Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/BD9Nh1wZxSquxT1s_EA2H57nsDA.roa
File:                     BD9Nh1wZxSquxT1s_EA2H57nsDA.roa (raw, json)
Hash identifier:          XYAod3sxRWOin26Cqm83XUZbsYNXah4yTasKMu4GdsM=
Subject key identifier:   04:3F:4D:87:5C:19:C5:2A:AE:C5:3D:6C:FC:40:36:1F:9E:E7:B0:30
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       40
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/BD9Nh1wZxSquxT1s_EA2H57nsDA.roa
Signing time:             Thu 30 Mar 2023 04:18:36 +0000
ROA not before:           Thu 30 Mar 2023 04:18:36 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     32787
IP address blocks:        210.193.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 30 04:18:36 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=043F4D875C19C52AAEC53D6CFC40361F9EE7B030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:8e:69:50:81:da:6e:a2:e4:ce:47:58:1a:
                    8f:26:d6:71:6c:a7:54:83:86:b0:ea:41:0d:99:8b:
                    c6:e1:c7:48:1d:d3:67:56:18:e4:36:8a:a1:c4:c9:
                    c5:d7:18:03:5d:02:de:35:36:c6:2c:68:40:f7:5f:
                    53:9e:9b:08:7d:98:6d:38:70:af:0c:7d:2c:bf:28:
                    6f:8d:a5:e4:dd:1a:e2:99:fb:97:d1:e2:c0:92:f6:
                    06:b6:83:4c:8f:7b:20:50:7b:55:7a:54:53:50:88:
                    b1:37:02:44:79:a7:94:7f:5d:02:35:56:ba:b1:83:
                    7a:16:c6:e2:c8:93:61:db:5a:f4:d5:c8:2b:c7:e0:
                    cb:78:c6:78:5f:2e:71:c1:1e:45:26:45:7c:2a:e0:
                    c5:c4:cc:90:f8:9f:75:27:67:b9:17:4d:fc:ad:a6:
                    bd:78:68:d2:ec:75:f2:e6:bd:c7:98:6a:c5:ee:7d:
                    73:d5:9c:94:1e:c1:40:8b:96:36:d1:56:ea:8b:8c:
                    e9:2f:da:be:4f:fe:4c:78:02:51:db:15:4b:c3:69:
                    bc:4b:9c:d8:15:72:a2:20:39:cf:82:f4:41:03:76:
                    78:11:f4:10:f6:c4:1c:3a:f0:ef:ff:78:6a:0a:6c:
                    a4:42:4f:bf:89:95:fc:ae:cb:0e:4f:aa:79:67:ae:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:4D:87:5C:19:C5:2A:AE:C5:3D:6C:FC:40:36:1F:9E:E7:B0:30
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/BD9Nh1wZxSquxT1s_EA2H57nsDA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:60:80:16:51:53:ba:6e:60:f3:10:71:3a:6e:d7:67:a6:
         d4:c4:74:e5:9a:a4:31:da:1b:51:9a:2b:61:33:03:05:11:ba:
         b4:6a:ff:36:3c:f7:67:fa:ef:d2:de:a0:c5:ff:57:92:23:d2:
         2b:eb:22:b3:06:6b:e9:35:17:3e:51:78:f2:55:55:f2:c4:d7:
         7e:64:6a:42:a2:97:b8:c3:6f:f7:fd:d6:81:f0:c5:7f:f0:99:
         83:e8:d8:0f:b3:bb:fa:29:d9:9b:25:c6:59:b9:a4:62:bd:3a:
         3d:c6:4d:7f:57:21:c5:52:55:90:0e:f3:ec:cb:bd:01:cc:18:
         cf:0c:85:71:e0:4d:d9:9a:cc:09:e2:2e:b2:be:40:13:4c:77:
         30:50:41:c9:79:a8:c2:76:11:4e:8f:d6:03:8b:33:53:b8:e9:
         7b:e4:9b:78:18:ca:3f:5f:2a:60:d9:d7:1a:75:90:45:fc:f2:
         e4:38:c8:66:24:d5:df:be:cd:4a:0a:33:5b:b6:1e:0a:31:9a:
         69:37:fb:33:3e:f2:66:99:66:94:85:fc:3c:c7:a2:75:91:41:
         e4:0a:4a:d2:da:39:44:21:63:29:10:7e:98:ae:94:13:84:6c:
         49:db:62:6a:9f:cc:3a:46:20:24:46:5b:55:43:bb:fb:cb:ab:
         63:5b:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org