Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/B6nkttTjDlBdN_FB-isugK5HlYo.roa
File:                     B6nkttTjDlBdN_FB-isugK5HlYo.roa (raw, json)
Hash identifier:          dnZLS2uyiHLw1n3LGXxQrqBXJ47FO/5rExnKYlEDIEA=
Subject key identifier:   07:A9:E4:B6:D4:E3:0E:50:5D:37:F1:41:FA:2B:2E:80:AE:47:95:8A
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       15
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/B6nkttTjDlBdN_FB-isugK5HlYo.roa
Signing time:             Wed 15 Mar 2023 07:22:02 +0000
ROA not before:           Wed 15 Mar 2023 07:22:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     17530
IP address blocks:        59.191.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 15 07:22:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=07A9E4B6D4E30E505D37F141FA2B2E80AE47958A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:f8:e2:67:99:ab:06:40:8a:24:9f:c4:22:
                    27:d2:d6:26:07:b9:73:c9:fe:72:55:ed:ec:90:85:
                    c3:c3:42:ec:4c:cb:4d:3f:50:d7:8c:04:0a:0c:6c:
                    7e:c0:fa:4e:f8:80:d4:e6:ab:8b:1c:5e:a2:05:0f:
                    d7:16:8c:99:d0:3a:1d:1a:85:ee:30:0d:4e:e9:1c:
                    e7:23:1e:c7:50:cd:76:80:81:8e:9d:87:d1:06:ec:
                    e8:35:e8:c4:0b:f9:f5:ab:4a:67:6d:c0:6e:b3:8c:
                    b4:1e:db:dd:ce:2f:a1:85:e4:2e:d5:85:a7:f2:2c:
                    d4:8f:11:a0:ce:90:f5:f0:48:ff:68:1f:b7:f0:d1:
                    21:30:e9:d7:f1:f3:34:a4:03:54:55:3e:04:55:78:
                    34:73:a4:87:6d:22:70:43:90:3e:ca:26:ec:6d:4f:
                    e6:2a:50:4e:6c:86:f7:95:2b:00:6d:f0:dd:0d:d4:
                    1e:bf:73:f8:38:d2:ba:cd:37:ea:fd:cd:2b:42:b0:
                    2a:f7:13:dd:74:52:90:06:97:04:67:af:2d:72:93:
                    9b:7e:42:2b:bb:2b:05:ad:04:96:f3:00:5b:11:14:
                    dd:c6:a9:45:dc:3a:09:44:28:b9:f3:fd:f8:30:85:
                    0e:34:57:3e:92:ee:c9:b8:fd:67:ad:ee:87:62:d2:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A9:E4:B6:D4:E3:0E:50:5D:37:F1:41:FA:2B:2E:80:AE:47:95:8A
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/B6nkttTjDlBdN_FB-isugK5HlYo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.191.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:6c:38:17:1b:44:34:9e:9e:96:aa:55:df:91:06:2c:3b:8e:
         30:3e:66:70:1a:b6:10:32:c1:c2:26:6f:36:ac:49:63:af:bb:
         43:d7:d3:3c:64:17:65:53:bc:95:d5:4d:a4:dc:27:23:ba:c4:
         ae:1c:a0:57:ed:13:4a:b5:ad:6e:53:99:1c:2f:1c:6f:7d:bf:
         98:16:a8:c2:ce:47:79:61:2e:08:44:66:a9:69:24:93:38:fa:
         eb:55:78:f1:42:63:ee:08:9c:5e:d3:c5:be:47:b4:d7:78:07:
         33:cc:86:dd:03:54:6a:bb:36:22:eb:48:4a:b7:61:d5:4b:be:
         88:7e:89:19:bf:6a:6c:e3:1c:b3:ee:49:78:73:63:fe:d6:94:
         fb:ff:45:d2:12:26:3e:8a:bc:db:d6:8b:68:2e:b9:51:e7:3d:
         04:3b:34:64:51:2b:ec:90:bc:51:16:e9:1d:85:d3:87:cb:af:
         ec:9d:0c:4f:d9:e6:48:ca:de:64:7d:85:ac:fa:94:e2:1d:f2:
         5e:42:a9:7d:f0:51:ab:7d:91:8f:83:3b:56:4b:f1:2c:08:b7:
         eb:ef:98:3a:71:bc:54:d7:8a:b3:29:7b:43:ae:e2:65:0e:4c:
         41:fc:c3:db:9f:a2:62:78:1d:c6:be:29:64:3e:10:25:95:37:
         ea:d0:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org