da:35:bb:63:cb:20:f0:6a:
                    07:b5:ce:5d:0e:38:6b:9c:57:d3:19:02:27:52:56:
                    5b:35:35:5d:cf:29:40:2e:30:16:b0:0e:81:6f:b9:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:C9:C0:56:B4:C3:E6:51:21:8B:40:B7:18:EE:92:AD:B9:27:3B
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qerJwFa0w-ZRIYtAtxjukq25Jzs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.70.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:40:0c:b6:e0:15:e6:90:63:a1:e8:05:40:0a:d4:13:5e:
         8d:55:be:48:fd:9c:98:e2:f1:6e:59:98:91:48:f0:06:12:19:
         ca:7b:ee:88:f4:25:ef:20:b7:7f:ea:18:ca:de:f8:6f:b3:2d:
         33:82:7d:ad:48:bc:44:3e:97:3c:b5:48:87:e8:b4:99:6d:0a:
         28:10:59:af:c0:9b:e0:bb:41:90:0a:dd:05:51:ac:f1:55:f6:
         d9:5f:1e:a6:77:8b:a2:9b:86:0d:d0:c5:1f:02:9c:03:36:80:
         7a:4c:44:20:23:94:87:9a:f9:62:25:33:84:f6:ea:df:01:6c:
         a8:70:f2:f4:3a:28:12:a3:fb:5f:25:68:48:7d:74:e4:67:5c:
         2f:20:fc:ed:70:65:1f:32:fe:36:58:b8:18:ae:88:da:95:bc:
         d9:2c:74:94:d8:5a:15:33:c8:15:42:29:26:ca:c6:2f:80:cc:
         fb:3f:15:43:91:2e:df:0f:a7:ad:50:31:b2:fe:4d:85:61:5b:
         6a:e6:06:7e:27:40:0e:92:92:1c:0f:f1:c4:ba:60:f0:50:78:
         6c:dc:4f:9c:ae:af:8b:e5:36:9a:ba:dc:38:1a:ce:cf:0a:25:
         89:69:4c:26:4d:07:a8:2f:de:c0:77:e4:77:41:19:79:e0:af:
         d8:cd:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org