Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wADk5EZo821RFXcFZbQVF1vub1E.roa
File:                     wADk5EZo821RFXcFZbQVF1vub1E.roa (raw, json)
Hash identifier:          nPCbknybAVdQRcK3Nubx4sGG2YZ/eo2C8cfW/R/D2AE=
Subject key identifier:   C0:00:E4:E4:46:68:F3:6D:51:15:77:05:65:B4:15:17:5B:EE:6F:51
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       BF
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wADk5EZo821RFXcFZbQVF1vub1E.roa
Signing time:             Sun 01 Jan 2023 01:29:31 +0000
ROA not before:           Sun 01 Jan 2023 01:29:31 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        39.110.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:31 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=C000E4E44668F36D5115770565B415175BEE6F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:4d:89:81:38:65:4d:82:d1:26:75:d8:d2:
                    6e:3a:b2:34:9b:e7:08:62:5f:b3:44:20:0b:b3:8e:
                    f0:94:29:78:82:ed:37:b8:6b:f2:74:73:77:ea:31:
                    53:5c:99:02:b7:b3:8e:c3:81:60:ef:b2:41:95:cb:
                    7b:cc:db:d4:33:51:bb:40:21:d9:c2:6a:c6:c6:fc:
                    bb:6d:30:44:44:b9:66:60:b4:f8:e8:2f:a5:ed:63:
                    62:fc:9a:5a:13:af:2e:5d:68:51:71:06:49:64:d2:
                    48:ca:98:1d:28:08:bf:80:fa:e8:16:41:eb:54:fb:
                    fa:b9:2c:e8:87:cc:2a:d1:5c:64:d1:76:9b:ff:b1:
                    bd:5f:4d:78:a1:ba:10:04:27:a8:11:83:04:ab:d3:
                    f3:7a:36:51:68:6b:3a:7d:4d:7e:d0:41:5f:f4:08:
                    9a:d4:28:bd:c2:bb:20:df:77:f4:36:5d:45:41:64:
                    c2:2e:71:34:3e:c9:e1:06:f4:fe:fa:ab:ee:a2:a4:
                    6c:ba:7a:a1:22:7c:90:30:3d:3d:be:eb:1a:a7:7a:
                    89:e7:5e:dd:8b:48:2e:42:5e:5e:38:d8:1a:63:7e:
                    67:55:80:a8:88:6f:6e:06:31:86:bd:db:3f:19:a4:
                    e2:eb:50:d2:c2:c5:07:be:ac:7f:bb:ed:10:f3:fa:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:E4:E4:46:68:F3:6D:51:15:77:05:65:B4:15:17:5B:EE:6F:51
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wADk5EZo821RFXcFZbQVF1vub1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.110.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:e0:5c:0b:4b:17:b3:54:af:e7:c4:17:ff:b6:46:98:b2:
         85:dc:3a:36:3a:78:78:6d:83:30:44:8e:08:b5:7b:ec:86:e9:
         8f:a8:26:83:65:b5:04:3e:23:26:66:bd:ce:54:78:96:be:b4:
         6c:6f:87:0a:77:6a:7c:1c:3f:18:95:0f:3b:d6:fb:a4:77:33:
         f6:33:80:61:cc:1f:49:84:8d:46:43:9d:9b:40:f6:34:69:04:
         7f:7a:79:19:78:a4:0b:70:34:5f:20:33:94:2a:5a:fb:b2:4f:
         07:d0:e8:9f:97:dc:9f:ed:40:bf:05:4b:ea:2f:6a:49:03:fa:
         53:91:03:2b:c2:3a:bc:06:a2:da:2e:fc:b9:50:8d:02:7f:b2:
         a0:8c:ea:a9:a3:aa:4f:d4:23:bd:66:b0:85:73:0e:ef:0e:59:
         35:79:60:a0:e5:c5:0a:af:03:4e:11:92:a5:0a:8e:6f:3d:1b:
         ce:e5:07:28:95:c3:93:c7:0f:ab:3a:3b:ac:f2:34:43:e9:ec:
         fe:82:98:07:18:6d:36:11:b1:ea:57:d3:c7:a3:d4:4d:96:15:
         44:fd:79:ab:11:5f:90:a5:06:d0:3f:4c:f3:7f:1e:30:f7:63:
         f1:d0:d5:3a:13:4d:36:c2:fb:02:07:80:b6:b3:1f:55:4e:1f:
         43:9e:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org