Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/AX-rHMurakFMTGjFrHQfizuXVv4.roa
File:                     AX-rHMurakFMTGjFrHQfizuXVv4.roa (raw, json)
Hash identifier:          JYYfpVecZpEOlFHmXMvb9jRBIyhu98mgzkh9CguJ23E=
Subject key identifier:   01:7F:AB:1C:CB:AB:6A:41:4C:4C:68:C5:AC:74:1F:8B:3B:97:56:FE
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       17
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/AX-rHMurakFMTGjFrHQfizuXVv4.roa
Signing time:             Tue 30 May 2023 06:05:25 +0000
ROA not before:           Tue 30 May 2023 06:05:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     17958
IP address blocks:        218.40.96.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: May 30 06:05:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=017FAB1CCBAB6A414C4C68C5AC741F8B3B9756FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:45:cf:b7:e7:91:1e:b1:8c:a9:93:68:fa:
                    22:30:58:d7:2a:48:a8:c5:af:52:5d:ba:a2:d1:f6:
                    1e:23:ce:40:07:90:c0:6d:76:6f:0a:a4:46:12:f2:
                    9a:16:51:49:df:6a:a4:a1:a6:3e:fc:bb:5c:9c:61:
                    db:43:71:11:a9:f0:50:88:2c:e5:31:18:7e:91:52:
                    ce:98:f7:eb:07:25:7b:bc:2e:bd:22:cc:13:a6:69:
                    2e:fb:8b:8c:49:82:2b:57:73:24:7b:91:09:9a:19:
                    f9:3b:1c:8e:79:98:71:ab:48:39:e4:92:b7:1b:fc:
                    fe:92:18:ab:11:4f:9c:d3:98:ba:8c:a8:3f:d6:82:
                    69:d2:00:3e:03:ea:b0:b0:09:53:bd:82:57:a1:0f:
                    ca:ae:74:0d:40:b7:2a:f0:d4:2c:13:ae:79:13:5f:
                    2f:30:4b:b2:58:05:7a:38:6a:eb:e3:7c:57:20:23:
                    6b:b7:2f:c3:ec:e4:62:28:4f:14:2b:d1:1d:fa:20:
                    99:ef:a3:49:82:11:ea:a4:e0:9a:82:e3:ba:b8:12:
                    c8:2b:37:2d:f9:85:84:76:b0:79:26:19:7c:f7:62:
                    fd:42:41:07:a7:83:cf:d3:15:ac:d0:41:9b:7c:6e:
                    39:03:8d:74:5e:e8:0d:a9:87:e2:bb:25:81:96:c5:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7F:AB:1C:CB:AB:6A:41:4C:4C:68:C5:AC:74:1F:8B:3B:97:56:FE
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/AX-rHMurakFMTGjFrHQfizuXVv4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:c5:f2:92:f2:50:91:1c:ba:c6:de:42:69:8a:50:09:2f:
         40:36:13:9f:d4:f7:8c:9a:15:72:14:46:5f:d9:18:d6:ba:fd:
         85:06:ec:d3:3f:96:db:cb:56:38:b4:33:5e:bd:0d:5b:f5:00:
         ab:31:47:e0:3f:37:80:42:27:3e:a0:aa:89:0a:e2:00:5d:89:
         a8:fe:57:b1:0d:c1:01:c4:b1:74:ce:a5:ac:31:d4:5d:ef:a6:
         72:c9:cf:92:74:67:7f:42:dc:de:6c:a7:69:d2:8f:93:0f:52:
         7c:fc:61:c1:31:dc:1e:0d:3a:11:25:32:04:d4:5a:b1:ab:60:
         ec:4f:cb:ed:a8:00:cb:8c:8f:88:ad:59:3e:2e:f0:65:02:ce:
         68:69:91:7d:76:61:08:30:c5:ae:7b:2d:28:9b:7a:aa:35:91:
         65:c4:55:9b:fa:81:88:82:6c:d8:9d:2d:bf:ef:3a:e0:38:50:
         d4:c5:1f:d0:5e:53:78:39:40:69:d8:75:ad:d6:95:66:21:38:
         3b:7a:20:3c:3a:7c:0b:4e:3d:c5:58:36:43:79:46:2e:bd:d7:
         cc:59:72:3f:87:c3:98:e3:5e:d1:26:d6:c6:9e:6b:01:0e:fd:
         ef:51:d0:80:e6:ba:bb:1e:c5:3f:b5:c5:59:7c:e3:26:92:f9:
         be:26:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org