Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/H_ub3RuFhvCG2eoWKUBvrphoYt0.roa
File:                     H_ub3RuFhvCG2eoWKUBvrphoYt0.roa (raw, json)
Hash identifier:          YLm3URO+NByUdestlHaaiLsnCR9xyb7AMMt8wicEwok=
Subject key identifier:   1F:FB:9B:DD:1B:85:86:F0:86:D9:EA:16:29:40:6F:AE:98:68:62:DD
Certificate issuer:       /CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Certificate serial:       2A
Authority key identifier: 91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/H_ub3RuFhvCG2eoWKUBvrphoYt0.roa
Signing time:             Thu 13 Apr 2023 09:53:58 +0000
ROA not before:           Thu 13 Apr 2023 09:53:58 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        24.53.192.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
        Validity
            Not Before: Apr 13 09:53:58 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1FFB9BDD1B8586F086D9EA1629406FAE986862DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:0f:84:35:52:31:a7:e4:46:06:8d:d3:3b:
                    c9:8d:1a:ad:fc:bb:97:cc:41:51:de:0c:fd:52:78:
                    a0:b3:ec:81:d0:35:83:83:39:18:b8:2f:66:4d:4f:
                    22:b6:21:90:7b:5a:3f:0d:34:fb:49:16:95:49:d7:
                    5a:a4:8a:c7:8b:42:ff:84:ef:46:8e:15:01:48:6b:
                    1a:de:5e:0e:d9:d6:28:cf:34:62:76:f1:13:cd:2b:
                    3c:58:1d:9e:94:d4:a4:ad:19:27:1b:04:a8:e3:d0:
                    06:12:02:3c:67:79:54:f3:e4:f3:a4:dd:1c:84:2e:
                    04:70:8b:ce:d9:27:ef:a3:d3:2e:40:fb:5a:1a:7d:
                    81:b4:79:0f:38:09:fe:ca:6e:80:2a:c4:2c:9b:15:
                    e5:81:eb:f3:23:13:3a:2b:1f:6f:f8:60:f0:9f:f5:
                    72:d7:19:55:98:fc:e6:10:2c:fc:5c:b3:63:95:1a:
                    e1:20:ac:3c:6c:db:76:72:73:bb:52:98:70:ff:16:
                    42:2a:71:64:9b:0b:75:1a:cc:00:0c:a3:40:18:4e:
                    f0:2a:27:92:6b:52:ae:1a:4a:6d:52:0a:61:3c:36:
                    4c:b1:e4:1b:1d:9c:33:f9:95:8a:7f:c3:6f:e9:57:
                    48:18:0b:60:b9:1c:47:ba:16:82:57:4f:ec:65:fb:
                    eb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:9B:DD:1B:85:86:F0:86:D9:EA:16:29:40:6F:AE:98:68:62:DD
            X509v3 Authority Key Identifier:
                keyid:91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/H_ub3RuFhvCG2eoWKUBvrphoYt0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:da:c2:ac:ad:61:98:e5:58:98:61:bb:80:f3:bd:ca:db:
         ab:a5:59:b7:ae:79:2a:90:21:20:25:00:e3:82:ad:bc:d7:a8:
         58:51:17:f1:ac:ba:59:42:f5:cb:91:d2:b2:fa:7a:40:69:94:
         da:3e:6f:58:3b:0b:9d:80:00:36:67:b1:04:08:f2:59:76:85:
         49:b4:09:be:23:69:90:a3:5a:db:a8:4a:48:87:64:c7:19:31:
         7e:eb:2b:a9:6f:c1:b6:a1:cb:11:da:ca:14:12:bc:16:72:8d:
         8f:02:03:71:be:46:64:80:27:95:e6:e4:15:a3:95:05:c2:8f:
         6d:4b:d7:24:fe:a8:66:0c:e6:c1:5c:80:45:22:47:58:43:e8:
         9c:98:81:44:88:ff:49:fd:4d:1a:c7:91:81:a4:5e:9c:eb:33:
         6d:28:4c:e8:23:6c:32:39:f2:ea:94:d5:26:71:ac:1f:b4:a8:
         c7:41:c9:4a:36:a8:9c:8e:c2:16:bb:e6:f3:81:a4:17:7e:54:
         21:52:11:bd:cb:8b:78:5d:1e:85:7c:a0:94:67:0d:aa:a5:b2:
         5c:df:3a:34:a5:e1:45:0e:88:c6:ab:cb:d6:b1:87:a5:d5:e1:
         ca:8b:b8:b4:77:cc:27:2e:d5:fe:7f:7b:8f:39:89:51:33:a9:
         66:ff:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org