Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/TG2LswpBOtkwIp2ESde47jd4xnM.roa
File:                     TG2LswpBOtkwIp2ESde47jd4xnM.roa (raw, json)
Hash identifier:          E1oj6D7KfnAhiatKkKVmkYW6w64Is2Xu3Mu6j/YrkoU=
Subject key identifier:   4C:6D:8B:B3:0A:41:3A:D9:30:22:9D:84:49:D7:B8:EE:37:78:C6:73
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       08
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/TG2LswpBOtkwIp2ESde47jd4xnM.roa
Signing time:             Thu 20 Oct 2022 06:20:26 +0000
ROA not before:           Thu 20 Oct 2022 06:20:26 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        119.224.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:20:26 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=4C6D8BB30A413AD930229D8449D7B8EE3778C673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:0b:7a:38:ea:ff:46:a2:2a:cb:23:79:3e:
                    15:6a:b1:e7:8b:be:6a:6c:46:f6:8a:d6:c7:de:e5:
                    d9:e6:49:bf:63:fc:8f:ef:da:34:72:7e:ef:a3:82:
                    88:3d:2d:38:27:c2:0c:6a:21:d7:0c:92:54:bf:40:
                    81:8b:62:f8:30:43:d6:e2:63:b2:8a:0b:94:3a:6e:
                    a6:3b:e6:5f:0b:5c:9f:c8:3f:d1:13:88:77:5e:b1:
                    6f:ab:8f:ef:85:cd:9c:dc:49:f2:12:bc:5c:e0:ff:
                    5e:c5:88:7c:b1:39:4e:bf:95:c9:d0:0b:1f:b1:a6:
                    a8:ea:ed:44:14:29:04:66:29:92:34:f1:e4:f2:1f:
                    bc:31:e4:1c:18:c9:99:c5:e0:06:21:8a:8d:51:48:
                    38:ae:b2:7c:b8:33:29:86:91:8a:a6:36:2a:9b:fe:
                    fc:67:1d:87:d2:f9:a7:56:b2:d0:e3:cb:82:9a:5d:
                    45:b0:24:22:9c:d5:13:af:77:ba:4d:b1:a5:e4:a1:
                    04:0e:51:5f:99:01:47:b6:2b:51:65:3c:cb:ca:bb:
                    6b:fc:08:49:a5:6f:7f:92:7f:8e:f5:ff:fd:bc:0b:
                    f5:ba:17:92:2e:66:62:9d:92:b3:b2:a4:3b:9a:ff:
                    20:9e:9d:07:bc:ea:c7:6e:ec:f3:bd:1a:e9:f1:b4:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6D:8B:B3:0A:41:3A:D9:30:22:9D:84:49:D7:B8:EE:37:78:C6:73
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/TG2LswpBOtkwIp2ESde47jd4xnM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:35:b4:76:ae:70:be:71:f0:8b:07:be:cb:07:5e:64:f3:
         43:e9:f9:57:2e:07:01:a8:82:98:35:e7:0f:15:57:ad:5f:b8:
         ce:b3:09:c5:cc:a3:08:30:c5:51:5d:b4:f4:62:1a:3d:cc:36:
         0f:0d:e0:10:bf:d2:57:d1:87:5d:c1:e3:52:24:cf:60:3f:45:
         81:1b:40:3d:75:6b:b5:a2:9c:8e:e0:79:a2:8d:79:75:97:4e:
         b5:b2:c2:cc:31:81:85:3e:cd:ec:f6:6b:69:d6:c3:73:d8:3d:
         f3:d7:01:e5:d0:2f:74:5a:28:ca:4e:6e:ba:cb:2f:28:3f:56:
         9c:5b:05:5d:a0:9d:a2:36:db:56:6b:54:59:0f:80:b3:b0:d0:
         af:5f:bf:ba:52:36:3a:0c:43:5c:fe:8f:31:4e:be:4f:a3:60:
         16:80:17:42:2c:d9:db:7b:c5:9a:80:8d:71:10:25:65:11:aa:
         b1:24:49:8f:12:2c:79:d2:da:d4:93:f2:18:8f:78:1b:05:72:
         3b:af:f9:ca:7c:e5:a5:71:a9:a2:54:3b:bb:b5:e0:3a:e5:9e:
         78:9a:2e:9e:c5:53:a5:42:48:2d:3b:7f:d3:0f:bd:9f:a1:0b:
         03:2a:6d:4e:e6:66:89:5e:d4:a3:44:e9:13:6e:ff:93:cd:1b:
         f1:3d:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org