Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/Kw_y5uwwkAWAlEpwu6Vy_eeSPLg.roa
File:                     Kw_y5uwwkAWAlEpwu6Vy_eeSPLg.roa (raw, json)
Hash identifier:          Yok46q7zJyaeAkMkiQg4TPEtInsxtp9cvkoLNV06t9o=
Subject key identifier:   2B:0F:F2:E6:EC:30:90:05:80:94:4A:70:BB:A5:72:FD:E7:92:3C:B8
Certificate issuer:       /CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
Certificate serial:       1D
Authority key identifier: 91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Kw_y5uwwkAWAlEpwu6Vy_eeSPLg.roa
Signing time:             Tue 10 May 2022 07:29:25 +0000
ROA not before:           Tue 10 May 2022 07:29:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        24.53.192.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913A79485AE6D4CB5B97AF8BAA52B59656A2224A
        Validity
            Not Before: May 10 07:29:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2B0FF2E6EC30900580944A70BBA572FDE7923CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:84:96:50:9b:ae:c2:b3:4e:1a:d4:a1:91:f6:
                    76:76:16:fb:bd:87:f3:a9:27:89:4e:ab:97:98:56:
                    f2:be:75:4b:66:bc:58:dc:4c:1b:79:69:bc:58:76:
                    58:76:47:03:dc:37:20:ed:b1:0c:b7:3e:b0:c8:2b:
                    4a:8c:9a:01:a4:73:45:43:7b:1b:8a:f8:99:c4:9f:
                    47:ae:2f:9b:74:e0:b6:94:39:81:f7:51:a7:c1:68:
                    3e:a9:a7:75:17:35:9c:a3:c5:b2:b2:8b:5b:0e:2f:
                    27:33:49:58:2b:4c:a8:a6:9b:5e:41:05:05:ae:84:
                    e3:cc:f5:eb:d3:8e:68:bc:de:4d:0c:25:8c:e0:dc:
                    4e:f4:49:09:71:c5:71:6a:8d:da:91:33:74:28:ea:
                    ad:11:a3:6e:b8:a2:20:99:b8:d4:7d:3d:fe:1b:da:
                    a1:ec:3f:0f:c7:74:20:70:6f:73:23:b7:3c:90:f9:
                    f6:56:e1:ed:b8:be:3f:b4:33:2e:bb:0c:8e:c9:d0:
                    d4:85:fc:ee:0a:d9:1b:c9:1d:3a:e2:a2:50:b6:15:
                    e2:23:20:14:3a:3d:f9:d9:b8:7f:8b:96:25:36:f7:
                    e7:29:3c:ed:3a:08:79:7d:45:6a:b1:fb:f0:03:0c:
                    cb:eb:41:aa:9b:97:42:47:af:90:4f:5c:d3:6d:92:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:F2:E6:EC:30:90:05:80:94:4A:70:BB:A5:72:FD:E7:92:3C:B8
            X509v3 Authority Key Identifier:
                keyid:91:3A:79:48:5A:E6:D4:CB:5B:97:AF:8B:AA:52:B5:96:56:A2:22:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kTp5SFrm1Mtbl6-LqlK1llaiIko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kTp5SFrm1Mtbl6-LqlK1llaiIko.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Kw_y5uwwkAWAlEpwu6Vy_eeSPLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:98:39:83:18:a2:64:0b:b6:9e:7f:8b:bc:87:07:63:5f:8d:
         4d:4e:18:88:d0:1c:2b:6f:03:24:08:68:44:24:23:b1:4b:50:
         57:5b:31:c8:a2:2d:ba:4e:68:05:2a:7d:3d:06:2f:d9:1b:29:
         51:2e:46:44:c0:9d:02:df:ee:b0:76:da:c5:46:1f:9a:e8:a3:
         f1:79:06:92:bf:9d:2d:ce:69:c4:32:0b:af:04:df:80:f6:3d:
         09:54:bd:cc:c6:b9:f4:e4:f8:3f:0d:af:fb:50:ca:4f:19:1b:
         c7:9a:07:5d:e0:1f:40:0c:ee:90:13:1c:e7:33:37:0e:23:fc:
         2b:d3:f8:75:71:74:9e:5c:15:61:92:ec:8f:58:7d:f5:e5:a7:
         57:20:7d:2d:56:01:43:e9:ad:bc:e8:e4:b3:7f:0d:c1:ad:ad:
         00:1e:17:5d:f2:ae:1a:e1:a1:ea:d7:73:01:8e:1e:28:2b:98:
         a9:62:95:c7:c2:0f:6e:56:95:08:d7:be:2a:d2:b6:aa:e3:4a:
         d1:db:e6:56:37:e7:0f:77:2d:41:43:a6:86:b9:16:91:3e:9d:
         a0:8c:f2:92:9f:b6:18:40:ca:c8:28:3e:4b:d2:ee:b1:af:26:
         f2:9d:60:44:7e:9c:6d:ea:1a:56:8e:93:b3:9a:20:ed:ca:a9:
         ba:c7:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org