Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/NyA0iNciz7rZXgqzxZdJ_5SKAWA.roa
File:                     NyA0iNciz7rZXgqzxZdJ_5SKAWA.roa (raw, json)
Hash identifier:          laF8Ghyw5QBjhyS9Cm8ZuonBcpScKbt15RIiJEtq4KU=
Subject key identifier:   37:20:34:88:D7:22:CF:BA:D9:5E:0A:B3:C5:97:49:FF:94:8A:01:60
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       08
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/NyA0iNciz7rZXgqzxZdJ_5SKAWA.roa
Signing time:             Mon 08 May 2023 08:19:24 +0000
ROA not before:           Mon 08 May 2023 08:19:24 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     59127
IP address blocks:        113.213.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: May  8 08:19:24 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=37203488D722CFBAD95E0AB3C59749FF948A0160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:e3:b5:43:62:1f:aa:ca:31:33:78:eb:db:
                    55:ad:5c:a0:88:cf:c3:0a:2d:76:60:77:80:fc:42:
                    6b:06:51:e3:0c:14:70:17:36:c2:9a:fe:93:ff:c4:
                    b0:95:47:64:41:05:68:47:5d:09:7c:b0:67:38:f0:
                    ca:2a:7b:e9:01:04:1e:9b:b3:24:b3:ac:b5:77:02:
                    82:1d:d6:d2:18:ae:da:dd:b3:0c:87:59:95:30:86:
                    a3:04:4c:bb:6b:25:b6:bb:70:be:24:3b:db:c9:a3:
                    63:d8:ce:c0:32:34:6a:12:19:d8:ef:55:89:f5:76:
                    2e:58:aa:71:9d:29:9d:c9:96:ae:a5:25:98:9d:a5:
                    04:62:c5:44:f4:5d:5b:30:2d:ad:22:2a:27:6e:ce:
                    89:cd:35:e5:79:6c:86:35:24:5b:1a:30:ed:a6:7c:
                    79:1b:38:98:76:95:73:bc:bc:8f:b0:dd:39:db:8e:
                    6f:ea:67:cf:17:3b:e7:d3:2d:a2:d5:16:7f:45:17:
                    80:b3:65:e2:8a:2c:77:dc:e7:86:74:49:76:4f:4c:
                    91:08:c0:3d:8e:a6:7e:90:0b:22:4d:82:aa:37:74:
                    0e:dd:d2:63:e7:24:02:17:5a:b5:e6:d8:08:e2:03:
                    c4:f7:be:ea:69:a2:b6:50:e5:65:e6:8e:23:c3:4d:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:34:88:D7:22:CF:BA:D9:5E:0A:B3:C5:97:49:FF:94:8A:01:60
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/NyA0iNciz7rZXgqzxZdJ_5SKAWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:42:ce:ba:ea:c8:87:9a:2b:d3:91:a3:59:18:5d:40:b0:
         55:02:bb:03:d4:61:54:f5:84:a9:de:d3:6f:1c:93:88:fb:9a:
         74:80:3e:e5:4c:a0:62:12:3f:12:8c:b4:42:0a:5c:cf:b6:62:
         3e:7a:79:11:18:5c:3e:88:a9:53:8f:bc:5f:e3:ed:71:15:7c:
         d0:8c:6b:c9:45:45:5f:cd:e0:7a:14:f5:3e:e5:a1:bb:4c:9c:
         fd:b1:b7:28:39:55:f5:7f:64:97:cc:0f:2a:5c:90:f2:26:eb:
         e1:f7:ec:94:11:84:c2:5a:34:a8:8c:fb:b5:11:c7:08:02:55:
         ba:fa:ee:f5:53:3a:1c:2d:0f:a5:be:cc:b0:67:a3:e7:56:eb:
         2f:5b:a4:c9:d6:51:88:28:36:ba:fc:5f:90:2a:ce:65:c7:3b:
         75:7c:15:26:25:f6:ae:5f:17:64:f2:ee:de:c4:d2:82:c3:63:
         63:bb:86:ef:24:1c:8c:6d:48:0f:10:76:69:fe:d5:63:68:87:
         17:50:eb:67:44:c4:ec:39:1d:43:5f:f5:63:38:b8:bf:34:f1:
         dd:af:6d:1e:0a:36:bc:35:cc:7c:ea:b6:18:1a:57:fb:49:ef:
         d1:d3:33:e0:b2:90:44:2e:91:30:ff:e4:bb:20:f5:d3:13:60:
         c7:7f:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org