Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/tpIZVBMjsDIBfS5Cx7O3DukjYH8.roa
File:                     tpIZVBMjsDIBfS5Cx7O3DukjYH8.roa (raw, json)
Hash identifier:          GmI8XG4vwHAma/EdOBYzSpq/K6MqxkhcynjR/gusHKo=
Subject key identifier:   B6:92:19:54:13:23:B0:32:01:7D:2E:42:C7:B3:B7:0E:E9:23:60:7F
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       18
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/tpIZVBMjsDIBfS5Cx7O3DukjYH8.roa
Signing time:             Wed 15 Mar 2023 00:13:49 +0000
ROA not before:           Wed 15 Mar 2023 00:13:49 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     55385
IP address blocks:        103.2.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 15 00:13:49 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B69219541323B032017D2E42C7B3B70EE923607F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:f1:8a:b8:10:f8:18:20:cf:74:94:3c:79:
                    2c:2b:f9:18:9c:de:68:20:c9:0f:b1:f2:63:68:89:
                    15:7f:50:e1:82:f8:50:3a:59:2c:2e:f1:d6:26:30:
                    cf:5c:de:e5:7c:60:dd:f9:50:b7:42:12:c8:50:c4:
                    59:83:8a:09:a8:69:ab:c3:4a:e0:3b:3d:ce:3d:6c:
                    00:d3:79:87:e7:3c:fc:42:4a:09:79:5c:e3:7e:ef:
                    28:2c:af:ed:6a:6b:ea:c9:9a:61:ac:2e:c7:c6:58:
                    94:6e:45:91:f3:24:c8:2a:09:e4:9a:11:39:68:a7:
                    01:e4:63:4b:00:da:c5:f2:4c:e7:62:d5:93:7f:74:
                    e3:b4:80:d4:ba:86:33:4f:b9:78:5a:1f:7f:6a:b6:
                    18:c5:0d:4f:df:7a:54:b1:60:22:03:3c:4d:d2:d3:
                    da:f3:02:96:d9:e5:3a:9f:d6:1a:1e:2d:2c:d8:86:
                    a2:37:ee:52:9f:c1:ee:73:f1:a9:ee:ff:e3:fc:70:
                    6f:fb:75:a3:ad:67:18:03:02:b1:6c:ef:96:57:e9:
                    da:51:65:af:7f:f8:2e:96:dd:9b:d6:f8:18:b1:95:
                    ec:90:29:0a:77:dc:81:46:d6:0c:ed:40:f0:5f:2c:
                    d5:d8:1a:0a:7f:ad:08:5a:14:c0:78:4a:77:75:42:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:19:54:13:23:B0:32:01:7D:2E:42:C7:B3:B7:0E:E9:23:60:7F
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/tpIZVBMjsDIBfS5Cx7O3DukjYH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:c2:93:20:8a:0e:0e:19:91:5b:f8:00:b4:6b:1a:d4:08:d7:
         73:36:dc:1a:8d:51:44:97:ed:8b:f0:89:68:5a:47:38:32:b7:
         7c:6e:0f:40:e8:14:a8:23:32:84:8f:a0:5f:a1:11:d2:4f:b4:
         46:e4:f1:ae:e8:76:82:07:57:ab:8c:88:84:cd:1a:5a:49:ce:
         c8:4d:a9:d9:a2:22:e2:72:8e:67:4a:2b:36:1e:cc:0d:b9:5f:
         95:e9:25:14:8e:bb:6e:bf:27:f6:57:f2:69:28:ab:af:fc:1c:
         3e:a8:de:85:89:15:89:6d:4b:13:20:23:25:5a:36:17:10:79:
         0c:c3:ce:91:75:53:26:8f:30:e6:60:04:b6:60:84:4e:bd:75:
         5d:c9:1e:9a:46:f7:3c:e4:3c:3c:98:31:9b:97:8a:99:ec:42:
         e5:0b:0b:4b:db:78:6b:e7:21:db:4a:ab:76:60:85:2f:b2:6f:
         81:c2:61:8b:85:9a:3e:ac:dd:f7:93:0b:80:f0:18:db:1a:00:
         7f:9b:49:93:f3:ec:7b:cb:0e:0a:80:41:c5:4a:80:60:e2:e1:
         32:80:05:82:e6:e4:14:c5:37:7e:ed:78:42:69:b2:c7:86:ab:
         bf:f1:1f:45:56:5e:da:9d:a7:7d:5d:dc:ac:18:19:4f:53:99:
         ad:56:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org