Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/id3vBigveyU345XOVJA6XyS81us.roa
File:                     id3vBigveyU345XOVJA6XyS81us.roa (raw, json)
Hash identifier:          xzzYapnUewZhERqGGSVFDFXeGRl2LSL36svXhxtuQHM=
Subject key identifier:   89:DD:EF:06:28:2F:7B:25:37:E3:95:CE:54:90:3A:5F:24:BC:D6:EB
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       25
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/id3vBigveyU345XOVJA6XyS81us.roa
Signing time:             Wed 11 May 2022 01:44:22 +0000
ROA not before:           Wed 11 May 2022 01:44:22 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        202.165.48.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:44:22 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=89DDEF06282F7B2537E395CE54903A5F24BCD6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:98:6c:cf:3a:cd:86:78:96:a3:2c:f4:00:
                    3b:9d:ed:ff:c3:cb:41:b9:12:35:0c:75:2b:68:b0:
                    68:3b:fd:cc:5f:59:86:4c:44:e8:e4:b9:14:e8:73:
                    59:43:83:66:cc:3b:cb:79:be:75:c3:ad:48:a6:3d:
                    2f:28:3c:10:7f:5b:08:e0:98:b9:51:1f:67:65:0e:
                    43:bf:25:55:b8:d2:6e:8b:03:79:89:79:9b:02:8f:
                    4e:a1:5d:f1:d2:07:8e:c4:25:fe:ec:20:37:35:f2:
                    92:22:f9:15:44:df:93:6a:75:81:06:7c:24:fd:d2:
                    3c:cf:b7:1b:4a:ee:03:d9:ed:e9:f3:66:fb:c5:80:
                    13:5d:97:10:2e:b4:74:b7:97:52:70:64:b6:db:2e:
                    12:8a:52:ef:f0:83:81:78:1e:29:51:57:88:ff:fe:
                    ab:23:44:8a:c7:4d:2f:51:21:95:41:96:1d:f7:fe:
                    1e:d9:d3:8a:79:23:b9:4f:1d:3f:2f:99:f7:ca:e8:
                    8e:a7:6e:67:71:77:dc:e6:c2:e7:a9:d1:d3:0f:1c:
                    44:f9:ee:4e:4e:a5:72:00:e2:c9:04:29:5e:e7:f7:
                    f6:4a:4d:b7:6d:10:d7:75:fd:34:5a:10:61:24:fb:
                    76:c0:07:72:9e:88:ac:20:8e:98:ee:80:81:68:1c:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:EF:06:28:2F:7B:25:37:E3:95:CE:54:90:3A:5F:24:BC:D6:EB
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/id3vBigveyU345XOVJA6XyS81us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:c1:72:7d:d8:7f:e9:c9:e1:ea:d0:cc:74:18:c8:5f:da:
         9b:b4:8a:63:15:d5:d4:4c:71:1d:45:03:37:22:ef:c0:02:e4:
         28:e4:b6:18:3a:6d:8e:2e:c8:e3:b6:0a:c7:86:59:af:b3:ea:
         e1:bc:6e:8e:68:b0:4c:66:78:a7:90:f4:83:e3:d6:db:b9:a6:
         4d:85:15:52:2f:da:87:1c:23:14:30:d1:54:20:24:14:17:3a:
         8e:fd:e0:ad:6b:94:ec:86:78:82:55:c3:a7:0f:98:24:27:2b:
         48:ea:ad:62:07:fc:d5:25:b5:a5:59:5a:0c:79:a4:c9:35:b3:
         40:0d:7a:9f:c3:6c:9b:8f:3a:b7:43:db:4c:3f:bb:0c:01:0b:
         a0:f8:c4:ad:d6:a5:2b:ec:0d:da:43:cc:12:77:e1:b4:62:0e:
         fe:1b:9d:9e:91:92:4e:ba:50:44:67:a4:af:0d:3c:43:44:1c:
         98:01:45:38:84:c2:1a:c9:98:4a:ff:5b:ff:c5:69:f5:f9:a8:
         03:a1:a1:6a:09:cf:c8:31:f9:d5:d8:42:75:91:e8:72:b0:6b:
         d6:4b:78:57:a3:41:f0:3f:f4:3e:eb:8d:9c:31:af:85:22:b5:
         d1:2b:1a:c7:7f:d0:94:28:66:56:6b:18:7c:81:31:5a:32:8f:
         e9:63:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org