Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/k9ki-n7PrA_Ei3wAGL8TREeNN3s.roa
File:                     k9ki-n7PrA_Ei3wAGL8TREeNN3s.roa (raw, json)
Hash identifier:          f6CneNxEtdwbJW3LBB9PhrBK76057+BtT3e/mORDOj0=
Subject key identifier:   93:D9:22:FA:7E:CF:AC:0F:C4:8B:7C:00:18:BF:13:44:47:8D:37:7B
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       29
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/k9ki-n7PrA_Ei3wAGL8TREeNN3s.roa
Signing time:             Tue 25 May 2021 02:46:47 +0000
ROA not before:           Tue 25 May 2021 02:46:47 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     59105
IP address blocks:        202.226.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: May 25 02:46:47 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=93D922FA7ECFAC0FC48B7C0018BF1344478D377B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:65:7b:f4:2a:25:fa:2c:96:68:52:71:cf:
                    1c:ad:72:32:04:b1:8f:03:62:78:9f:00:b6:36:59:
                    3c:11:0c:41:da:5d:5c:da:7f:b5:2d:ac:31:75:d2:
                    b3:37:7d:4c:88:63:b5:3e:8f:63:bb:57:92:70:a9:
                    5f:bd:3a:f8:05:6e:e8:c6:f7:18:90:81:95:f1:73:
                    6e:2b:e7:1d:2d:4c:00:0b:e6:e4:c1:d2:92:3d:d3:
                    3f:eb:6a:bc:01:94:bb:37:d9:95:44:b8:84:3a:a8:
                    81:5a:aa:7e:27:22:70:4d:f8:f2:e2:d4:d1:c6:ec:
                    5c:97:1b:f7:05:2c:25:e0:e9:81:fb:7d:f9:ec:e3:
                    63:2e:aa:b4:9b:89:42:d6:45:b8:35:09:bf:c9:f6:
                    c8:55:d2:89:19:6c:fc:8b:bb:7c:78:37:2b:9b:7b:
                    6e:66:92:66:29:59:1c:36:e3:ba:c6:b3:9a:37:75:
                    da:5b:17:de:bf:a5:a6:d0:da:0d:25:a4:a2:e5:2c:
                    b8:d7:76:4e:aa:a2:3b:5e:68:61:99:4b:1a:4b:a9:
                    0f:d0:10:59:24:f2:37:90:2a:52:e5:2a:db:26:a8:
                    93:e4:39:10:a4:21:b8:ba:fb:30:cd:9e:dc:b0:c1:
                    1f:f3:74:68:6b:61:03:79:66:63:ae:e5:92:cc:9c:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:22:FA:7E:CF:AC:0F:C4:8B:7C:00:18:BF:13:44:47:8D:37:7B
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/k9ki-n7PrA_Ei3wAGL8TREeNN3s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:1a:15:a5:ea:f4:cd:7f:83:5d:aa:70:92:a7:c6:d1:5f:
         73:16:0e:b0:47:f2:66:88:63:1b:a7:9a:2a:bb:a7:9e:65:7e:
         2d:1f:62:a8:ad:e1:67:a6:bc:7b:e9:6a:d9:82:af:0f:05:5d:
         d4:d7:11:31:cc:c0:14:54:09:c9:e5:e4:f6:a2:44:51:51:81:
         c0:d0:00:f4:6b:aa:50:b7:e4:a9:af:bb:cd:c8:c7:0b:a0:85:
         fe:69:b3:f6:cb:a8:03:58:c0:a7:e2:03:6d:30:24:96:72:e9:
         66:85:a5:e2:ac:61:bd:60:4c:d1:c3:a8:50:28:af:42:b7:5d:
         31:5c:06:4e:45:56:88:3d:db:79:a2:90:93:1a:e4:54:c8:f6:
         3c:1d:21:2d:18:17:49:fc:a0:38:33:3e:4d:27:f6:1c:9c:3b:
         33:df:9e:c3:75:05:56:a6:0d:3e:bd:9d:fd:74:3a:41:e5:e3:
         60:a5:a2:14:4d:f9:9d:de:28:27:d2:38:f0:a8:21:fe:e0:9d:
         c7:34:b5:76:98:ef:76:90:dc:93:d3:1c:57:f1:b6:7f:ee:e8:
         f3:08:1b:61:a6:14:c5:b3:a8:c6:50:29:c1:ea:86:60:d3:8c:
         38:6c:98:cc:45:ea:b3:2a:45:ac:37:38:68:93:f9:4c:25:e9:
         48:6d:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org