Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/1AyOswLQu4D2aY7JKdWjxQCpBog.roa
File:                     1AyOswLQu4D2aY7JKdWjxQCpBog.roa (raw, json)
Hash identifier:          EajKznknuck2TmNNHwuhUW4KHia6UlJqHkFxWo1K8bE=
Subject key identifier:   D4:0C:8E:B3:02:D0:BB:80:F6:69:8E:C9:29:D5:A3:C5:00:A9:06:88
Certificate issuer:       /CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5
Certificate serial:       02
Authority key identifier: 28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/1AyOswLQu4D2aY7JKdWjxQCpBog.roa
Signing time:             Mon 13 Jun 2022 06:28:57 +0000
ROA not before:           Mon 13 Jun 2022 06:28:57 +0000
ROA not after:            Tue 13 Jun 2023 06:06:17 +0000
asID:                     17958
IP address blocks:        157.112.160.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5
        Validity
            Not Before: Jun 13 06:28:57 2022 GMT
            Not After : Jun 13 06:06:17 2023 GMT
        Subject: CN=D40C8EB302D0BB80F6698EC929D5A3C500A90688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:42:cd:ff:b9:e3:69:3e:ca:87:e4:db:cc:
                    77:f4:ed:b4:34:8a:7e:07:6a:74:32:0d:29:a9:7a:
                    63:e6:31:ff:47:68:e4:f8:e0:4a:36:5d:3e:d1:7a:
                    38:24:67:b6:9c:76:2f:56:e8:73:fe:9f:7c:1b:4a:
                    78:26:0b:ee:40:74:18:75:c5:93:4d:3c:e6:2a:1d:
                    83:c4:e8:8a:bd:08:f3:bf:19:96:c0:18:14:bc:43:
                    c6:30:10:53:29:c9:90:37:41:ea:bf:bc:56:e1:1e:
                    89:97:e8:9e:8b:b5:4b:a6:da:96:22:42:5e:50:1d:
                    13:ac:23:4f:23:24:8a:6a:5b:57:de:65:f5:82:83:
                    1a:ee:2c:e1:08:63:27:9b:83:ef:93:ad:7b:c2:57:
                    46:d6:9d:3f:3c:85:a0:e9:5e:83:ac:ac:c9:1b:f1:
                    bb:ef:d8:f8:bb:37:a7:5a:76:15:3b:ae:7f:27:27:
                    e2:a9:ec:e6:36:71:7c:4c:63:10:80:21:4c:64:bd:
                    1b:f5:e5:3b:ab:f1:1c:ca:47:c4:b7:c1:5d:b5:1b:
                    c9:78:fa:21:5d:11:6f:29:ae:d3:a4:4d:a0:44:f7:
                    42:71:fd:51:bf:9c:0d:95:8f:2b:f3:28:e5:be:2d:
                    aa:b4:2a:47:2f:d9:2e:c8:b5:d6:54:0d:10:8a:64:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:8E:B3:02:D0:BB:80:F6:69:8E:C9:29:D5:A3:C5:00:A9:06:88
            X509v3 Authority Key Identifier:
                keyid:28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/1AyOswLQu4D2aY7JKdWjxQCpBog.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:42:f4:f8:98:06:0b:a3:41:9b:e9:9d:2a:c7:b7:26:42:
         80:f7:97:f2:62:b5:ec:9b:2f:06:eb:ce:8b:c5:03:54:2f:12:
         db:96:90:fc:c2:59:a6:6b:aa:22:65:76:95:b5:44:01:a0:bd:
         c0:c7:38:22:2c:27:0b:84:18:5c:de:a1:e1:82:84:77:c0:11:
         8c:e5:c4:2a:84:7e:e3:c4:df:e2:71:64:f5:a1:9e:e7:46:dc:
         e3:13:16:f5:f2:b7:b2:08:e2:c9:cd:db:c4:aa:0f:5c:7d:e8:
         8a:52:95:e6:af:99:19:39:4b:5c:99:69:fc:40:3c:13:95:d2:
         20:a5:a8:86:46:3a:59:58:27:32:c9:97:94:68:d8:04:dc:c3:
         57:e5:41:14:d5:81:e5:bd:71:8f:4f:b2:ac:54:78:da:6b:71:
         ad:61:a3:73:ac:ea:a9:6c:47:0b:f5:b6:bd:21:27:21:02:84:
         a4:1d:91:74:2f:1c:1d:06:0e:3b:92:af:27:df:6f:a2:46:3b:
         db:3c:22:0a:01:f9:bd:2f:8e:97:4e:49:2c:5b:02:19:fe:60:
         33:2b:8d:82:5d:24:83:32:aa:47:02:ec:30:c7:40:fa:6d:a7:
         51:30:30:9c:d5:0b:d4:7d:ae:cc:c2:39:6b:b6:b1:f0:b1:f5:
         82:fb:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org