Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/WBRjEJHLTmO7XbF0BtWRcPXd5HU.roa
File:                     WBRjEJHLTmO7XbF0BtWRcPXd5HU.roa (raw, json)
Hash identifier:          Qo3NBoNz40LR9hQqFsPtxRf5qTq2WRIMehzKJK4KxlY=
Subject key identifier:   58:14:63:10:91:CB:4E:63:BB:5D:B1:74:06:D5:91:70:F5:DD:E4:75
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       10
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/WBRjEJHLTmO7XbF0BtWRcPXd5HU.roa
Signing time:             Thu 20 Oct 2022 06:24:20 +0000
ROA not before:           Thu 20 Oct 2022 06:24:20 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        202.222.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:24:20 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=5814631091CB4E63BB5DB17406D59170F5DDE475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:37:9f:33:74:d7:b9:f2:92:6a:a2:2a:f4:
                    83:73:26:1c:cc:ef:1a:ee:66:41:97:18:4c:3b:e6:
                    96:f6:39:3f:11:0f:4b:ba:17:16:26:92:35:24:1f:
                    35:27:28:5d:f2:c4:c4:17:c6:e8:01:df:9b:79:d7:
                    27:70:95:99:5f:3d:8e:31:3e:51:a8:b1:12:ff:f4:
                    1f:a0:5a:5e:28:9a:50:2e:84:53:0d:f4:85:91:d1:
                    2b:79:4e:99:af:8b:97:bb:b6:3a:9c:dc:24:62:08:
                    35:83:ee:5a:a9:3b:65:2a:95:94:60:ce:43:87:4c:
                    0c:bc:dc:eb:94:82:74:a3:5c:2b:63:de:51:14:e7:
                    6c:38:d5:3f:be:a6:d7:c3:e5:ae:9c:f7:ab:db:c5:
                    b0:3a:8a:7c:9b:65:1e:90:a8:b6:6e:52:70:a1:c2:
                    8c:21:10:f7:4a:d4:b2:99:c7:38:69:f6:aa:ee:b1:
                    66:5c:b3:b2:d8:58:3b:3c:52:b6:b4:b0:84:29:af:
                    2d:05:97:8c:17:2a:02:31:e4:17:2c:2a:06:2b:f2:
                    cb:74:02:a2:7a:e1:84:5b:5d:63:43:7a:a9:03:4f:
                    ad:6f:28:37:4d:30:68:68:8a:f3:9d:fa:bd:55:f6:
                    8f:d4:66:06:08:49:9f:e4:7a:0b:c5:12:e4:a7:8a:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:63:10:91:CB:4E:63:BB:5D:B1:74:06:D5:91:70:F5:DD:E4:75
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/WBRjEJHLTmO7XbF0BtWRcPXd5HU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:b5:c3:54:2e:09:aa:a1:6d:98:41:80:4e:f4:bd:ad:8d:
         d9:df:4e:6f:e6:65:b3:21:7b:68:7d:b8:e4:11:c0:01:16:c8:
         31:de:f5:30:bb:a2:b1:63:c4:ab:ff:b6:aa:41:71:9f:ec:a8:
         72:89:9a:61:29:39:02:c1:99:52:98:95:4c:e9:ba:d5:e4:49:
         33:6d:40:4f:81:18:8d:e0:26:b3:75:b6:86:f2:78:9c:d9:40:
         16:b0:4e:75:fc:84:aa:19:92:b6:83:6b:7c:77:ff:05:99:29:
         ff:e4:e9:b7:48:5b:a9:f0:31:ca:78:6b:06:60:01:93:51:4c:
         12:3d:e6:77:1c:41:11:d2:c9:80:05:aa:b8:a8:d1:76:39:22:
         2d:4a:03:d9:88:c9:b4:7e:03:f0:1d:77:b0:32:2c:89:a7:85:
         67:54:37:bb:53:e6:96:19:57:f3:bd:77:57:6d:df:7e:09:a3:
         9c:17:6e:b6:f9:34:75:f8:6f:88:eb:cd:7a:3d:94:bd:d6:f3:
         57:58:e6:a7:29:f3:e7:fb:53:9f:74:e6:5d:03:f0:ae:76:c0:
         c7:1a:1f:0a:5d:6e:9a:3a:76:1f:18:32:e5:cd:70:96:ee:2c:
         cb:1e:07:a0:4d:86:93:30:f2:64:62:1a:14:ee:a7:7e:cb:86:
         dd:ce:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org