Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/794TDzG2IaUeNmrcXpd_vTDYgI4.roa
File:                     794TDzG2IaUeNmrcXpd_vTDYgI4.roa (raw, json)
Hash identifier:          6dxxgX+1/ZPgsgJm/bka8fAQ8CbRx4UnfKe5usGywgk=
Subject key identifier:   EF:DE:13:0F:31:B6:21:A5:1E:36:6A:DC:5E:97:7F:BD:30:D8:80:8E
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       30
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/794TDzG2IaUeNmrcXpd_vTDYgI4.roa
Signing time:             Thu 13 Apr 2023 09:50:53 +0000
ROA not before:           Thu 13 Apr 2023 09:50:53 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     17948
IP address blocks:        203.145.120.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Apr 13 09:50:53 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EFDE130F31B621A51E366ADC5E977FBD30D8808E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:5a:72:76:d7:a4:c1:12:1d:37:6b:bf:64:
                    46:48:6b:62:18:3c:e7:48:83:37:ce:82:62:9f:f5:
                    f1:38:67:a4:55:1d:9c:3b:be:c2:ee:96:53:46:15:
                    95:03:3d:68:28:42:2a:49:ee:0d:aa:a0:fc:63:ec:
                    d6:aa:0f:9e:71:54:91:b8:9f:ab:4e:c2:3d:f6:c7:
                    eb:49:dd:03:8f:3e:0e:a6:73:1f:a0:5f:56:8c:f1:
                    32:cf:6d:b9:91:9a:86:52:ea:c0:95:8b:e6:70:b8:
                    3c:ae:c0:34:dd:fe:9c:13:b4:c7:97:29:da:12:7c:
                    8b:48:7f:5e:35:f3:11:b9:f1:9a:c5:a9:fb:0c:16:
                    e0:6f:a3:87:77:12:ad:ef:f4:88:af:29:b2:08:b1:
                    50:b2:7e:94:de:c0:50:e5:92:e1:c9:2e:d1:b4:16:
                    f2:e1:33:4a:ff:48:81:58:bd:4e:b3:c9:c4:57:52:
                    17:f3:51:5c:d3:6c:24:b2:00:c3:bd:e3:e9:35:cb:
                    42:f3:d3:aa:0a:7a:84:e9:a0:ab:ed:bf:58:bf:5d:
                    98:6a:d3:b7:cf:23:95:ac:71:be:a3:cd:b6:58:e1:
                    5f:d6:cf:38:67:21:4a:d6:15:a5:6f:7c:6b:5f:78:
                    f9:03:f3:e6:fe:2f:1a:24:ab:6d:21:3d:c9:91:9d:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DE:13:0F:31:B6:21:A5:1E:36:6A:DC:5E:97:7F:BD:30:D8:80:8E
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/794TDzG2IaUeNmrcXpd_vTDYgI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:10:39:d3:e0:94:9a:e6:2d:26:fd:e6:d8:7f:85:b4:57:48:
         7c:9d:6b:18:15:eb:ed:c3:a6:db:b5:1f:20:f1:6e:ed:6c:1b:
         5c:35:c1:3c:3d:1e:9f:92:52:8f:55:2c:00:8d:cc:e0:09:ad:
         ef:41:de:28:c1:8d:b9:55:40:0a:3f:96:4a:f5:32:08:fc:1a:
         ff:0b:84:f5:9a:25:0c:d2:c7:63:1e:29:0d:92:51:35:07:71:
         7b:1f:1a:bf:95:14:e4:88:94:7f:63:37:5b:af:6b:46:1a:56:
         b3:2e:cf:14:1e:aa:e6:b5:92:3f:47:44:d5:76:ad:eb:b8:7a:
         9a:47:fd:8b:4d:6c:7a:22:51:d8:fe:08:c4:f9:c6:ca:22:f4:
         ca:67:85:02:94:36:d1:44:bc:21:22:5a:27:4a:a6:05:7e:cc:
         14:b3:47:aa:6b:be:2d:4d:07:ab:8a:38:dc:52:42:27:b4:b2:
         45:64:4d:df:e5:2c:1e:b9:27:5a:54:b9:84:84:ca:9c:4f:cb:
         06:97:fe:44:4f:91:01:0e:a2:c0:98:a6:7d:50:22:79:78:bc:
         a5:ad:58:39:5e:75:12:a7:74:de:86:9c:22:4e:af:e8:1f:8d:
         b8:67:40:c9:88:90:a8:c0:90:10:96:56:e0:cb:a1:d7:0e:79:
         5d:55:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org