Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/JYNdRfnEpZgMmSsiEjMg8wW6Adg.roa
File:                     JYNdRfnEpZgMmSsiEjMg8wW6Adg.roa (raw, json)
Hash identifier:          tLi/YoPhH77nGnYh85fkoM1IRRGRFl1HSFKKTUfY5DU=
Subject key identifier:   25:83:5D:45:F9:C4:A5:98:0C:99:2B:22:12:33:20:F3:05:BA:01:D8
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       25
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/JYNdRfnEpZgMmSsiEjMg8wW6Adg.roa
Signing time:             Wed 01 Jun 2022 01:28:49 +0000
ROA not before:           Wed 01 Jun 2022 01:28:49 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     17948
IP address blocks:        49.236.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Jun  1 01:28:49 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=25835D45F9C4A5980C992B22123320F305BA01D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:00:59:17:8d:7c:e6:98:68:a0:7e:92:7f:
                    d2:4c:6b:b7:2f:f6:e7:5f:90:e2:90:5b:b4:e3:96:
                    67:35:cc:56:2a:70:e0:25:79:f6:6e:cf:02:68:02:
                    48:c3:cb:a2:97:2d:f2:ce:a0:2b:12:e8:ce:d0:4a:
                    10:5a:1e:dd:4b:d7:df:69:2f:d0:26:88:9c:09:3d:
                    05:d2:fd:bc:96:0a:e5:4b:a9:10:fe:81:f7:6d:8e:
                    05:7a:8b:ba:b6:00:48:b5:5d:91:ff:38:1a:3c:f2:
                    24:b8:29:e0:70:5c:29:e5:e1:0f:9d:03:14:b1:9d:
                    80:e7:48:34:eb:c6:5c:07:a2:d9:51:39:54:72:7d:
                    f6:80:c6:1f:76:9b:49:11:c5:97:85:8f:f6:7d:4a:
                    e9:2e:af:05:14:aa:80:aa:9f:6e:7c:13:3b:89:41:
                    e5:b7:93:3b:70:1b:97:8e:dc:81:c8:79:08:dd:25:
                    27:35:21:e7:ce:c3:e8:79:65:7a:72:d5:56:72:19:
                    c4:fd:65:3a:ac:6e:8c:24:9d:f9:a4:45:b9:c3:c6:
                    ee:be:4b:d0:12:75:1e:eb:d1:ad:14:21:f6:d5:23:
                    a8:d4:2e:54:16:2c:0e:2f:94:6c:2b:89:30:38:f5:
                    53:e0:38:a6:24:73:e5:c5:5b:25:ae:57:a9:57:44:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:5D:45:F9:C4:A5:98:0C:99:2B:22:12:33:20:F3:05:BA:01:D8
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/JYNdRfnEpZgMmSsiEjMg8wW6Adg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:09:fc:53:3d:77:01:24:e6:0f:3b:0f:75:68:27:85:e0:fc:
         2d:cb:69:8a:98:18:98:10:e2:ca:d5:29:5f:ab:45:29:0d:dc:
         98:ca:68:fd:8f:cc:cc:8a:79:f2:cd:8c:8f:a5:b9:f0:e9:ea:
         aa:2a:76:de:42:6d:ab:af:eb:ff:31:8b:0f:35:94:ed:59:1b:
         33:15:3e:51:ee:31:16:0a:24:10:4f:ca:51:e7:a6:11:00:47:
         ee:a6:82:fd:f3:77:ad:0f:a3:21:50:05:86:39:8f:5d:03:96:
         f5:e9:76:0d:e6:53:b0:c1:6d:5d:d3:cb:0e:47:0d:a9:de:01:
         bc:c0:1c:89:40:b8:6b:07:0f:92:a9:cf:0c:65:7a:1d:53:b1:
         c6:9f:e4:4f:47:0c:ad:24:64:44:14:3c:b3:73:aa:4c:69:ce:
         d4:7f:90:cb:f4:40:37:ae:fc:f0:01:af:35:fd:f2:87:79:95:
         99:a4:d8:ba:ae:e6:fc:dc:58:e2:63:a4:85:36:02:77:dd:ed:
         d7:a7:e3:1d:37:7a:2b:13:55:34:f1:80:1b:28:89:96:1a:12:
         85:06:65:db:5c:b8:90:7e:c2:7f:1a:c7:7c:37:d5:b9:84:ab:
         9b:53:49:12:ce:08:c3:19:c2:64:d0:3e:4a:8c:e9:03:fc:e5:
         0c:fe:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org