Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/sgyCJcbKxfPnYiufSwdPRRoNDkA.roa
File:                     sgyCJcbKxfPnYiufSwdPRRoNDkA.roa (raw, json)
Hash identifier:          FuAnoLA9lbzku6AemtcUOD+XOwyoFoVjpsyfidlrqk4=
Subject key identifier:   B2:0C:82:25:C6:CA:C5:F3:E7:62:2B:9F:4B:07:4F:45:1A:0D:0E:40
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       44
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/sgyCJcbKxfPnYiufSwdPRRoNDkA.roa
Signing time:             Thu 13 Apr 2023 09:54:04 +0000
ROA not before:           Thu 13 Apr 2023 09:54:04 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        210.87.224.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:04 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B20C8225C6CAC5F3E7622B9F4B074F451A0D0E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:0a:c5:4f:04:3c:aa:3a:21:87:5e:17:f0:
                    07:58:10:16:ab:b4:b6:20:0b:a3:9f:2b:15:1d:4b:
                    8b:bb:b5:0d:0f:eb:7a:89:b1:52:87:58:72:b6:8c:
                    32:cb:74:b5:ed:07:2c:fc:4c:e5:8d:78:d4:34:d5:
                    96:2c:fb:01:45:40:eb:57:a7:3f:af:81:aa:c6:78:
                    29:c8:b6:01:98:7c:c7:75:1d:24:bf:cd:49:e2:7c:
                    8f:7b:36:45:fe:85:53:4b:4e:a7:eb:35:ab:29:19:
                    42:e2:89:a3:eb:54:9c:de:ee:9b:dc:b5:e6:38:20:
                    df:39:33:0d:27:b2:7f:c0:9c:24:0b:1f:78:81:6f:
                    0d:74:ca:0e:fc:7c:9c:d3:c0:65:8e:82:c4:aa:5b:
                    d4:64:89:35:84:aa:4b:b0:49:7f:75:97:f0:6f:78:
                    31:c5:5a:6e:56:8a:13:35:4a:1b:29:36:f3:5c:fc:
                    df:db:dc:63:98:63:de:49:19:ac:f7:34:55:53:50:
                    35:4d:7d:76:ef:07:17:a1:1b:8f:61:44:36:bc:71:
                    cb:64:57:83:f8:45:23:ac:32:c1:69:b1:21:d3:6a:
                    ae:10:69:ea:89:74:ae:4a:47:db:e9:d4:27:db:9e:
                    87:be:6e:e4:d1:f4:98:a8:54:5b:60:a1:bd:44:24:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0C:82:25:C6:CA:C5:F3:E7:62:2B:9F:4B:07:4F:45:1A:0D:0E:40
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/sgyCJcbKxfPnYiufSwdPRRoNDkA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:14:af:91:13:9d:57:75:c0:01:ef:00:d7:52:7d:4a:8b:58:
         c7:5b:02:65:68:1c:0b:f7:57:2b:a7:e2:da:e4:b3:12:39:e4:
         06:25:0d:9a:5d:bf:91:a9:36:2a:f4:2d:eb:b6:42:45:a9:81:
         88:45:c6:8c:c8:9a:de:77:8f:b9:77:08:be:6d:84:58:56:8a:
         19:46:70:b8:84:92:5a:83:a3:df:55:74:64:cf:b6:43:fa:7a:
         4f:e2:38:5f:01:68:84:75:e7:86:1a:3b:02:31:0b:f4:25:5e:
         4a:0b:21:49:e8:49:e4:b7:d5:8f:ad:92:fa:40:e7:7f:21:d9:
         9f:76:1d:aa:3a:e5:de:fe:5d:9d:e2:18:09:17:ab:ff:b8:32:
         e5:7c:97:7a:bd:28:a6:83:40:54:7a:0c:26:40:6d:ac:3d:f6:
         c0:8e:23:c9:db:0f:7c:fd:90:5c:a8:2a:49:5d:16:49:0c:27:
         62:98:26:30:ae:4a:4b:6a:c3:70:ee:77:17:0f:00:66:ee:96:
         0b:51:36:7d:69:b0:29:a5:5b:da:fa:5d:65:0a:98:9d:ff:4a:
         29:21:38:a4:d8:43:ff:ee:5c:fa:1c:89:97:ae:41:92:af:35:
         e9:46:38:da:d1:7c:44:12:97:34:98:13:01:1f:d5:dd:73:04:
         d7:49:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org