Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/lTEmikfsIpjWCdY2_bQkyYcX8tQ.roa
File:                     lTEmikfsIpjWCdY2_bQkyYcX8tQ.roa (raw, json)
Hash identifier:          tylrHx4ME91BOgSCnceouKTYAKCjzUB+TsxmH2eWG20=
Subject key identifier:   95:31:26:8A:47:EC:22:98:D6:09:D6:36:FD:B4:24:C9:87:17:F2:D4
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       07
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/lTEmikfsIpjWCdY2_bQkyYcX8tQ.roa
Signing time:             Tue 09 May 2023 08:12:27 +0000
ROA not before:           Tue 09 May 2023 08:12:27 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        36.3.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:12:27 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9531268A47EC2298D609D636FDB424C98717F2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:1e:45:c6:7d:3a:1a:34:c1:5f:51:dd:09:
                    b2:cb:8e:ee:eb:34:50:8f:14:d7:60:39:8f:72:8e:
                    ab:5b:47:2a:6e:03:5b:a9:7b:6a:46:bd:d4:2d:a2:
                    73:2f:73:b6:13:c3:8f:3a:75:7c:87:b6:36:2a:33:
                    08:0d:32:b2:4e:10:b3:5b:f0:1b:43:f2:74:a4:d6:
                    3d:6b:9b:03:42:ce:7f:0c:9f:01:96:17:5a:72:e3:
                    db:ea:e7:15:0a:82:12:01:95:fd:79:14:00:3e:0b:
                    78:50:77:c5:b8:f7:d3:c9:6a:a9:09:02:4c:cc:ca:
                    b5:14:7f:86:57:80:0d:7c:f6:fa:40:a4:41:33:2d:
                    3d:53:0f:d9:cd:99:26:da:72:74:7f:b2:fb:b8:f1:
                    a9:4b:76:6c:31:b6:3f:cd:44:35:fb:fe:3b:a9:8b:
                    2b:63:71:f9:01:34:c9:90:69:ba:6b:b6:41:2e:70:
                    3c:e6:64:75:0b:fe:4a:ef:bd:eb:e0:ff:14:6f:80:
                    4c:98:47:09:a9:f1:06:9c:6a:ea:1e:21:fc:06:17:
                    d9:34:98:6f:ad:41:a3:91:e6:4c:03:a2:a4:48:90:
                    ec:e6:e0:e6:78:84:13:f5:ee:66:66:ff:7b:c6:82:
                    0e:89:2a:d5:cf:8a:64:1b:87:cd:31:27:15:b7:1a:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:31:26:8A:47:EC:22:98:D6:09:D6:36:FD:B4:24:C9:87:17:F2:D4
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/lTEmikfsIpjWCdY2_bQkyYcX8tQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.3.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c1:51:6c:f1:e1:ff:05:de:b4:42:ce:5c:ac:fd:6a:cb:d2:af:
         59:23:c6:7f:40:6f:34:85:3f:62:04:49:f2:b3:77:08:39:b9:
         31:e5:e7:30:b8:08:54:3a:b3:ed:0f:f3:e4:8b:eb:46:2c:b2:
         47:78:ab:6d:97:78:82:b9:0b:6d:95:c1:c9:44:4b:2a:a3:44:
         25:9f:1f:b2:e1:3c:12:b3:1e:e8:c0:ec:24:c7:7f:34:9a:fa:
         a8:c3:9b:d8:ef:d1:3e:cd:25:69:95:0e:40:87:df:3f:f5:26:
         50:9b:33:0f:6b:c7:e0:e0:e4:f5:c7:f1:40:e3:66:df:d4:e2:
         d4:66:55:b7:25:09:35:3e:1d:db:db:0c:8c:f7:2b:8b:eb:74:
         78:e7:5d:13:da:32:de:02:fd:73:88:1e:65:19:9b:8f:cb:3b:
         b9:c5:bd:a6:ce:b4:66:3d:3d:b9:f6:47:4d:a0:19:9f:7e:cb:
         99:11:4a:bd:b2:b3:62:44:11:53:74:11:5f:2d:83:e6:a2:65:
         9d:8b:d1:ec:e6:bc:e9:95:a5:4a:ed:fa:3d:01:bb:4b:8f:e9:
         36:d5:8a:7f:f3:c4:26:f1:7c:02:e4:54:d9:e2:c1:51:02:0b:
         4a:7a:67:88:ee:f0:0c:0f:a3:f9:cd:37:cc:8d:5b:60:f7:f0:
         a9:80:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org