Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/odRzasTBMOifrRvdAPBGW8eQZmY.roa
File:                     odRzasTBMOifrRvdAPBGW8eQZmY.roa (raw, json)
Hash identifier:          9KTX4KmClt+ghVC7YEGPQFSo3qbLPh/fMzvojgYSzVI=
Subject key identifier:   A1:D4:73:6A:C4:C1:30:E8:9F:AD:1B:DD:00:F0:46:5B:C7:90:66:66
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       28
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/odRzasTBMOifrRvdAPBGW8eQZmY.roa
Signing time:             Wed 01 Feb 2023 01:30:25 +0000
ROA not before:           Wed 01 Feb 2023 01:30:25 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.203.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:25 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=A1D4736AC4C130E89FAD1BDD00F0465BC7906666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:56:65:b1:d1:a3:61:80:96:2f:3d:f4:46:e7:
                    7e:bf:3a:13:46:76:f9:18:79:1f:52:af:2e:38:a7:
                    89:82:e2:c0:c8:f5:11:7d:b1:df:aa:a8:b6:75:35:
                    a7:5b:d7:0d:23:83:92:f9:62:f7:26:0a:33:86:c9:
                    4d:ca:22:5e:4c:f0:0d:b6:63:b1:5d:67:f1:6e:f9:
                    bb:89:69:73:f0:f4:d8:7f:c2:c0:b0:6a:83:e5:ee:
                    31:15:06:99:3b:66:73:7d:5f:f4:ee:52:e8:45:2b:
                    32:d4:9b:30:0d:c2:76:dc:d0:79:7b:0a:e0:85:35:
                    91:f5:be:f5:eb:fe:35:f2:c7:3a:70:31:62:69:a2:
                    f1:fb:3c:26:d5:f7:46:f8:6f:5a:6b:b0:2f:c6:c3:
                    11:a9:96:d0:15:69:08:4f:e4:c8:74:2e:60:59:68:
                    02:e5:c2:f0:9e:88:15:79:4c:d4:83:ae:fb:b2:5c:
                    01:d0:83:ad:24:77:70:6a:33:03:33:2f:0e:52:9b:
                    10:48:f2:6c:5d:1a:20:93:23:ba:91:bb:7b:c5:ad:
                    b0:d3:d6:9e:20:2a:a8:f4:54:e3:45:d2:c0:ab:73:
                    2e:f8:bb:25:0b:f4:b1:76:07:e1:6d:65:26:81:40:
                    50:26:97:bf:28:0c:4b:2b:8c:05:71:b6:6e:94:18:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D4:73:6A:C4:C1:30:E8:9F:AD:1B:DD:00:F0:46:5B:C7:90:66:66
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/odRzasTBMOifrRvdAPBGW8eQZmY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:11:e6:22:c3:15:69:2c:c9:dd:dd:81:f7:7f:cd:37:55:fd:
         f2:59:2b:fe:9d:f1:7a:6e:b2:d9:46:f3:3b:fc:76:3c:dd:c0:
         b2:59:a6:82:13:e0:ba:4b:91:8e:a8:22:44:82:b1:a1:c7:33:
         90:5b:3e:16:df:7c:81:b8:39:9f:3c:d4:89:a1:6d:ff:80:f7:
         5b:75:f4:55:ff:05:42:98:97:bc:35:f3:9d:71:63:bd:ab:9e:
         62:4a:97:12:87:5f:c7:a9:08:e3:c3:76:d9:c0:2d:d5:5a:7a:
         2e:c7:b3:c0:3d:b9:de:b0:22:62:81:0a:99:8e:7a:ec:f9:4f:
         31:37:85:5d:2f:5a:96:ac:f7:48:a1:ee:07:b9:1e:0e:e7:87:
         48:c7:05:99:22:36:8a:7e:38:73:cd:cf:9c:a8:73:58:99:73:
         da:94:c7:08:d0:f4:42:32:a4:b4:aa:07:e8:c7:22:09:3a:1d:
         56:11:ac:d0:9f:8b:d2:a0:1c:a2:02:43:03:ce:87:4e:27:e1:
         37:8a:8c:c1:61:af:7e:6c:45:6b:3c:d7:44:d7:4c:dc:aa:53:
         a2:be:a0:3b:f2:11:0b:d6:a7:83:e7:bb:62:8d:a8:69:c0:9e:
         a3:7b:5b:e6:d6:0a:53:e6:9f:25:94:6b:9f:ed:e7:bb:04:8c:
         6b:eb:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org