Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/cLw1WsVqROTNDLO8A3KPK3Kkd60.roa
File:                     cLw1WsVqROTNDLO8A3KPK3Kkd60.roa (raw, json)
Hash identifier:          Tvvwbx0qXF5tght9Pzj089PEFdFEo321EkPJjz+BJMg=
Subject key identifier:   70:BC:35:5A:C5:6A:44:E4:CD:0C:B3:BC:03:72:8F:2B:72:A4:77:AD
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/cLw1WsVqROTNDLO8A3KPK3Kkd60.roa
Signing time:             Tue 09 May 2023 08:16:39 +0000
ROA not before:           Tue 09 May 2023 08:16:39 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:16:39 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=70BC355AC56A44E4CD0CB3BC03728F2B72A477AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:e3:34:28:ee:f7:dd:8e:2d:a3:2d:a5:f6:
                    fe:9a:da:01:95:ff:a9:f7:04:92:df:a3:cc:31:6c:
                    df:23:b5:42:63:2f:36:1a:7a:61:74:fc:20:e6:0c:
                    f8:45:e6:99:7e:01:bb:fe:b3:6a:30:1f:ef:ba:c8:
                    78:94:39:34:ce:b6:ef:b8:b9:7e:fb:5a:7b:11:13:
                    6b:13:9e:c7:7b:7a:08:99:d6:7d:1e:07:70:9a:53:
                    00:2b:39:f2:13:5a:fb:2e:94:9f:c0:24:b8:34:6a:
                    43:ca:bb:b6:48:c2:d8:76:57:25:d3:45:1b:2d:f2:
                    63:dc:95:3d:c7:1a:b5:75:90:49:5b:bd:fa:93:74:
                    49:14:1e:55:55:bb:11:6f:53:a0:5f:02:00:49:fc:
                    55:36:9e:de:20:48:c2:33:0f:0c:11:7a:c6:09:86:
                    96:8c:29:5c:69:e2:ab:d6:19:3a:60:3c:b7:d2:23:
                    3c:57:39:d9:89:7a:ba:32:7f:6a:50:3c:ed:38:a7:
                    a4:61:37:e1:44:63:31:db:ed:bd:68:4e:b9:b6:e7:
                    dd:7c:8f:67:9b:b1:8e:0a:67:ba:fa:ab:59:78:3a:
                    94:aa:0c:b2:54:16:01:84:c9:d6:e4:72:42:b3:86:
                    33:25:ac:07:f3:bd:d6:0a:48:5f:a2:13:85:7d:56:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BC:35:5A:C5:6A:44:E4:CD:0C:B3:BC:03:72:8F:2B:72:A4:77:AD
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/cLw1WsVqROTNDLO8A3KPK3Kkd60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:17:24:f8:93:1f:0f:e1:95:56:76:38:08:8c:7c:b6:82:
         ec:69:c8:8d:55:dc:89:ef:bc:2c:4b:21:df:5f:ec:68:d7:68:
         fc:99:5c:5d:c4:cf:07:97:36:d9:ed:88:11:16:50:71:a3:81:
         27:e6:e1:52:4b:98:a9:e0:1f:92:47:cd:55:0a:51:5f:75:b3:
         e6:a1:a3:65:69:16:8f:bd:0a:20:04:49:fa:4b:32:98:72:e5:
         83:22:66:90:9f:18:45:af:67:9c:13:99:00:d7:96:df:b9:f3:
         f9:37:ae:23:a0:da:df:e5:15:ab:2c:c6:e7:35:85:37:11:58:
         6c:56:f4:e6:09:ff:0a:01:05:51:20:03:3a:65:74:df:b4:30:
         6d:0a:29:57:7a:45:82:21:e1:e8:bd:bd:67:24:05:0e:af:8b:
         a1:5a:bc:ce:4f:78:05:bf:c5:3f:f2:f5:3d:a0:78:aa:81:72:
         5b:19:87:f9:1e:a8:ca:92:bd:a5:43:35:ae:d7:4a:ba:dc:fa:
         ad:ff:b0:f9:49:5e:83:51:e5:8e:31:9b:0e:95:f7:a9:73:54:
         60:1f:a4:d0:9c:40:73:48:43:54:a3:b2:e7:88:cf:38:ab:52:
         22:7d:0e:45:76:19:2d:35:22:e8:49:8c:1e:e0:79:37:d9:4f:
         14:03:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org