Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/90WDVM8UOdneGstCvW4uy92-Tnw.roa
File:                     90WDVM8UOdneGstCvW4uy92-Tnw.roa (raw, json)
Hash identifier:          NtfMev24y/zaZI8EhfHdXwkddeLOK1oqmhknrr+6mKA=
Subject key identifier:   F7:45:83:54:CF:14:39:D9:DE:1A:CB:42:BD:6E:2E:CB:DD:BE:4E:7C
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       05
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/90WDVM8UOdneGstCvW4uy92-Tnw.roa
Signing time:             Thu 27 Apr 2023 04:19:06 +0000
ROA not before:           Thu 27 Apr 2023 04:19:06 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     59127
IP address blocks:        223.223.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Apr 27 04:19:06 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F7458354CF1439D9DE1ACB42BD6E2ECBDDBE4E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:96:0e:4e:eb:28:a6:89:4a:4a:c6:be:52:
                    34:a6:b4:0f:54:56:77:66:5a:29:7f:fa:29:57:1e:
                    f4:dc:da:b1:f0:df:6f:ce:7a:0d:9b:58:94:1b:fb:
                    1c:92:87:cc:17:c0:fd:46:bf:34:2e:fe:34:83:0f:
                    1b:0b:79:64:4a:f0:ee:2f:5e:4c:c8:55:29:ba:cc:
                    20:b1:db:0a:29:1f:f7:11:1a:1d:c0:51:1a:73:2c:
                    84:37:48:d1:50:99:60:6a:ba:0e:05:18:76:44:c6:
                    1c:0f:1f:00:ac:24:2c:13:19:23:7e:13:27:ca:9c:
                    1f:62:c3:d5:35:f8:75:c0:91:d3:d4:b6:f6:b0:41:
                    a5:7c:f5:3a:be:98:c9:c2:20:ab:23:41:eb:e1:ae:
                    67:d6:7e:fc:e9:b0:69:58:7d:66:cb:3c:e7:b3:41:
                    80:1e:c4:da:23:5e:4f:6c:5f:2e:c3:6c:79:e3:fa:
                    bb:d1:71:26:5f:60:53:1c:91:a5:7c:33:7f:9b:5c:
                    12:15:7d:c7:2c:04:75:e0:fb:13:8a:df:53:d6:ed:
                    d3:3d:7b:51:19:6d:6c:fc:a3:73:2a:ca:d8:b3:c7:
                    04:8d:fe:82:81:43:f5:f1:cd:c7:5f:4e:bd:3d:b6:
                    c0:c2:ad:5b:be:6f:e3:81:3c:15:b3:fa:a1:9d:c8:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:83:54:CF:14:39:D9:DE:1A:CB:42:BD:6E:2E:CB:DD:BE:4E:7C
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/90WDVM8UOdneGstCvW4uy92-Tnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:4f:11:ef:3e:c5:79:6c:6a:d8:b6:94:74:61:f6:f7:4e:
         41:45:44:18:c9:45:56:f8:db:a1:19:fd:75:e7:01:e9:41:00:
         98:3b:b8:3d:90:0d:22:87:07:b4:c0:81:6d:ee:de:86:bc:1d:
         5e:09:80:ef:30:dc:e6:9d:b8:36:10:6a:19:1d:bf:99:8e:44:
         e0:14:e0:04:72:84:4a:3e:b9:43:2d:b0:98:ff:ec:c2:11:d6:
         e4:9c:d9:b7:bd:a8:ca:3b:36:9a:93:57:d4:db:3e:1c:87:03:
         e1:48:dc:cd:76:74:3d:dd:25:8b:f4:c2:44:41:61:e0:bf:f5:
         21:22:03:5a:84:a0:4a:a4:75:01:2f:30:22:d5:3a:21:af:3a:
         48:04:c1:ce:42:77:0b:dd:4a:2a:a4:63:14:25:63:24:1f:4a:
         38:fc:0b:e1:53:9b:8e:1b:21:6a:78:21:8a:c4:bc:75:72:0a:
         f6:21:b5:b7:b3:6d:18:3d:93:7a:01:5e:cc:de:29:fb:7a:e5:
         c7:f2:01:d9:47:55:3b:f4:2a:4a:2b:48:c7:ee:e8:2b:d2:e3:
         58:78:11:f9:c8:d2:01:a5:87:7a:b6:e3:76:3a:3f:3b:c5:a0:
         22:77:7b:54:f6:d4:51:dc:f0:64:3d:17:7d:18:80:eb:a1:d6:
         f2:1f:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org