Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/celFr_3p1-EuAmnv1sdGBc8wYsg.roa
File:                     celFr_3p1-EuAmnv1sdGBc8wYsg.roa (raw, json)
Hash identifier:          d9FR8VkJAppoSRS7zJ0donU9p6A/DSWc8Vj/4JM/4qE=
Subject key identifier:   71:E9:45:AF:FD:E9:D7:E1:2E:02:69:EF:D6:C7:46:05:CF:30:62:C8
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       21
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/celFr_3p1-EuAmnv1sdGBc8wYsg.roa
Signing time:             Wed 11 May 2022 01:40:33 +0000
ROA not before:           Wed 11 May 2022 01:40:33 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        101.55.232.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:40:33 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=71E945AFFDE9D7E12E0269EFD6C74605CF3062C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:d8:dd:67:72:39:e3:9e:e1:d0:64:33:63:
                    7a:c3:5b:ba:25:c8:bd:c8:48:94:c9:30:3a:5c:b8:
                    9f:d5:2e:00:c9:63:f2:76:ca:46:55:33:39:7f:58:
                    33:5b:96:f7:2d:50:08:51:ed:a1:1a:81:f0:39:7a:
                    b2:70:0b:0c:da:6f:89:10:de:7d:4b:1c:e6:2e:3d:
                    9c:a7:3e:58:2c:0b:0d:3d:05:f4:e7:9a:d9:85:73:
                    b7:8e:de:8b:ea:f9:ab:43:16:5e:72:7c:87:3e:24:
                    b8:e3:97:4c:65:4d:32:b5:ff:b5:64:07:53:e7:0b:
                    cf:c4:e3:95:c0:8e:a0:da:42:3e:49:c7:b8:1a:a7:
                    13:ec:94:63:c4:20:95:8a:55:96:3b:20:5f:97:cf:
                    4e:df:4b:5c:77:1c:cd:33:c0:e8:75:24:4b:4c:18:
                    fc:2d:e2:73:34:c4:1c:de:02:f9:e9:10:3c:1d:de:
                    c5:1d:4a:76:8e:5d:c6:bb:dd:48:30:e3:b4:64:26:
                    22:81:d9:2a:43:21:0f:16:7d:e2:c7:58:ca:13:6f:
                    c4:d7:12:b0:20:c1:99:1c:7d:a0:65:ca:ad:cc:b2:
                    ab:d1:d7:dd:7f:0a:f1:23:6b:f9:f3:3f:05:d3:e5:
                    df:19:01:d2:ad:e3:29:75:31:3c:4a:49:0e:13:b8:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E9:45:AF:FD:E9:D7:E1:2E:02:69:EF:D6:C7:46:05:CF:30:62:C8
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/celFr_3p1-EuAmnv1sdGBc8wYsg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:64:7e:dc:98:52:b7:5f:9e:6b:2c:a3:c5:63:02:ca:1a:
         4c:4e:b1:24:e0:9e:1e:50:db:70:a5:22:c8:bc:a8:87:14:39:
         92:d1:12:ec:b5:a0:5c:92:b9:fe:7b:cf:5a:2a:a3:72:51:78:
         1b:c1:9d:40:4f:81:ae:8a:31:64:af:8c:9d:a6:dc:31:ec:f0:
         99:1a:81:3e:8b:ad:83:10:60:d0:65:fe:59:6a:87:b3:fc:c1:
         91:00:82:d4:36:d1:08:26:46:e9:4d:a5:44:93:9f:70:9e:c5:
         1d:8c:8b:27:97:9b:54:ad:24:42:18:68:5e:65:10:51:02:8f:
         1c:f6:63:bb:40:8d:56:a1:22:b4:ca:d4:49:30:d3:09:a7:0c:
         28:b6:c9:b9:6a:fb:82:41:0e:96:c8:ef:a8:2c:86:ed:7f:1a:
         fd:ea:12:05:60:8b:df:8a:d8:c4:b9:67:b8:47:70:a8:24:ca:
         4b:4d:43:f1:b4:ed:f2:94:6e:e0:30:53:1f:c2:4d:7a:c1:08:
         75:57:99:6d:1f:17:bd:4a:c7:8f:6c:12:40:eb:0c:a9:96:ff:
         68:23:ae:ba:70:1e:9f:03:d1:da:c4:40:c6:53:56:f5:5d:45:
         d2:7c:a8:e3:ce:f7:67:66:02:51:3f:db:a7:a7:10:00:0a:93:
         60:0b:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org