Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/BZhd65OQ9CiWn2VejImyBDNSd74.roa
File:                     BZhd65OQ9CiWn2VejImyBDNSd74.roa (raw, json)
Hash identifier:          9qfH7088zHF4yU/YOWh55myZWMG94eYs1wkQikwEu2Y=
Subject key identifier:   05:98:5D:EB:93:90:F4:28:96:9F:65:5E:8C:89:B2:04:33:52:77:BE
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       320E
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/BZhd65OQ9CiWn2VejImyBDNSd74.roa
Signing time:             Sun 01 May 2022 01:30:25 +0000
ROA not before:           Sun 01 May 2022 01:30:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        219.111.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12814 (0x320e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: May  1 01:30:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=05985DEB9390F428969F655E8C89B204335277BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:f7:c0:7f:46:e9:54:43:38:3f:5c:91:37:
                    3a:da:62:68:ec:be:13:c5:89:75:e8:62:ee:b3:c0:
                    75:53:77:60:91:f5:dc:8f:0e:96:d2:27:f3:29:1c:
                    cb:72:76:29:62:30:7f:16:8b:0c:a1:a9:33:79:23:
                    bc:76:48:e8:4d:5f:71:07:00:51:f6:0f:88:5b:10:
                    dd:d3:6f:8d:15:74:4a:df:64:16:f2:6a:74:7b:0e:
                    eb:a0:f5:f0:14:e8:cf:1d:e1:1f:a7:9e:b7:26:4c:
                    97:e5:99:cb:2d:6a:38:62:71:85:6b:1b:fe:f9:4b:
                    92:25:cd:8b:90:ad:12:4a:91:5e:c9:bd:6f:8d:29:
                    23:82:05:2b:36:6e:dd:c1:0e:15:85:96:55:b5:3a:
                    52:16:99:d7:08:be:3c:78:1b:3b:f0:f2:60:9c:47:
                    83:58:84:b8:06:d0:5a:8a:79:31:3b:b8:ff:25:18:
                    83:85:cc:69:22:d4:b2:70:b3:7f:e7:65:80:bb:93:
                    7f:23:64:97:ab:30:6f:4c:03:7b:eb:6a:53:57:3c:
                    b4:f7:5b:c3:9b:32:30:3a:ef:d4:a7:de:b0:80:0c:
                    d3:e4:7a:3f:95:75:be:f9:7a:f6:4d:21:0f:d8:e8:
                    61:d4:8e:9a:20:d5:58:bd:d1:8a:bf:42:62:bb:46:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:98:5D:EB:93:90:F4:28:96:9F:65:5E:8C:89:B2:04:33:52:77:BE
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/BZhd65OQ9CiWn2VejImyBDNSd74.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:74:f8:3f:86:f5:c0:c4:93:d2:7e:21:b8:8d:f7:1e:fa:
         c0:1b:26:47:08:03:f0:0f:90:4f:59:a7:25:15:a9:a9:c7:66:
         d5:b3:af:1a:6e:29:fc:29:30:06:2b:fd:ff:d2:11:ad:44:48:
         fa:42:78:06:6c:61:be:64:63:c6:81:bd:82:87:70:9f:52:4b:
         63:e8:a9:21:3f:c8:9a:ab:99:b8:db:82:4a:46:1c:c8:52:5b:
         8c:38:6c:76:9c:4f:4c:ce:73:81:29:0b:c4:22:2c:41:c7:c4:
         bd:d5:2a:3f:e6:df:79:68:9d:2e:d2:34:0d:37:63:2c:a8:5d:
         68:f2:54:a0:60:83:d6:c4:8b:59:f8:97:73:d3:c3:d8:ab:a2:
         b0:30:0d:45:e0:e5:9d:7f:4e:57:ee:c5:10:7b:99:c4:b2:4d:
         67:27:df:66:9c:2e:91:58:47:04:4c:a4:2c:ba:00:09:c4:9e:
         87:84:c9:7c:17:c1:a8:de:c4:5b:05:f0:50:bb:9d:81:20:20:
         d5:d5:d8:3b:b4:3c:02:10:62:6d:c7:1c:fc:f0:42:ff:96:2e:
         dc:be:6b:38:3f:af:21:26:0d:ec:2b:db:64:a4:bc:13:81:1f:
         4d:24:91:b5:55:3d:35:c1:6b:d8:81:8a:5e:3c:07:35:62:9e:
         88:d3:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org