Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/HSVveWEtyFUlnQ5ZV2ZYpckZFJg.roa
File:                     HSVveWEtyFUlnQ5ZV2ZYpckZFJg.roa (raw, json)
Hash identifier:          gRsUV1Jdpk+2DjlrMx6/Ud1Dh7n6RNZbltqka/8CQWA=
Subject key identifier:   1D:25:6F:79:61:2D:C8:55:25:9D:0E:59:57:66:58:A5:C9:19:14:98
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       03
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/HSVveWEtyFUlnQ5ZV2ZYpckZFJg.roa
Signing time:             Fri 20 Jan 2023 03:09:29 +0000
ROA not before:           Fri 20 Jan 2023 03:09:29 +0000
ROA not after:            Wed 17 Jan 2024 04:46:27 +0000
asID:                     2915
IP address blocks:        61.195.32.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jan 20 03:09:29 2023 GMT
            Not After : Jan 17 04:46:27 2024 GMT
        Subject: CN=1D256F79612DC855259D0E59576658A5C9191498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:8c:bd:d6:dd:44:88:6f:ef:7a:ff:d1:ab:
                    63:4c:68:f3:d1:30:81:9b:6f:fe:cd:b2:e0:fe:9d:
                    1e:1d:fa:4f:72:e5:7b:61:10:a5:e4:02:1d:5b:22:
                    e3:48:5e:ec:c9:f5:1e:c2:92:17:4e:4e:89:11:5e:
                    99:af:66:a7:ba:66:23:1f:81:03:05:90:ab:e6:b3:
                    2b:60:f0:be:0d:d3:16:21:77:7d:4a:c8:c9:dc:14:
                    d5:d2:bc:71:94:4a:66:8d:a8:19:45:0e:d4:3f:b1:
                    16:31:fd:91:f1:77:a8:31:2a:62:c5:e1:ee:00:41:
                    11:f3:66:b3:4d:a0:58:6e:d8:b7:92:2f:78:6c:b7:
                    af:5f:27:b3:43:f4:7e:e1:1f:42:85:70:eb:4c:57:
                    21:9e:af:5b:90:1e:50:d5:40:6e:70:12:ee:6e:f0:
                    53:1f:a9:55:9a:d0:a8:f4:57:fa:20:87:ef:19:0f:
                    9b:eb:b4:6f:ff:e0:13:c1:84:99:29:25:77:b2:84:
                    14:98:38:b4:c2:21:d6:6a:81:39:98:df:66:f3:ae:
                    62:ec:d6:32:8d:1c:41:7c:b9:77:5d:82:6c:45:36:
                    f8:52:72:0f:12:7b:5a:5a:48:c8:14:25:7f:9c:e5:
                    32:e4:7c:cd:76:d8:4e:38:e7:6c:aa:6f:22:89:60:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:25:6F:79:61:2D:C8:55:25:9D:0E:59:57:66:58:A5:C9:19:14:98
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/HSVveWEtyFUlnQ5ZV2ZYpckZFJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:1c:67:09:bb:b1:1f:9a:77:3c:9c:c3:de:96:85:18:0d:87:
         c6:c5:be:8d:dc:03:27:c2:2e:97:38:ee:e1:80:e2:59:1e:f2:
         68:5a:43:52:45:a1:9e:72:66:b9:29:7c:17:4e:ce:1e:51:d2:
         42:78:ad:47:01:cd:41:a8:1a:03:56:26:f6:6a:82:aa:c1:89:
         51:8f:52:9f:d4:49:f3:bf:66:a9:13:20:d7:b1:0b:3b:31:b6:
         9e:d6:f1:1e:07:dd:a5:fd:bd:8a:29:db:a8:bf:a6:c2:17:c5:
         06:41:b7:b3:bf:cd:e7:b7:29:6a:7a:8d:32:81:c9:c4:5b:04:
         2d:0b:cf:2a:46:c8:92:3f:10:60:09:3f:c4:1f:8e:a6:e5:98:
         2a:4f:a0:88:b2:67:aa:27:2d:e1:68:35:27:3d:e5:24:cd:0b:
         d7:25:04:6b:55:4f:17:09:9a:75:89:fa:4a:d0:81:97:ba:2c:
         02:70:00:f5:4d:31:2b:27:b0:d6:15:b1:20:47:9b:fc:48:36:
         3d:6e:09:7e:c5:f1:1e:d3:77:97:05:cc:4e:ed:18:d8:82:3f:
         e0:7b:9d:2d:b8:46:10:77:ff:73:d9:4a:4b:56:fd:d0:d7:75:
         c0:db:c3:ab:dd:a2:f0:6d:f2:c7:ae:ab:bd:b7:2d:34:35:90:
         09:8e:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org