Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/nRs91AuW3sMx0lbLOWBmiNlGego.roa
File:                     nRs91AuW3sMx0lbLOWBmiNlGego.roa (raw, json)
Hash identifier:          gz/t+v2033zEQXJ6V7DCbLJjU402jccXB7+aRUoXU30=
Subject key identifier:   9D:1B:3D:D4:0B:96:DE:C3:31:D2:56:CB:39:60:66:88:D9:46:7A:0A
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       07
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/nRs91AuW3sMx0lbLOWBmiNlGego.roa
Signing time:             Thu 20 Oct 2022 06:20:25 +0000
ROA not before:           Thu 20 Oct 2022 06:20:25 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        119.148.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:20:25 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=9D1B3DD40B96DEC331D256CB39606688D9467A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:44:71:a3:a2:ff:80:7a:bb:34:08:a7:4d:
                    bf:48:5e:eb:67:c4:ea:f6:9f:14:7d:98:1a:f7:9d:
                    31:c4:1f:05:9d:e5:16:fb:0f:26:97:c5:ee:99:19:
                    25:27:1d:6e:38:d1:b4:92:ed:b7:c7:60:ae:62:ca:
                    e9:61:4c:25:5c:42:34:ad:e1:4a:c3:af:1a:a8:27:
                    32:fd:00:e9:a4:41:72:b9:64:54:bf:d7:2c:85:08:
                    6d:c3:d5:9f:81:0a:e2:ed:65:c8:17:f6:17:6c:79:
                    69:d0:50:34:5b:e4:92:6e:3a:ee:49:92:15:85:5f:
                    09:fc:a1:f0:19:c6:5e:52:5f:63:01:0b:dc:a5:cb:
                    dc:71:93:97:b0:ca:44:6b:17:79:c4:37:1b:3f:8f:
                    af:ec:a3:3d:ef:16:3b:af:a9:06:de:1e:76:3a:47:
                    ab:4f:c2:ec:de:78:7e:42:73:a8:25:fa:b1:8f:a7:
                    a8:65:93:6d:d0:1a:3f:93:63:32:6f:d7:fb:ec:7b:
                    6c:8c:18:5a:19:86:91:9e:d5:74:b8:1b:a7:c0:32:
                    11:fe:3f:87:b6:c7:2f:0c:cd:74:ef:ee:8d:6e:01:
                    e1:d3:5b:04:8d:d1:23:6a:6e:a2:0a:7c:ac:b4:d5:
                    6b:8e:01:33:bd:ed:fc:1d:15:20:5f:f2:51:b8:04:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:3D:D4:0B:96:DE:C3:31:D2:56:CB:39:60:66:88:D9:46:7A:0A
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/nRs91AuW3sMx0lbLOWBmiNlGego.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.148.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:24:30:47:3d:28:97:52:86:de:66:33:8a:52:23:5e:19:
         d4:8e:55:63:e1:b9:dc:dc:50:0b:51:8b:77:72:c3:12:b2:cd:
         d9:57:14:5e:5d:85:9b:9f:ed:e1:dd:b5:76:84:c5:df:56:50:
         11:60:87:2e:b0:dc:53:4a:ae:f4:72:ab:19:c4:51:54:c7:77:
         f9:87:7e:3f:68:67:c9:36:44:63:82:3c:0a:59:c1:11:9d:14:
         bb:45:26:19:f8:a8:f3:ff:bf:e4:fc:ad:f2:cd:c2:2a:2b:7e:
         b2:7a:5f:c6:31:b7:8a:01:10:88:ff:93:eb:cf:31:63:b2:c8:
         ad:22:56:61:76:06:9a:02:c8:25:82:97:fb:1b:e5:1f:ab:20:
         9d:6d:95:78:78:70:0f:af:3e:b3:90:16:41:34:56:76:8c:df:
         36:d5:ac:56:d0:6c:88:7e:fe:5f:d8:93:40:42:3d:5f:95:7b:
         62:e8:d5:cc:bc:e5:54:ef:9b:58:c6:b7:e0:05:da:3f:7c:e4:
         0c:9b:aa:15:e1:49:b9:4d:13:f8:ff:0b:e6:35:e3:84:ab:8f:
         56:c6:f2:c0:df:a5:67:8f:7a:27:f6:b0:67:0f:7a:26:84:94:
         7f:b1:89:85:28:4b:ec:19:71:bd:be:51:17:81:8b:ed:ed:4e:
         01:2d:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org