Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/t-v50TffMVbKapGrwrhSmmKNJ54.roa
File:                     t-v50TffMVbKapGrwrhSmmKNJ54.roa (raw, json)
Hash identifier:          h0o6pKt+nw5FN6BPmTV0ImhI4eGB5xcRcbSbNGUcPb0=
Subject key identifier:   B7:EB:F9:D1:37:DF:31:56:CA:6A:91:AB:C2:B8:52:9A:62:8D:27:9E
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       C4
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/t-v50TffMVbKapGrwrhSmmKNJ54.roa
Signing time:             Sun 01 Jan 2023 01:29:33 +0000
ROA not before:           Sun 01 Jan 2023 01:29:33 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        219.111.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:33 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=B7EBF9D137DF3156CA6A91ABC2B8529A628D279E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:15:96:e3:0a:79:20:76:94:5b:11:cb:2a:
                    48:c1:9f:fa:c9:15:ae:9a:8f:4a:d6:b7:21:71:83:
                    e3:16:ee:58:34:79:a3:09:95:4b:90:bc:0e:32:be:
                    f5:42:5b:60:d1:2b:14:1f:90:97:c1:99:3a:37:f9:
                    b1:78:0f:de:48:a5:a4:2b:83:d2:98:71:a3:19:2b:
                    f2:0e:6c:0a:39:7e:08:4f:4d:e7:98:59:a8:48:c4:
                    18:5f:d8:0e:b1:23:ff:ef:24:4b:7e:0b:55:f9:0d:
                    5f:3e:30:c5:67:89:9c:37:8f:0c:b1:e4:87:7e:81:
                    02:75:c6:cd:3f:78:ed:4d:6a:71:1c:d0:8b:c4:37:
                    44:4d:3e:f2:b3:4d:e6:92:dd:06:81:2e:e1:25:fe:
                    45:5d:da:c7:90:21:6d:ec:36:96:55:6e:5d:b0:ac:
                    01:97:df:41:3f:91:62:1b:a8:f9:67:73:8b:b8:c3:
                    8b:08:7d:01:7d:92:2f:0c:61:3e:7c:73:fd:cd:3b:
                    66:80:66:65:98:15:17:87:d0:3f:ab:78:bd:b3:78:
                    80:a1:89:f5:5f:32:fc:7a:30:4e:d6:a7:7e:4a:36:
                    64:d7:7f:14:9b:9d:36:c0:24:0a:c4:7e:fd:63:5a:
                    d3:1d:33:76:73:5e:25:97:1f:ed:32:59:5d:07:78:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:F9:D1:37:DF:31:56:CA:6A:91:AB:C2:B8:52:9A:62:8D:27:9E
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/t-v50TffMVbKapGrwrhSmmKNJ54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:6f:63:7d:bf:c0:21:cf:ca:61:b7:0f:6b:45:67:af:53:
         90:63:eb:2b:a3:be:76:4c:2c:70:91:04:94:46:df:fd:8d:73:
         4f:3e:3c:0a:1d:50:2c:8e:12:f6:19:ab:02:53:07:69:17:a9:
         1c:79:31:25:80:32:9a:62:6f:7d:b4:aa:8d:1f:6d:27:88:52:
         aa:4b:0f:3e:34:4a:16:9f:3c:be:b9:7c:48:74:aa:9d:62:7e:
         e5:78:29:cd:e6:dd:08:83:2e:64:85:f9:e6:e3:e6:53:38:9c:
         67:e9:1e:2d:d5:5d:a5:f9:2c:76:83:0c:d1:5e:52:f3:95:30:
         54:32:aa:8e:9f:c2:e0:41:46:78:64:d8:31:db:c0:33:1b:ae:
         55:80:5c:13:1b:b1:80:59:21:d6:28:fd:ff:98:00:1c:6e:06:
         63:27:49:ac:54:3d:2b:00:8a:b3:b7:38:d2:da:98:d1:26:96:
         5e:9c:0a:8d:9b:8a:bb:a4:99:b5:9d:d5:11:3c:8c:0d:f9:26:
         9e:ce:e4:a9:23:f7:0b:ae:69:61:06:f1:27:bc:a2:b3:1e:81:
         53:69:94:fd:2f:38:54:2a:42:c1:97:25:70:05:dd:3d:22:2c:
         3b:bd:86:d0:db:f4:03:dc:dd:2d:e8:17:25:13:15:66:5c:a0:
         2e:71:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org