Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/MDRKikUR2uOiQJHqskKX_WrVOHc.roa
File:                     MDRKikUR2uOiQJHqskKX_WrVOHc.roa (raw, json)
Hash identifier:          m3RtaJY5oM6I0DPz4JHL2n1rNipWW6eun8JMccMwbrk=
Subject key identifier:   30:34:4A:8A:45:11:DA:E3:A2:40:91:EA:B2:42:97:FD:6A:D5:38:77
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       0C
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/MDRKikUR2uOiQJHqskKX_WrVOHc.roa
Signing time:             Tue 31 May 2022 01:42:45 +0000
ROA not before:           Tue 31 May 2022 01:42:45 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24271
IP address blocks:        202.177.96.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: May 31 01:42:45 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=30344A8A4511DAE3A24091EAB24297FD6AD53877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:d8:3c:d8:88:5f:91:09:43:04:45:44:f5:
                    5c:f8:c0:79:0a:00:f3:59:ab:33:7e:b5:3a:46:8b:
                    79:21:60:44:ae:03:7c:03:41:a4:9d:06:08:5b:76:
                    c4:28:83:75:9d:43:07:ef:1e:8c:94:9d:62:0f:c7:
                    db:6f:6d:e2:7e:ca:25:93:d1:58:c4:7e:70:95:47:
                    42:d9:2c:38:09:71:23:bc:39:d3:71:60:56:b2:86:
                    21:85:67:5d:3f:f2:39:1e:bd:a0:59:c0:df:39:93:
                    b1:21:b7:df:2d:e7:c2:19:34:5d:6c:dc:92:b8:0f:
                    bf:b0:d0:70:32:c3:fa:7e:1f:eb:25:94:85:ab:c9:
                    63:c6:13:d6:cc:25:d4:d1:d8:cf:a2:2a:84:43:73:
                    ca:6e:e7:7e:6c:33:77:4a:a8:01:9d:87:83:49:56:
                    17:4a:57:42:29:74:ef:b3:7e:3f:28:dc:e8:92:0b:
                    b2:e4:9a:36:9f:b4:1f:b8:42:f4:d3:4e:e3:aa:26:
                    76:a4:ef:52:cd:ac:13:1a:0d:cc:88:fa:1f:de:61:
                    26:b8:28:86:50:ca:cf:12:b7:e7:85:fd:2e:b3:58:
                    05:e3:87:c2:09:9f:18:7f:68:a4:c7:18:70:ff:81:
                    05:66:4c:e5:9b:88:32:10:ec:19:7f:f3:c0:e0:8a:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:4A:8A:45:11:DA:E3:A2:40:91:EA:B2:42:97:FD:6A:D5:38:77
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/MDRKikUR2uOiQJHqskKX_WrVOHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:da:20:83:b9:a9:8f:89:6c:1e:5d:5a:b2:19:c4:fa:de:95:
         87:b8:5a:38:cf:d9:50:f9:ea:ee:f3:04:89:5e:04:9e:c1:a3:
         56:cd:70:0b:fc:10:91:16:59:54:f1:eb:f6:b4:2c:6d:b8:40:
         16:94:f0:34:54:28:0d:7a:32:59:a3:41:a3:e2:cd:1f:51:17:
         0e:a7:a0:c3:6d:9c:0f:20:4e:3f:df:9d:c2:b5:36:b9:5d:89:
         bc:93:1c:f8:f6:fd:7f:c4:38:3d:96:a6:00:f5:b3:93:18:81:
         73:59:93:5a:39:cc:f9:bd:92:0f:b8:2b:3b:fb:d6:71:e3:13:
         50:12:5f:b9:74:13:b4:c4:4a:4f:e8:61:e9:64:f8:8d:96:83:
         15:c2:85:d0:e7:56:70:6d:5a:7b:1d:04:fc:1a:21:ff:d7:e9:
         d7:dd:f5:8f:f6:53:6c:77:d7:c3:d3:61:2b:90:a3:da:9e:80:
         1e:2e:02:2f:7b:43:00:d4:83:a5:13:e7:16:fa:99:e2:47:cc:
         3d:1a:9f:37:1c:0e:00:ac:8f:e4:76:51:21:6f:50:62:26:b3:
         34:9c:cc:58:fa:71:35:37:f2:cd:30:b5:11:bc:d3:0a:4d:53:
         93:50:d3:f0:a7:fe:a2:60:cd:c7:5b:12:2b:5f:9a:f2:4d:21:
         19:02:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org