Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Tls2mlfoi2hfjaCYYWm7x73ZxzM.roa
File:                     Tls2mlfoi2hfjaCYYWm7x73ZxzM.roa (raw, json)
Hash identifier:          dzFCS54qC/KndHjpbRMZyqRr48YzQT1WmMrergvwmeo=
Subject key identifier:   4E:5B:36:9A:57:E8:8B:68:5F:8D:A0:98:61:69:BB:C7:BD:D9:C7:33
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       13
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Tls2mlfoi2hfjaCYYWm7x73ZxzM.roa
Signing time:             Thu 13 Oct 2022 06:56:13 +0000
ROA not before:           Thu 13 Oct 2022 06:56:13 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        202.169.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:56:13 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=4E5B369A57E88B685F8DA0986169BBC7BDD9C733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:9e:9f:0f:35:40:c6:f9:c6:98:27:52:86:
                    e1:34:08:51:fb:a8:71:46:33:2a:14:c8:84:85:85:
                    48:69:af:a7:04:8d:3d:90:b9:d1:91:ed:d9:f1:e4:
                    80:50:de:29:7b:2b:2e:53:3e:57:90:c1:3f:1d:64:
                    63:62:f9:6a:a1:ae:98:67:52:18:b4:e5:1d:29:c2:
                    be:c5:05:17:2c:57:12:33:fe:69:2b:30:ac:09:df:
                    a3:3b:8e:60:ca:83:0e:68:b5:75:d4:f4:b5:18:8c:
                    f6:73:3f:bf:ad:02:8c:94:5b:1d:60:86:4a:86:d3:
                    31:4d:af:c3:2a:5c:e1:f5:46:87:e0:26:a3:3b:aa:
                    0f:42:d3:6e:6d:37:48:1c:ea:6f:e7:e2:db:41:ac:
                    b4:89:6f:ac:8a:4a:04:3c:d3:9a:92:0b:de:d2:83:
                    ad:5d:fd:10:4c:08:5b:34:5b:44:e9:46:e6:85:70:
                    aa:2b:d7:8e:a3:c3:38:76:a2:1f:d4:3c:f5:e4:0b:
                    71:dc:a8:36:20:9a:97:e8:0a:5e:4e:79:12:17:05:
                    79:bb:0a:1c:16:c1:d6:63:b3:03:f4:37:84:44:c2:
                    66:7d:7d:3c:f0:71:7a:3b:56:5b:46:ca:78:e7:a7:
                    6c:4a:7d:f0:16:93:54:0a:f3:f3:f6:49:2c:3b:51:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:36:9A:57:E8:8B:68:5F:8D:A0:98:61:69:BB:C7:BD:D9:C7:33
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Tls2mlfoi2hfjaCYYWm7x73ZxzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:19:19:0d:1e:a8:a3:e8:d0:5a:cd:36:21:da:2a:98:0f:
         ac:84:d9:bc:20:c6:fe:13:04:47:e8:47:98:f9:8c:8f:be:d2:
         9b:2a:95:71:e5:3c:0d:85:48:7f:3c:20:5c:9a:72:9f:18:43:
         a7:59:63:29:8e:24:0b:c4:f9:65:3b:55:b3:11:b1:d2:f2:80:
         ac:31:ab:8d:d9:e5:12:29:bb:0f:d0:8f:7d:e1:88:b3:98:68:
         6a:b0:7b:60:b8:86:23:ab:b0:88:98:24:9f:d4:35:43:a5:87:
         bd:5d:55:2f:d4:c9:2a:33:b4:6a:9e:dc:1b:68:0b:53:6c:70:
         4c:70:06:81:f7:c5:44:20:ba:5b:f1:a5:71:20:f9:7b:81:62:
         77:04:15:34:e3:fd:c2:87:c5:df:68:3b:55:42:26:5b:8b:d3:
         f5:3d:9c:c9:16:0d:b7:da:6c:a0:f7:c8:07:c0:62:b8:3c:00:
         d6:2b:ae:56:d3:14:c3:b0:74:87:df:ef:a9:ec:14:ab:96:70:
         63:f3:b9:dd:5a:3e:9e:41:c1:94:41:fe:d7:d0:9b:ab:7f:97:
         ae:fd:aa:01:33:86:aa:b0:8d:93:b8:00:9a:7e:c9:a9:55:42:
         ad:b4:05:39:15:60:85:0c:95:2a:2d:27:c2:ce:bc:5a:23:bc:
         ed:ca:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org