Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/Gl9ZRxrcDdsCC9bs_Le0uSBGhvE.roa
File:                     Gl9ZRxrcDdsCC9bs_Le0uSBGhvE.roa (raw, json)
Hash identifier:          fBuKoQDWc+U3Ye5ktIPh5106n1ek9TOqfAcxCkqgJ4I=
Subject key identifier:   1A:5F:59:47:1A:DC:0D:DB:02:0B:D6:EC:FC:B7:B4:B9:20:46:86:F1
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       23
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Gl9ZRxrcDdsCC9bs_Le0uSBGhvE.roa
Signing time:             Tue 24 May 2022 04:54:24 +0000
ROA not before:           Tue 24 May 2022 04:54:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10019
IP address blocks:        211.125.144.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:54:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=1A5F59471ADC0DDB020BD6ECFCB7B4B9204686F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:4d:3c:83:0b:3a:a3:97:52:ae:f8:3a:2a:
                    b8:d5:c4:bb:18:ae:16:c6:6d:e5:0e:3a:07:80:e3:
                    33:79:7a:b6:e8:93:b9:2b:18:4a:25:50:79:a3:33:
                    be:22:74:ca:99:ac:cd:a8:a6:53:5b:dd:13:e1:51:
                    42:91:07:7a:59:e2:15:09:f0:52:6d:5f:1c:7d:51:
                    24:f3:88:ad:12:c3:17:ea:d2:d7:91:b0:f9:80:c4:
                    6c:6d:32:b6:61:32:a2:0e:da:af:ee:91:38:53:38:
                    f5:ee:14:55:2c:7b:ae:b9:1d:61:81:50:79:8a:91:
                    8f:6e:5c:b6:bc:07:10:d1:4b:44:16:04:16:8a:e2:
                    1b:32:67:93:4b:6e:ca:d5:c8:d5:3e:36:8b:1b:67:
                    a8:bf:ea:ac:38:cc:f4:4f:f4:1d:31:05:3a:1c:82:
                    2c:0f:a2:42:fb:f4:9c:97:40:b4:4f:8d:8a:d7:71:
                    22:eb:23:5f:35:a4:2f:f9:d7:1a:f9:03:ac:17:02:
                    65:06:06:f4:32:af:bf:c4:8b:5f:ff:27:2e:34:eb:
                    3a:e5:4b:be:1b:ac:4e:ed:28:94:ca:c5:92:89:d0:
                    f7:49:d5:83:79:3d:19:4a:86:e3:eb:ef:76:f5:73:
                    69:5f:1a:eb:84:00:a0:80:62:d1:36:11:2a:38:18:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:59:47:1A:DC:0D:DB:02:0B:D6:EC:FC:B7:B4:B9:20:46:86:F1
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Gl9ZRxrcDdsCC9bs_Le0uSBGhvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:7e:e2:28:16:49:2c:97:fa:0f:e4:47:fa:d8:e2:2d:07:9c:
         8f:b8:34:27:cb:d7:34:6c:73:2e:5d:57:4a:cc:87:f5:85:a3:
         8c:f8:e1:b7:76:aa:d2:60:6b:47:72:ff:97:18:e4:d5:0f:1b:
         d2:eb:44:38:da:8c:00:4a:d8:52:82:f0:7b:4e:68:35:97:51:
         c5:66:3e:0b:84:39:44:98:2d:3b:15:88:82:b5:f7:e8:c3:ec:
         12:13:cd:d1:74:d2:b0:9d:97:36:b3:e7:98:aa:e4:2d:61:d2:
         94:b3:cc:56:69:d5:9b:eb:8c:29:58:df:68:9f:35:61:98:66:
         43:b2:c8:a9:c1:37:5c:e7:f8:8c:e5:84:0f:13:c4:e9:5e:2c:
         08:b4:c6:27:55:9b:c9:83:b7:ad:57:46:22:b2:e8:22:61:75:
         f3:e0:0c:41:ac:83:eb:f0:e6:be:25:38:57:77:4e:f7:1a:ca:
         ce:10:0d:e4:95:3e:26:33:86:89:21:0d:48:6e:8c:85:70:05:
         e8:1f:ed:fb:4e:ef:42:89:1b:36:9d:9c:d3:a1:c1:a7:9c:a3:
         48:33:19:45:b6:3e:d4:13:9b:cf:f4:08:98:a3:4d:85:b8:d8:
         72:d5:cf:89:ec:8a:48:fd:f5:ba:da:d1:8e:8f:34:42:53:52:
         12:c8:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org