Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/CP5kfu50bal_nIRon9syVHQreOI.roa
File:                     CP5kfu50bal_nIRon9syVHQreOI.roa (raw, json)
Hash identifier:          OupkuwfPCWBlu9WNFOQNnLgJDyCX7CLVaV9YVc9j+JM=
Subject key identifier:   08:FE:64:7E:EE:74:6D:A9:7F:9C:84:68:9F:DB:32:54:74:2B:78:E2
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       04
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/CP5kfu50bal_nIRon9syVHQreOI.roa
Signing time:             Thu 20 Oct 2022 06:18:21 +0000
ROA not before:           Thu 20 Oct 2022 06:18:21 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        116.89.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:18:21 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=08FE647EEE746DA97F9C84689FDB3254742B78E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:e5:53:13:4e:2c:52:d2:b7:37:33:71:b2:
                    c5:03:4f:68:22:50:5f:d4:03:20:07:68:10:1b:dd:
                    a1:ae:87:c6:71:79:29:72:36:77:17:95:30:d7:1f:
                    38:64:0f:cb:ce:78:91:7f:26:2e:63:9b:6a:35:2d:
                    65:f1:ce:57:15:38:56:01:db:74:5a:ec:2b:29:00:
                    cb:94:ac:a3:83:c9:b1:07:30:ae:6e:52:ac:dd:7a:
                    67:a8:55:a7:94:43:c5:43:e3:9d:2a:58:12:23:d7:
                    db:ff:9d:fb:fb:dc:08:f6:b7:f2:9a:33:30:a6:44:
                    8b:e4:e2:f1:e9:47:30:5b:e3:99:8f:0b:1e:e0:f7:
                    d0:b3:62:0d:43:3c:6d:ac:75:b5:77:04:e0:d8:98:
                    02:dc:b7:83:e5:c3:97:74:c4:5e:c7:8d:89:2a:72:
                    d3:ab:46:15:d5:ab:35:76:51:ec:c7:c9:b0:eb:08:
                    53:2d:ee:d8:d4:ca:9d:57:10:1e:de:bc:40:ec:b0:
                    ce:34:82:52:41:08:df:8e:30:f1:55:70:ac:53:53:
                    65:c6:ae:b0:2f:5c:cf:0f:a1:2d:01:45:ec:d5:cb:
                    3c:9b:a7:dc:b2:8c:1c:fb:55:fd:27:69:01:ec:5b:
                    a4:0d:47:45:74:8a:f2:e0:42:51:7b:f2:2f:ed:a1:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FE:64:7E:EE:74:6D:A9:7F:9C:84:68:9F:DB:32:54:74:2B:78:E2
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/CP5kfu50bal_nIRon9syVHQreOI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.89.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:53:3c:29:c9:bd:af:22:0d:ce:17:25:ae:f4:08:64:a1:
         08:05:f2:ff:20:53:50:67:27:b4:d5:9d:4a:a3:62:15:6c:29:
         63:83:34:f3:78:59:27:07:4e:b7:a8:29:2c:90:ac:99:d0:9e:
         ff:41:4a:86:98:f2:5b:b5:09:db:15:12:1f:ea:01:b7:e8:df:
         67:32:4d:c1:38:16:dc:de:e7:9f:e1:a1:bc:5d:db:c6:64:65:
         73:33:62:ed:52:e4:0f:00:48:d3:74:90:32:10:01:72:53:69:
         c9:e5:c7:bc:bb:ff:51:20:b4:54:ed:68:86:03:1a:e1:9a:3d:
         77:7f:92:5d:1b:e7:7f:af:ea:47:4a:7e:ee:bf:9a:d6:6f:ab:
         85:31:5d:03:81:8b:3a:1e:e8:6a:91:fb:3e:7b:4b:5d:a0:d3:
         16:c1:be:60:5c:06:10:ea:d5:49:5e:47:af:a8:2c:ae:a9:f6:
         29:01:a9:cb:f3:81:ac:ba:68:95:f0:28:14:31:83:18:e6:2f:
         09:42:71:df:27:e6:94:3e:a9:cd:cc:6a:5e:cf:55:fa:f1:08:
         3b:18:00:c5:f0:fc:15:8b:ed:d0:9d:bc:b6:36:61:82:93:f2:
         64:6d:ce:6e:a5:c9:c9:66:f6:8d:18:3e:8b:f5:3b:42:ec:ea:
         32:16:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org