Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/p-nEbkUJVr-n2OQGX47CCJPwDcs.roa
File:                     p-nEbkUJVr-n2OQGX47CCJPwDcs.roa (raw, json)
Hash identifier:          y6FAp6cm95ymAWN8iFmsYakBwDEHTJ33ele4wv5sHoE=
Subject key identifier:   A7:E9:C4:6E:45:09:56:BF:A7:D8:E4:06:5F:8E:C2:08:93:F0:0D:CB
Certificate issuer:       /CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5
Certificate serial:       0F
Authority key identifier: 28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/p-nEbkUJVr-n2OQGX47CCJPwDcs.roa
Signing time:             Tue 30 May 2023 06:05:24 +0000
ROA not before:           Tue 30 May 2023 06:05:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     17958
IP address blocks:        157.112.160.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5
        Validity
            Not Before: May 30 06:05:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A7E9C46E450956BFA7D8E4065F8EC20893F00DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:8e:15:5c:04:c7:f3:8c:80:5f:4d:e3:fc:
                    09:32:bd:84:cc:b2:10:f8:1a:b6:73:6f:5b:12:f9:
                    6b:09:d3:fa:30:fa:dd:fd:82:8d:91:79:2e:db:26:
                    67:ad:b8:ba:eb:5a:40:53:41:ab:30:f1:71:00:5a:
                    c8:5a:47:f1:88:4f:75:2d:81:bb:b5:95:0b:e7:df:
                    0a:f1:95:80:c5:f6:6b:99:e6:ae:e8:e4:fa:7b:a2:
                    d0:0b:9a:ec:5c:51:a1:a6:84:90:94:98:21:41:54:
                    cd:aa:1f:c9:39:4b:1c:c4:5c:cf:40:fe:5e:e1:d1:
                    10:f1:55:75:0a:db:6f:99:b7:60:ac:35:d8:42:17:
                    6e:fd:67:b7:aa:32:9f:ea:c7:6a:e9:8b:57:40:fd:
                    95:94:03:41:8b:47:3c:30:99:3e:fe:15:92:a5:e0:
                    d3:df:e9:0c:97:5d:f6:0b:45:9a:0c:08:9c:e0:15:
                    89:26:77:8f:09:65:5c:bc:a2:97:a0:90:e3:ff:8c:
                    30:79:45:9a:63:18:07:7a:6a:29:e8:60:09:e0:4f:
                    0c:71:09:b5:49:1c:1e:d1:1b:11:57:55:76:1a:31:
                    d5:8f:3e:a0:b3:77:15:11:86:f6:b3:1e:52:c7:cb:
                    9c:5f:1b:86:c0:1d:de:f5:73:2c:89:86:38:f5:ae:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E9:C4:6E:45:09:56:BF:A7:D8:E4:06:5F:8E:C2:08:93:F0:0D:CB
            X509v3 Authority Key Identifier:
                keyid:28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/p-nEbkUJVr-n2OQGX47CCJPwDcs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:85:2a:93:ad:28:43:56:0e:0f:eb:96:9d:2c:5b:fd:ca:
         ec:c9:bc:22:5a:87:49:53:76:c1:2e:0e:d8:a3:1f:c6:d1:89:
         3d:65:ea:87:e7:84:91:6b:9b:b1:60:cf:04:ae:7d:70:b4:e5:
         d3:ab:de:15:91:2f:66:8a:ef:55:96:a0:dc:bf:0b:73:4a:58:
         41:03:cc:b7:fb:e8:46:ce:ff:18:37:49:e4:8c:8d:6b:99:26:
         3a:1c:00:6b:3e:aa:a8:f8:31:b6:88:61:2e:78:44:8f:99:19:
         29:37:a9:0e:de:16:aa:01:35:28:42:8b:0a:d5:46:d4:d9:3b:
         7d:73:ec:c5:1e:7f:cc:a6:7f:54:99:03:ab:78:d0:84:3a:b1:
         21:28:2e:23:95:d4:92:8c:b0:93:96:a3:85:ea:9d:d3:9a:7b:
         88:f8:f9:bb:2f:c5:a3:08:58:dc:98:df:15:84:fa:5e:64:86:
         f5:7b:e3:62:28:a9:8a:c6:30:ec:08:f8:c8:ed:4b:d1:35:e4:
         06:58:aa:87:29:c2:01:4e:db:38:ef:4d:ff:08:77:68:6c:dd:
         39:9c:8f:da:c5:c7:e4:f4:5a:2f:5f:b1:ce:6e:ff:b0:44:97:
         4e:8d:c0:63:44:5c:af:9f:4a:7f:88:fe:18:b2:e1:68:3e:2a:
         5e:15:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org