Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/KhwKiT-XTNVYnanhZUvbDHEDqQo.roa
File:                     KhwKiT-XTNVYnanhZUvbDHEDqQo.roa (raw, json)
Hash identifier:          jDWRmzXXbl2M9OeH0bG9VNUBChL2saZVcqiYf4xdAww=
Subject key identifier:   2A:1C:0A:89:3F:97:4C:D5:58:9D:A9:E1:65:4B:DB:0C:71:03:A9:0A
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       07
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/KhwKiT-XTNVYnanhZUvbDHEDqQo.roa
Signing time:             Thu 27 Apr 2023 08:55:29 +0000
ROA not before:           Thu 27 Apr 2023 08:55:29 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Apr 27 08:55:29 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=2A1C0A893F974CD5589DA9E1654BDB0C7103A90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:8a:6e:75:27:61:66:85:6a:de:24:fe:b0:
                    23:4b:ef:1a:40:e0:3f:7c:0e:c6:49:1a:a2:2d:47:
                    54:e1:9c:af:51:63:b0:21:47:b2:d1:5b:3d:a7:53:
                    77:1a:13:21:7c:96:36:74:b1:c9:6e:1a:e5:5e:c6:
                    86:1c:84:34:04:07:9b:bf:86:6c:ae:dc:c5:f0:ce:
                    af:52:67:8a:b7:0b:b0:e1:97:28:2e:d8:44:6a:c0:
                    b5:76:87:ea:22:91:77:f5:f4:73:59:5f:14:a8:c6:
                    49:35:31:f1:31:2e:dc:93:4c:cf:69:88:3e:a0:ac:
                    12:d5:92:8b:40:59:98:85:7f:e9:73:13:c0:95:55:
                    c9:3c:6e:e2:06:3c:3c:2f:a8:9c:b8:8f:7a:a4:85:
                    c3:f4:e0:12:ba:0c:72:e8:58:06:04:85:05:b5:e2:
                    28:f3:c6:a3:d1:e2:79:32:1a:85:5d:a2:23:ec:2c:
                    0f:65:83:7e:2a:c9:2c:f4:48:e0:17:e5:13:e7:b8:
                    c4:8b:35:59:c3:00:07:88:b6:e8:67:74:a6:02:17:
                    2b:20:29:2b:11:0e:61:0f:aa:ac:ce:54:92:1d:63:
                    2f:ab:e4:61:f2:9b:17:81:a7:ab:ec:49:e5:b4:6d:
                    f6:20:3f:2c:8b:7b:2b:a1:b4:a1:3c:0b:c0:59:15:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1C:0A:89:3F:97:4C:D5:58:9D:A9:E1:65:4B:DB:0C:71:03:A9:0A
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/KhwKiT-XTNVYnanhZUvbDHEDqQo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:88:de:21:fc:c4:ef:26:fa:fb:6f:cf:6f:02:17:72:f3:
         b9:b5:db:92:73:bf:e2:cc:ed:91:de:1c:38:b4:1a:71:6d:15:
         a1:37:a8:84:2a:ce:ed:1d:9f:71:b8:4b:10:83:97:b2:cb:f3:
         87:16:1f:00:5e:ab:a3:77:9f:ee:9b:9a:0e:7d:ff:60:0c:ce:
         70:a8:29:69:b4:96:ea:97:2a:a2:0f:66:0d:08:7b:d8:7b:00:
         a6:d9:4d:95:71:39:fe:37:fd:1d:88:c2:df:ed:a0:fe:dd:d4:
         56:88:cc:d8:1b:3d:38:0e:9d:48:55:c8:3e:37:f2:6a:49:0f:
         a0:7d:65:39:5e:e3:26:69:5c:cb:26:9f:fd:44:fe:44:35:f2:
         0d:92:42:3d:d0:cd:42:4c:a9:79:b2:59:cb:7a:df:2c:8d:d6:
         a1:6b:2d:b6:d1:70:be:84:d0:04:b7:8c:bf:76:75:16:05:9e:
         8f:7d:4e:9c:53:de:a0:74:68:31:70:9c:f9:a4:8c:ed:ae:3d:
         f6:65:3a:0f:ef:73:c5:36:50:19:e0:48:03:17:2b:39:6a:f9:
         30:34:ae:79:3e:c2:a9:50:97:de:43:bb:53:33:20:d1:8f:38:
         df:6e:b5:59:b1:20:9c:fb:b2:d9:c8:46:d4:1b:40:8e:83:e8:
         08:5b:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org