Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/zSok7DJuvMUsljeyJ1st9GS4JC8.roa
File:                     zSok7DJuvMUsljeyJ1st9GS4JC8.roa (raw, json)
Hash identifier:          nbRrL18HKA8obpEFC2xMUTAb8t/NUgWmsQ+tBMb3o7c=
Subject key identifier:   CD:2A:24:EC:32:6E:BC:C5:2C:96:37:B2:27:5B:2D:F4:64:B8:24:2F
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       30
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/zSok7DJuvMUsljeyJ1st9GS4JC8.roa
Signing time:             Mon 01 May 2023 01:29:29 +0000
ROA not before:           Mon 01 May 2023 01:29:29 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     23778
IP address blocks:        219.100.96.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: May  1 01:29:29 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=CD2A24EC326EBCC52C9637B2275B2DF464B8242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:c7:38:7e:73:87:f0:46:45:e6:45:2c:2a:
                    37:28:c4:42:5b:e4:ae:91:2a:e5:a2:b0:8b:cd:d0:
                    a7:2a:ec:f4:32:3e:db:64:20:d0:91:6c:3e:e8:2b:
                    89:ba:78:27:aa:cd:6c:be:97:66:a8:f0:c7:a2:5d:
                    6a:3c:b3:e3:55:17:36:7f:9c:97:29:20:bb:13:12:
                    ba:e0:bc:c2:97:85:78:8f:6b:f8:71:f3:96:3a:f3:
                    05:26:63:0e:9f:01:0e:b9:c1:be:a4:25:12:fb:64:
                    c7:93:34:9f:36:00:fe:17:b7:33:ad:4d:ed:3a:05:
                    d2:d3:11:5e:83:30:05:67:4e:0f:a1:c4:40:cc:c1:
                    11:3f:50:96:7b:89:b9:77:d4:5d:0c:c1:06:7c:d5:
                    2f:6d:0c:74:da:32:26:65:4a:63:e9:4d:2f:61:d5:
                    25:f3:a9:5c:68:84:e7:d1:94:02:99:91:24:cb:4d:
                    9e:82:c4:68:9c:c5:b0:fe:ee:b7:97:14:d3:17:2c:
                    0b:aa:5f:1b:49:31:45:97:4a:3d:ab:46:dc:d3:62:
                    92:83:76:58:74:46:2f:00:c6:75:3f:14:4d:71:5d:
                    53:ab:6e:37:70:df:3f:fe:88:e5:d1:b1:75:32:17:
                    cf:4d:fc:5b:2e:81:0b:3b:49:e9:19:31:44:03:6e:
                    ab:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:24:EC:32:6E:BC:C5:2C:96:37:B2:27:5B:2D:F4:64:B8:24:2F
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/zSok7DJuvMUsljeyJ1st9GS4JC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:c2:fb:98:74:a7:ea:35:68:86:3f:47:82:97:06:58:03:
         aa:25:6b:dd:05:6f:a6:36:ef:05:dd:37:85:78:95:52:7f:d3:
         06:ae:65:0f:cf:ec:3b:07:77:e1:30:2d:65:3e:ac:5c:67:ec:
         50:51:c1:2a:0f:90:84:98:34:4d:1e:9f:92:43:f3:28:78:4a:
         c1:3e:fb:91:c1:7d:cb:1a:3e:e3:ea:cf:43:7f:24:37:30:a6:
         a4:7a:98:ef:4b:b3:be:9a:4d:c0:45:0b:5d:6b:40:cd:b7:cd:
         95:ae:3c:3c:c7:4a:f7:ee:e3:38:c9:de:aa:55:f9:fb:59:bb:
         c0:c6:9b:dd:6a:56:1a:26:72:da:19:f0:4c:f9:7c:7c:40:6a:
         e2:41:7b:93:e7:ac:69:fd:f2:44:68:cb:d2:3f:aa:95:db:63:
         85:ab:b0:0d:5f:d7:d5:2c:ff:15:94:54:6d:e8:5a:82:88:d3:
         15:c4:03:cb:d5:09:06:8f:89:95:bd:a6:34:17:d7:1b:56:33:
         6e:33:a3:9a:5d:96:7f:ae:12:a1:fa:50:0a:8f:53:8e:1b:a2:
         34:6a:cd:ed:83:f6:e4:99:c2:77:d1:24:52:ee:eb:22:9f:85:
         05:aa:71:6d:d2:23:0b:06:de:3c:3e:29:15:44:b5:39:ee:b7:
         ca:41:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org