Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/9Fv5WuSc9OCjF_QjO6NeoeC-AwQ.roa
File:                     9Fv5WuSc9OCjF_QjO6NeoeC-AwQ.roa (raw, json)
Hash identifier:          0xoB1dS3Bt6CP6v/OePQyFOHVjW5FXsGq+ywo8h+vIc=
Subject key identifier:   F4:5B:F9:5A:E4:9C:F4:E0:A3:17:F4:23:3B:A3:5E:A1:E0:BE:03:04
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/9Fv5WuSc9OCjF_QjO6NeoeC-AwQ.roa
Signing time:             Tue 09 May 2023 08:16:38 +0000
ROA not before:           Tue 09 May 2023 08:16:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        120.51.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:16:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F45BF95AE49CF4E0A317F4233BA35EA1E0BE0304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:97:6f:90:c3:10:53:ef:9a:97:50:ae:88:9e:
                    c1:6e:58:b3:58:69:41:b7:e4:49:cb:a0:00:da:9d:
                    ff:1d:ef:5a:63:9f:b2:d7:21:80:a4:4b:0c:c4:40:
                    42:bd:87:8f:75:8f:27:56:21:f8:dc:34:ee:63:bd:
                    09:c3:2e:3b:07:ef:37:25:41:77:aa:0d:9e:0f:47:
                    e9:7e:30:4b:a4:cd:9b:6a:a2:96:28:c8:6b:73:b3:
                    8d:ba:cb:73:c4:20:19:9b:75:30:1e:e6:6d:15:66:
                    72:c3:b9:2b:ef:f4:e5:ce:4f:4c:ae:dd:5d:55:bf:
                    1d:1b:16:7a:3d:07:64:31:d0:8b:c4:43:ed:97:fb:
                    32:b9:2f:83:4b:aa:76:e0:e9:28:da:05:12:10:b8:
                    c5:b0:40:b1:d4:aa:e3:5d:5b:90:3d:ba:d4:c2:49:
                    51:ae:9e:9d:f3:15:d3:08:c0:d4:6f:70:98:4b:d1:
                    fd:1d:70:90:6b:48:bd:24:09:9b:aa:36:40:2f:15:
                    18:9d:79:c9:b9:d1:47:e2:1d:9a:cf:32:04:3f:32:
                    5c:95:fc:84:7e:44:ce:b7:2c:d1:19:dc:b0:44:0e:
                    c4:b3:c3:9d:d4:5f:a0:2b:50:20:46:78:bd:2e:81:
                    34:cc:79:c3:a0:2b:a1:1d:d7:21:78:e9:a2:e7:07:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:F9:5A:E4:9C:F4:E0:A3:17:F4:23:3B:A3:5E:A1:E0:BE:03:04
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/9Fv5WuSc9OCjF_QjO6NeoeC-AwQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.51.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d6:2f:a3:e7:19:5a:d2:ae:22:8b:2d:dc:6c:53:8a:aa:7c:fe:
         49:94:55:85:20:11:52:82:c4:55:fa:7f:85:d8:73:1d:ed:18:
         5a:be:52:ec:ed:d5:37:e0:c9:e8:f5:64:45:b2:4a:96:a6:1e:
         78:44:ea:2c:ff:a2:f1:05:87:c9:9b:ee:d2:56:39:51:04:d5:
         d8:7d:b6:7a:50:fe:c8:9a:97:a1:7a:9d:00:21:6b:69:2e:fa:
         32:a9:4e:d7:59:8f:e3:a3:68:d9:ac:2a:ca:49:83:f2:62:d7:
         e5:c4:5f:74:32:e7:db:9a:0f:b4:01:8a:b9:3f:26:52:0c:44:
         25:0d:d0:df:6f:e0:af:c0:de:ac:cc:34:78:35:4d:77:3a:59:
         b5:43:d1:8c:0c:de:5b:cb:b7:d0:f3:07:4b:84:6a:c4:99:f6:
         a1:a8:09:02:6f:3a:9b:57:08:04:36:c3:c7:c1:e9:96:f3:28:
         e9:c9:d9:a3:35:6a:47:d6:fa:d2:fa:6c:71:2b:7c:44:7a:3c:
         73:d8:f2:db:98:e1:fa:e2:73:e2:53:65:f3:64:4a:90:0e:f4:
         4f:5f:18:89:a2:e9:71:b1:88:f9:d8:70:98:b4:ce:20:e6:a8:
         25:9b:de:17:1d:17:db:9e:d0:90:28:eb:bd:3f:92:61:b6:4f:
         76:4e:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org