Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/4o2kzc7-8xvTCv43KgGbxKff00M.roa
File:                     4o2kzc7-8xvTCv43KgGbxKff00M.roa (raw, json)
Hash identifier:          W6W2r8EgbrqHy1eh3wj1wKjjjmhfvtYEKqsqXt9FSOg=
Subject key identifier:   E2:8D:A4:CD:CE:FE:F3:1B:D3:0A:FE:37:2A:01:9B:C4:A7:DF:D3:43
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       18
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/4o2kzc7-8xvTCv43KgGbxKff00M.roa
Signing time:             Fri 31 Mar 2023 08:15:59 +0000
ROA not before:           Fri 31 Mar 2023 08:15:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18094
IP address blocks:        219.118.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Mar 31 08:15:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E28DA4CDCEFEF31BD30AFE372A019BC4A7DFD343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:f2:43:51:63:e6:28:38:4c:bc:f0:b8:d5:
                    4d:fd:72:eb:bb:ed:c0:d7:89:0b:f1:65:43:dc:03:
                    6d:bf:e0:65:e9:f6:51:03:1c:13:6d:db:4e:ab:4d:
                    2c:3b:99:c1:a0:38:00:2f:83:b6:b9:89:9f:f6:e2:
                    71:46:34:2b:56:74:69:4a:d2:e6:a3:c6:3d:c9:b2:
                    5a:5e:0f:e3:07:86:93:5e:d4:ce:9b:56:da:72:db:
                    4e:63:0f:e6:24:5b:76:5a:1d:4f:37:6a:83:52:a1:
                    7b:23:c5:38:27:93:24:5f:dd:1f:3b:0f:93:ae:c5:
                    f9:24:bd:50:3c:ce:9f:86:38:b8:75:e5:63:1a:73:
                    9e:0c:4e:17:f5:8e:d3:42:dc:39:53:27:7a:0a:cf:
                    85:d8:92:73:4b:a6:a7:70:8f:ef:10:29:f2:df:82:
                    75:70:16:62:e4:1c:d8:5d:68:51:72:05:59:cf:7e:
                    33:0c:e4:3f:4e:80:b1:96:d7:fe:e2:7f:83:70:22:
                    32:ca:f9:bc:da:06:00:2b:c5:11:67:3e:7e:f6:9d:
                    a6:c3:71:43:6c:23:27:d3:71:82:d8:97:26:e0:34:
                    ac:6c:df:32:d6:ba:7d:b2:ee:2c:3b:1c:8f:a4:8f:
                    ed:0d:06:2a:46:c4:1f:27:fe:84:6b:17:fa:ec:a6:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8D:A4:CD:CE:FE:F3:1B:D3:0A:FE:37:2A:01:9B:C4:A7:DF:D3:43
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/4o2kzc7-8xvTCv43KgGbxKff00M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:4c:4a:de:5b:2a:2a:49:a0:61:1c:61:9b:77:74:19:a5:
         1a:8d:3b:4f:f4:02:7e:d1:5d:2f:58:bf:29:7c:41:e7:e2:00:
         19:3d:ef:0b:99:13:7a:9b:8f:61:c0:5f:9f:65:d4:29:c7:f5:
         20:28:65:af:0a:53:9c:55:56:56:ee:00:dd:7f:d0:09:d4:ac:
         70:fb:bc:44:1a:68:fe:63:01:8b:c8:98:64:d4:ba:4a:11:24:
         76:be:40:b1:ae:c7:55:e3:da:4c:c8:a2:05:64:1a:42:13:47:
         8a:f5:16:31:06:42:d5:03:00:dd:a7:cc:e0:db:47:cc:3d:f4:
         95:19:75:d7:37:ba:0c:b5:bf:3c:1b:5c:e0:f0:b9:52:a9:36:
         aa:bd:84:27:a0:9a:a4:70:32:07:8d:a3:90:2a:54:58:72:ab:
         ec:dd:79:77:c7:51:22:b3:e4:18:f6:e1:95:e6:66:0a:d5:32:
         80:90:28:43:29:35:15:97:72:5b:70:ac:85:af:ab:74:fc:be:
         8a:5c:7e:e9:da:ae:90:ce:7c:90:3a:87:41:b1:11:49:a0:d9:
         6e:f7:b1:ea:db:f4:a2:08:e1:d9:34:b1:5c:bf:6c:d1:4d:23:
         2a:de:d8:c1:54:39:1c:a2:c6:85:e1:b6:f0:81:80:8f:83:50:
         e0:f9:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org