Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa
File:                     AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa (raw, json)
Hash identifier:          dpO9qWXmcjwSNXdQMOyGLgy+cTX9g5BB2SS67qgg7p0=
Subject key identifier:   02:11:7A:B8:34:0C:B0:E9:17:82:6D:1C:38:08:CC:49:F8:39:C8:BC
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       42
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa
Signing time:             Thu 13 Apr 2023 09:54:03 +0000
ROA not before:           Thu 13 Apr 2023 09:54:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        210.141.214.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=02117AB8340CB0E917826D1C3808CC49F839C8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:27:dd:3c:ec:1f:e3:9f:d5:4c:c1:33:a6:
                    13:25:57:67:21:1f:e3:9a:ca:43:50:0e:f4:e5:bb:
                    b0:8c:0b:b0:7d:58:ff:e8:a5:9e:3f:f5:e9:8c:8a:
                    37:fb:02:ac:d4:e3:21:12:a1:7d:7b:7d:eb:fb:ec:
                    cb:ee:9b:7b:65:4d:11:7a:bc:c1:cc:48:e9:72:33:
                    14:82:cb:14:5e:87:95:9d:8d:a5:6f:dc:b9:8f:59:
                    59:fe:bd:79:29:e9:18:43:6b:6e:2b:eb:a2:2d:7e:
                    e4:6b:18:fe:49:df:25:dd:d9:24:85:a8:5c:a0:b1:
                    8e:8a:d4:8e:6a:e2:b3:b6:0b:23:cc:fc:27:fd:c7:
                    a5:bf:2e:e4:e5:fb:3d:d8:41:3e:32:f3:e4:18:13:
                    39:1b:a7:0d:a6:6d:da:18:4c:37:53:db:62:2a:49:
                    da:2f:f9:c7:f9:2a:a1:f6:9a:6d:25:e2:db:2a:66:
                    2c:bf:b4:3e:cd:2b:8a:24:49:49:f9:c1:50:f3:a8:
                    41:a4:1f:28:28:b8:76:86:92:d6:cc:c5:b9:1d:45:
                    50:8e:47:51:ba:30:1e:50:7f:aa:3d:d4:b1:7e:0c:
                    c4:3f:2c:ec:e6:dc:dc:08:9f:9f:ad:79:f4:d4:74:
                    8b:58:1c:58:c0:88:9d:12:5d:58:c0:d4:ca:53:ca:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:11:7A:B8:34:0C:B0:E9:17:82:6D:1C:38:08:CC:49:F8:39:C8:BC
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:33:6d:17:f5:3f:cf:c6:b2:db:c4:25:77:ff:5c:9c:a3:8f:
         c4:77:8e:da:c7:a5:b1:35:a8:8f:e3:6c:df:29:8c:84:ae:ce:
         c8:a3:e5:18:a6:e5:23:28:88:f3:f5:69:7a:f3:9f:3a:02:b3:
         24:a5:d9:04:55:56:15:ed:d0:f5:d0:a1:ef:6f:03:8e:dc:82:
         f8:ce:4d:52:09:b6:57:b6:e8:e6:88:21:48:f0:57:c3:6f:8f:
         18:d2:72:95:0b:f0:79:54:4f:a5:80:71:01:7e:b1:89:4b:cc:
         93:6a:56:a7:3c:86:3f:ec:8f:9c:25:15:86:81:fb:c5:65:86:
         63:ea:6d:a4:76:60:f5:09:bd:90:0f:49:a0:58:2b:e7:3e:44:
         21:c4:a6:7a:f1:58:ca:34:56:1e:f3:04:ec:35:3e:80:7e:0a:
         fb:ba:92:3b:11:b7:2a:67:21:c3:30:9a:7b:ac:23:5e:8c:ed:
         28:06:9f:76:e4:e9:e8:ad:0a:f0:4e:95:49:ae:66:ef:56:76:
         7d:24:c2:19:94:29:06:ab:57:a5:fd:d9:c2:ff:9a:e8:4e:69:
         5e:05:e1:ce:22:c3:8e:91:eb:5d:da:c1:93:e6:83:93:56:16:
         29:91:76:36:21:1c:74:4f:23:62:67:ce:a2:64:7c:f3:34:04:
         8e:8f:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org