Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/zpWTSJvD4tPp5YYFtSUSA6nM3og.roa
File:                     zpWTSJvD4tPp5YYFtSUSA6nM3og.roa (raw, json)
Hash identifier:          HyMbsJDMkpMB16zeSCTw+dz+/Li4462Nu/u8EwxplyM=
Subject key identifier:   CE:95:93:48:9B:C3:E2:D3:E9:E5:86:05:B5:25:12:03:A9:CC:DE:88
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       320F
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/zpWTSJvD4tPp5YYFtSUSA6nM3og.roa
Signing time:             Sun 01 May 2022 01:30:25 +0000
ROA not before:           Sun 01 May 2022 01:30:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        222.231.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12815 (0x320f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: May  1 01:30:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=CE9593489BC3E2D3E9E58605B5251203A9CCDE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:c4:37:be:a7:04:82:ea:6a:4b:a4:1b:44:
                    d1:1e:67:5c:da:45:fd:6a:1c:6f:3d:ac:73:96:b0:
                    ee:ad:d7:f7:e5:96:d7:7b:03:66:98:36:3d:62:33:
                    aa:03:94:c3:a2:4a:53:40:78:e1:5c:85:83:a4:f1:
                    c3:b0:24:3e:83:34:f7:d2:dc:26:b2:d4:b4:57:7d:
                    77:95:d6:52:90:30:74:b2:94:15:76:ce:72:80:a6:
                    97:44:3c:d8:69:64:52:99:45:70:78:e2:0a:2b:c6:
                    cb:b1:f5:19:11:75:fb:7a:9b:ae:ad:c1:03:c6:01:
                    9c:7f:12:81:0d:c6:f8:de:40:98:dd:f3:0e:72:01:
                    25:71:7a:80:43:20:12:18:7b:c7:62:c4:f4:a3:bf:
                    ca:1a:27:96:cc:2c:04:08:2e:dd:da:46:18:69:f2:
                    62:45:81:63:62:a0:b6:83:72:5f:51:e1:50:15:89:
                    7f:52:d6:4d:44:7b:10:f6:95:35:9d:46:85:41:13:
                    6e:d8:c7:68:36:9b:44:c5:8a:38:80:fc:33:46:dc:
                    a4:f1:9d:4c:e3:1b:6f:e8:f6:5c:96:e1:0c:80:04:
                    b9:c5:98:06:51:7c:77:d9:e2:0b:8c:fb:d4:5a:b1:
                    d3:ca:db:a5:8a:80:26:f3:47:d7:9c:43:06:f9:84:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:95:93:48:9B:C3:E2:D3:E9:E5:86:05:B5:25:12:03:A9:CC:DE:88
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/zpWTSJvD4tPp5YYFtSUSA6nM3og.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:6f:fe:4c:6a:74:ec:90:a6:12:3b:fb:46:9e:d7:6d:15:68:
         43:0f:6a:c6:46:4c:45:88:26:31:97:8f:5e:54:67:39:f9:1a:
         9f:25:ca:ed:ba:a8:66:20:5c:c1:a4:53:66:ce:14:97:1d:a5:
         b0:97:5d:b7:27:18:4b:92:40:bc:3b:b3:7e:fc:18:a1:6d:e8:
         23:d4:df:40:76:02:bc:10:b5:ed:4c:27:db:72:30:1a:40:71:
         a0:ed:95:e5:8f:bd:3e:21:47:23:5b:c6:45:99:21:73:33:92:
         fd:77:6f:6b:eb:e4:6c:89:c9:2d:c7:f8:83:81:d0:9b:3a:8a:
         ff:f8:fd:d1:ed:df:45:2c:15:76:6c:a0:23:0d:23:65:70:99:
         92:f7:d4:03:3b:f3:eb:73:b0:39:b3:59:1c:97:57:71:37:c9:
         b0:0f:33:36:19:08:9a:e4:1f:2a:93:53:00:1f:9d:e7:ad:61:
         1e:c7:39:15:57:72:96:ba:40:fa:8b:c1:8c:df:f7:e6:9f:26:
         46:10:44:10:0b:99:87:77:89:42:c0:2d:b9:7b:45:47:fe:e8:
         33:cf:29:a3:44:eb:35:e8:63:6e:82:9c:7d:cd:71:fb:44:d9:
         0e:b0:68:23:32:29:be:21:f9:cb:0c:4e:d5:5b:bc:08:a9:35:
         ab:dc:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org