Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/q6pkAr0uw9ZYImYhq03dI0RgWwU.roa
File:                     q6pkAr0uw9ZYImYhq03dI0RgWwU.roa (raw, json)
Hash identifier:          sTO74BeWTdiVLa/8Ily/OXqzNcGkvj+Lyzh5in5ut2s=
Subject key identifier:   AB:AA:64:02:BD:2E:C3:D6:58:22:66:21:AB:4D:DD:23:44:60:5B:05
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       16
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/q6pkAr0uw9ZYImYhq03dI0RgWwU.roa
Signing time:             Tue 30 May 2023 06:05:24 +0000
ROA not before:           Tue 30 May 2023 06:05:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     17958
IP address blocks:        180.178.80.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: May 30 06:05:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ABAA6402BD2EC3D658226621AB4DDD2344605B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:85:2f:92:f9:f1:98:dd:bc:b9:72:8b:e1:
                    43:e9:ba:c6:15:20:5d:c3:70:57:cc:36:d4:29:87:
                    c8:b3:55:5e:a8:c3:20:d2:ba:c2:7d:57:34:2e:b9:
                    87:a9:a3:bf:07:72:8c:c6:45:3c:d6:67:e4:a8:65:
                    99:70:0d:27:9a:25:e3:2b:64:47:3e:27:2a:46:ec:
                    95:63:7d:bf:8f:bd:2a:c9:5f:71:b4:fe:c6:40:93:
                    92:ff:2d:ba:65:aa:a2:5a:10:f3:bc:3e:3d:0a:da:
                    70:61:30:57:bb:48:f0:97:11:ae:00:01:8c:d0:ef:
                    44:54:28:0c:1f:f7:8d:2a:87:2f:62:51:5f:c2:09:
                    dd:78:e1:b3:a9:8d:6c:3a:34:af:d2:c1:0f:f9:a6:
                    fb:85:0b:d6:c5:cc:92:46:26:39:dd:2d:cc:3c:10:
                    af:f8:5e:00:f6:73:d9:29:df:1c:d7:27:e0:42:6e:
                    d6:4f:6e:79:dc:01:ce:50:8c:6f:6d:81:98:3e:a0:
                    15:67:7b:48:74:ed:32:a6:82:ce:da:d5:5e:11:86:
                    9f:07:dc:49:bd:5e:a0:a1:57:48:95:64:f2:0c:ea:
                    fa:d9:65:d4:f2:f8:21:1a:3f:30:10:86:a8:84:4e:
                    61:c2:76:c0:be:e9:4b:ff:f8:a0:9a:5a:5e:eb:4e:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:64:02:BD:2E:C3:D6:58:22:66:21:AB:4D:DD:23:44:60:5B:05
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/q6pkAr0uw9ZYImYhq03dI0RgWwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:57:cb:e8:67:7d:93:92:7f:5a:fa:54:cf:e2:b6:2e:c4:
         3f:ff:4a:de:0b:b4:91:57:62:b1:2d:05:da:c0:d3:6c:83:db:
         b6:a1:a2:4a:61:58:2e:d6:05:d5:5a:16:72:6c:6a:d7:cc:45:
         69:c2:6d:36:fe:8c:18:fc:ab:a1:36:05:e6:3c:c9:ab:b2:48:
         f3:d8:72:9a:1c:e8:23:13:bc:1b:35:83:70:3e:f3:e6:87:85:
         f0:e7:53:45:77:7d:4f:b2:e2:bc:a7:00:1d:c9:d2:ac:17:38:
         8c:6e:a1:e0:33:f8:42:b2:a8:30:d8:8a:8c:0c:a4:e1:13:c9:
         4b:d6:4e:62:e9:20:95:ba:ed:d2:5e:45:34:d9:51:22:ab:d9:
         93:e1:6d:21:4d:98:73:16:3f:94:57:5c:ce:ae:cb:d3:1e:57:
         16:f4:f1:72:4a:c0:81:74:bc:1f:d5:54:c7:1d:66:19:c3:01:
         22:35:b1:ae:ba:a1:be:f5:3d:59:8d:56:e4:9e:0f:46:69:35:
         a3:5b:18:c3:e0:4c:b2:4c:b1:ee:36:d9:c4:39:a6:78:1a:6c:
         05:8a:7a:64:7d:ec:e9:a0:db:6e:23:6e:25:a2:07:75:0e:d5:
         3a:1a:8a:df:8c:b3:5e:13:95:5c:68:91:2f:3f:00:17:c3:1e:
         43:cf:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org