Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/tROtFgNoA05LCUiQ6aGGp04ERT8.roa
File:                     tROtFgNoA05LCUiQ6aGGp04ERT8.roa (raw, json)
Hash identifier:          0VLsgvU2W/0DG4apSvFftjc/iDBdtqbUyUqMhvvhhsM=
Subject key identifier:   B5:13:AD:16:03:68:03:4E:4B:09:48:90:E9:A1:86:A7:4E:04:45:3F
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       02
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/tROtFgNoA05LCUiQ6aGGp04ERT8.roa
Signing time:             Tue 29 Mar 2022 07:31:30 +0000
ROA not before:           Tue 29 Mar 2022 07:31:30 +0000
ROA not after:            Wed 29 Mar 2023 07:22:52 +0000
asID:                     17530
IP address blocks:        59.191.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 29 07:31:30 2022 GMT
            Not After : Mar 29 07:22:52 2023 GMT
        Subject: CN=B513AD160368034E4B094890E9A186A74E04453F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:87:2f:5e:e8:c1:32:c0:4c:41:d7:e0:31:
                    77:92:0c:58:8c:37:8a:8a:ef:68:02:76:2c:0a:38:
                    1b:70:df:28:97:7e:70:79:e5:04:57:39:b4:6e:a0:
                    c7:e4:de:0c:cf:eb:33:e6:18:f2:8b:ea:18:86:d9:
                    56:de:71:7b:88:c0:e2:fd:8e:50:f5:46:ad:d0:d6:
                    5a:0b:ae:6b:51:78:97:17:cb:c5:8d:fc:a3:f7:4a:
                    50:9d:c9:6f:73:fb:91:e1:a3:2a:97:1a:f6:4c:38:
                    cc:2d:ba:8c:a6:a6:10:ce:d5:e3:c1:06:78:69:07:
                    9a:c0:fb:11:9c:90:fd:ba:6a:df:13:dc:bf:c6:6c:
                    04:0f:75:27:fd:d5:fb:95:27:fa:ea:2b:82:14:80:
                    90:b0:ba:f1:2b:88:eb:47:35:ae:90:fa:c5:d6:c4:
                    39:65:d3:f8:7b:ff:3c:bf:fa:d1:35:0e:1e:4b:42:
                    2f:cc:58:23:98:dc:fd:53:54:65:32:f3:0d:e4:24:
                    9e:3f:80:b1:40:28:d3:c0:42:87:36:e0:04:ce:13:
                    a0:7e:11:62:26:1d:f1:79:cd:28:16:fa:4a:ec:00:
                    71:e3:9f:13:34:eb:86:0c:1a:6b:cc:cd:69:2a:af:
                    59:c6:aa:cc:ca:4a:cb:a9:07:9c:80:fd:e8:d1:23:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:13:AD:16:03:68:03:4E:4B:09:48:90:E9:A1:86:A7:4E:04:45:3F
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/tROtFgNoA05LCUiQ6aGGp04ERT8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.191.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c7:80:1c:ef:f9:21:ea:47:82:bb:9f:3f:df:fa:a7:16:80:57:
         98:73:a6:6d:13:f2:b6:62:65:d3:d9:e8:4f:7b:c2:08:81:d0:
         bd:7c:04:b2:9e:ec:1d:93:a9:76:aa:cd:74:de:b5:b0:c0:8c:
         8d:1b:af:f1:d5:7f:41:0d:1e:29:51:1a:b2:97:27:98:76:5a:
         aa:85:93:ab:cc:da:a6:d6:e6:0c:15:13:00:80:54:ef:23:ee:
         b3:00:23:33:58:ce:71:e9:cc:75:86:0d:e5:f8:09:86:d2:6b:
         b8:79:c1:ca:c7:39:84:61:6e:de:17:de:d7:ed:6e:c2:7d:03:
         3c:9c:fc:c3:e5:06:0a:9f:2b:29:4b:9e:5b:f1:63:6c:c3:0f:
         d1:d9:14:a4:1a:46:b3:c4:e4:9b:dd:70:40:25:e4:46:36:73:
         2c:5b:32:46:48:ac:fa:60:88:a4:4a:0b:e6:af:08:c8:f2:8a:
         4e:70:33:e0:16:09:96:fc:ec:53:60:69:91:b4:65:3c:80:6f:
         6e:c9:a6:33:e1:2f:25:85:ec:2c:47:9f:65:9d:d5:fd:79:ba:
         0f:7e:4f:57:70:ed:4c:2a:06:f1:ad:d4:bd:3d:d2:95:71:cd:
         6e:34:d0:ea:5e:9c:ae:bf:38:b9:3b:39:19:4d:60:52:93:a6:
         b3:57:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org