Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/Wb9tBdN2Qhm8FQqNWp64yA0Y3Ao.roa
File:                     Wb9tBdN2Qhm8FQqNWp64yA0Y3Ao.roa (raw, json)
Hash identifier:          ADBUpF5s1K+qgE2/ti83EdphuSs/qwSphptfGm4NMBM=
Subject key identifier:   59:BF:6D:05:D3:76:42:19:BC:15:0A:8D:5A:9E:B8:C8:0D:18:DC:0A
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       31
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/Wb9tBdN2Qhm8FQqNWp64yA0Y3Ao.roa
Signing time:             Wed 01 Feb 2023 01:30:29 +0000
ROA not before:           Wed 01 Feb 2023 01:30:29 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        126.249.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:29 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=59BF6D05D3764219BC150A8D5A9EB8C80D18DC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:81:1c:5c:d3:67:4c:4c:89:d4:45:3c:70:
                    3f:a9:9c:cf:9c:94:d3:54:c0:4a:1c:14:32:3c:94:
                    c1:41:3b:ae:b6:21:ae:8f:f9:ac:39:78:d5:72:72:
                    44:d3:a8:1c:7e:b9:82:74:2c:86:4f:b2:c7:28:85:
                    9f:75:af:f4:13:54:79:76:7a:ab:46:56:50:89:f3:
                    b0:7d:f2:7f:87:c9:6f:f5:fc:d3:be:52:6b:00:0b:
                    8d:ed:76:7f:c6:b7:5e:5c:82:3d:4b:64:02:e4:4c:
                    5d:4c:dd:09:b6:9d:7e:42:e0:3b:51:cc:37:e5:7c:
                    ec:04:c6:00:18:e3:a2:15:18:6e:39:81:2e:a7:13:
                    03:bf:c9:bf:13:99:4e:5a:79:cd:07:c5:d2:10:9a:
                    8a:ee:75:49:57:9e:36:1c:8d:c2:ad:b9:40:75:26:
                    b7:dc:32:71:bd:f4:1f:ce:34:f5:77:58:c7:2c:c0:
                    ba:35:57:e5:33:23:6f:11:14:c4:69:d6:dc:0f:61:
                    df:45:36:04:25:69:c8:2e:8e:30:04:46:5b:b0:7e:
                    1c:13:a8:4b:f7:b7:86:32:50:3b:7c:de:88:08:15:
                    ce:d5:8e:12:ae:ec:4a:84:b5:5f:71:5c:33:33:4e:
                    96:b4:84:e6:9c:f8:42:57:8e:11:a5:5f:de:39:80:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:6D:05:D3:76:42:19:BC:15:0A:8D:5A:9E:B8:C8:0D:18:DC:0A
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/Wb9tBdN2Qhm8FQqNWp64yA0Y3Ao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:46:ec:91:14:27:20:60:8d:e2:16:e9:1c:ce:ae:73:a8:ff:
         89:33:d0:95:2b:27:8e:af:56:98:65:9c:62:ba:85:51:d1:9b:
         4c:c8:e1:0c:af:2a:32:58:4c:09:f0:80:d1:9e:ab:d4:9e:12:
         8e:68:6a:67:d1:63:e7:30:e1:3a:37:95:33:57:23:de:78:90:
         11:8f:e4:f7:56:76:69:e7:a3:8a:76:85:f1:f2:29:38:65:b1:
         f5:56:01:53:6c:8c:6d:3b:99:0b:53:28:ec:2e:f5:84:62:2e:
         05:28:f4:7b:a9:1b:a0:51:79:95:a9:47:d7:f6:bb:aa:35:74:
         92:80:6a:a5:ef:a3:6d:fa:64:15:88:dc:5c:93:f1:c7:83:44:
         65:fc:9b:33:43:d1:26:5f:07:21:3c:74:1f:b2:44:73:7e:8b:
         89:69:48:e3:31:22:9b:c9:09:d6:3d:5c:3d:f9:fc:25:a5:18:
         b4:4e:25:9a:0b:41:d8:31:0f:93:45:21:b5:a2:09:56:cd:9f:
         ec:62:d6:23:18:27:ec:de:27:39:85:69:9a:2a:ba:5f:a6:ea:
         3d:ff:e3:cd:1d:12:f2:63:ab:63:fa:18:a2:1c:60:e7:e2:59:
         44:e2:e6:aa:68:3d:e8:1a:a7:37:b7:31:f4:11:88:c3:56:00:
         78:ae:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org