Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/uk1ES7luPbU1dwsJ50qGKWz8wFk.roa
File:                     uk1ES7luPbU1dwsJ50qGKWz8wFk.roa (raw, json)
Hash identifier:          TK1a5bQcCsblRH88Ymd9lBqzY+4f1YSmM5OGAEB0NO8=
Subject key identifier:   BA:4D:44:4B:B9:6E:3D:B5:35:77:0B:09:E7:4A:86:29:6C:FC:C0:59
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       16
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/uk1ES7luPbU1dwsJ50qGKWz8wFk.roa
Signing time:             Wed 15 Mar 2023 07:22:03 +0000
ROA not before:           Wed 15 Mar 2023 07:22:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     17530
IP address blocks:        61.193.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 15 07:22:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BA4D444BB96E3DB535770B09E74A86296CFCC059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:76:b1:5a:dc:9d:0c:60:40:90:f8:18:d6:
                    06:8a:ac:76:9d:a8:ee:38:a1:7f:d8:57:06:2d:18:
                    60:49:08:96:8c:23:e9:7d:c2:89:bb:a9:4f:54:ee:
                    0c:e3:76:62:fc:cf:b2:8a:70:61:e7:f6:9b:60:af:
                    9a:85:ac:d2:f5:47:7c:3f:28:05:ec:99:6d:26:32:
                    a9:c9:a3:8b:62:6a:83:26:8d:60:29:ab:f1:b7:7c:
                    76:43:ac:4a:c4:b1:d0:87:a1:d1:76:44:90:fa:16:
                    a4:f3:a4:9f:5a:90:6f:1d:4e:ec:d2:8e:5a:16:d9:
                    33:7d:60:91:78:48:1f:7a:26:e4:6d:44:bb:00:21:
                    b0:42:e3:51:9f:14:37:00:a0:d2:80:c5:70:e2:75:
                    32:8b:39:f0:17:9e:73:94:49:c6:c2:b7:45:07:87:
                    09:7c:28:92:43:1b:96:6e:23:92:56:71:84:6f:f6:
                    67:33:4c:c3:34:62:1d:f0:e2:76:b1:db:a6:cb:01:
                    2f:c1:10:c6:94:86:63:aa:31:79:36:bb:2e:3f:fd:
                    25:45:9e:f2:46:d0:cc:16:3f:4f:e3:43:d6:7c:01:
                    26:ea:1d:80:99:c3:01:72:8f:c0:bd:c9:39:05:89:
                    fd:48:5d:fc:f3:6d:49:3a:50:23:a8:b4:8d:fd:a2:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:44:4B:B9:6E:3D:B5:35:77:0B:09:E7:4A:86:29:6C:FC:C0:59
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/uk1ES7luPbU1dwsJ50qGKWz8wFk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:33:f7:8c:89:64:b2:27:54:be:75:09:11:51:fe:28:0a:6d:
         19:74:40:07:94:55:c8:59:64:0c:18:37:5a:c7:2c:a3:df:c0:
         78:26:aa:32:29:cd:a7:0b:88:6e:33:62:43:de:04:88:4a:a9:
         8d:79:78:5d:83:2b:86:72:d3:37:b1:77:3d:ba:39:85:1c:35:
         24:a6:d5:05:42:9e:66:83:ff:84:3e:ee:1d:1a:11:99:df:c7:
         d3:3c:8a:0a:18:2b:09:0c:d5:99:dd:6e:d2:39:5c:fd:2c:a6:
         10:c7:d5:87:0b:93:99:55:d4:59:01:d8:6d:f0:82:69:88:9d:
         e1:d5:22:6a:29:11:5c:b0:c2:e6:18:a2:ae:3a:ed:88:5b:87:
         0b:43:aa:2a:08:76:40:d0:e1:30:8d:92:73:4e:85:57:b7:4f:
         01:5f:61:a6:93:d2:72:d4:11:f3:92:3a:1d:76:7c:9a:d6:5f:
         de:a6:36:f8:3d:85:17:e6:4e:7d:4f:20:85:6b:bb:d5:39:88:
         4c:3e:3c:df:fd:b3:b6:34:b4:f1:5e:e1:96:a3:6e:46:f0:21:
         40:e1:3c:a8:e5:1b:d0:61:9e:4d:28:fc:d9:ca:f2:cb:37:54:
         98:5f:d1:1e:9d:3e:4b:1a:06:bc:15:15:6b:47:a6:44:eb:40:
         39:34:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org