Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/Gtel9jxo5OpZSiUM4Y6cLfhJUZA.roa
File:                     Gtel9jxo5OpZSiUM4Y6cLfhJUZA.roa (raw, json)
Hash identifier:          KcUiA/EKj5vrxtqst+5cxKK/M9Mv/F2iIDIyexegQRY=
Subject key identifier:   1A:D7:A5:F6:3C:68:E4:EA:59:4A:25:0C:E1:8E:9C:2D:F8:49:51:90
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       34
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/Gtel9jxo5OpZSiUM4Y6cLfhJUZA.roa
Signing time:             Wed 01 Feb 2023 01:30:30 +0000
ROA not before:           Wed 01 Feb 2023 01:30:30 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        126.134.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:30 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=1AD7A5F63C68E4EA594A250CE18E9C2DF8495190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:4e:81:04:39:9d:4f:98:0b:d8:94:6f:e4:
                    3e:0c:b9:e2:77:6b:e5:1d:4a:7b:0f:48:92:3f:0f:
                    84:9e:27:4e:4e:af:95:8c:2f:cb:c4:02:d7:45:72:
                    0d:79:46:24:4d:7f:23:42:54:7a:5f:34:3f:bb:7e:
                    b3:5b:d8:48:74:27:83:07:be:09:03:05:e3:96:f6:
                    31:6d:f6:6c:c2:62:66:6a:ba:d5:62:e8:11:02:e6:
                    74:08:9c:8b:5c:74:08:d4:1c:bb:a4:db:6c:c6:de:
                    00:8d:0d:9e:4e:91:2d:71:a2:5e:dc:46:0c:92:94:
                    23:f8:6c:b9:24:e6:2b:0b:3f:77:0a:80:29:f9:87:
                    51:e2:da:82:16:f9:98:19:c5:e4:f5:98:17:72:19:
                    27:38:e3:65:eb:ba:9b:fc:09:d5:cf:62:7c:95:f7:
                    f6:22:b6:92:7d:06:2d:74:56:fe:f6:83:e4:5b:d3:
                    89:74:a6:70:29:dc:85:bb:b5:1e:80:9a:b9:b7:b5:
                    47:68:34:7d:5e:b6:75:5a:68:33:9f:9e:60:bc:6a:
                    42:f6:62:5b:75:1f:79:2d:10:34:38:5a:c8:c1:91:
                    c0:7c:d2:b2:8e:49:92:57:d0:aa:3e:c7:df:44:01:
                    9d:92:0f:38:bb:18:5a:89:af:7c:92:dc:1d:4f:17:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D7:A5:F6:3C:68:E4:EA:59:4A:25:0C:E1:8E:9C:2D:F8:49:51:90
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/Gtel9jxo5OpZSiUM4Y6cLfhJUZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:ce:3f:67:fb:d4:87:98:4b:bd:93:8c:bc:40:6d:62:7d:
         90:0f:30:b8:07:8d:ef:c2:b7:42:6a:b9:fc:1a:91:eb:c1:c6:
         3d:15:96:a8:b8:95:d1:65:a2:a1:06:d4:90:d4:c7:4c:84:02:
         a9:00:10:20:f6:9d:9b:51:1d:87:e0:85:a5:1d:29:66:93:21:
         5b:14:54:07:e2:77:78:f4:bb:41:bd:25:af:94:2e:a0:f7:8b:
         ba:18:30:4b:2f:60:ad:41:08:05:ec:b9:42:45:b2:6d:5b:92:
         6a:5b:29:d7:e4:3b:4c:77:8a:c3:3d:69:32:81:e1:6f:78:68:
         9b:d8:39:26:00:d4:6b:62:b1:21:3e:bb:6e:43:f8:ce:57:6b:
         70:7e:ae:66:82:de:a5:38:2f:99:88:be:cd:4d:57:64:dd:0d:
         1c:c2:26:f8:f1:6a:6b:78:8c:95:d6:60:85:af:d0:3e:c3:6f:
         f8:9b:35:07:1d:79:34:42:ec:08:bc:08:e4:5c:2e:a5:13:ae:
         f6:d9:4d:58:fa:9f:24:53:87:d5:66:a6:41:0d:51:6e:97:c9:
         3d:bf:d9:b4:9d:00:d5:0b:75:7d:40:1d:97:e5:58:3a:55:35:
         26:6a:4e:3d:08:4b:7d:9b:26:60:2f:99:a7:43:3d:7d:fd:bf:
         6a:cb:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org