Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/2m-5v_h3U5dnYzqzoL5Jy9d8XnA.roa
File:                     2m-5v_h3U5dnYzqzoL5Jy9d8XnA.roa (raw, json)
Hash identifier:          4VDu4qEjZeG6Gb3EsfyuaDQmDyVQTYWddMZMUnOliU4=
Subject key identifier:   DA:6F:B9:BF:F8:77:53:97:67:63:3A:B3:A0:BE:49:CB:D7:7C:5E:70
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       39
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/2m-5v_h3U5dnYzqzoL5Jy9d8XnA.roa
Signing time:             Tue 01 Feb 2022 01:31:06 +0000
ROA not before:           Tue 01 Feb 2022 01:31:06 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     9621
IP address blocks:        218.40.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Feb  1 01:31:06 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=DA6FB9BFF877539767633AB3A0BE49CBD77C5E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0b:bc:f9:31:bb:21:50:a0:12:8e:98:c8:a7:
                    ec:65:90:ea:96:8b:da:88:ae:7e:24:ba:85:48:70:
                    19:70:df:3c:8c:b1:d8:aa:11:8b:f5:4e:61:f2:fc:
                    e9:8b:ac:4b:53:39:52:6c:f2:b8:e3:7a:e8:fb:8e:
                    72:9e:fd:f2:a8:61:fa:57:fd:db:e6:7e:bc:99:73:
                    1a:08:98:47:17:e2:07:eb:0d:65:42:fc:d3:7d:5c:
                    7e:08:91:10:19:ab:d7:07:cd:e2:43:d2:8e:13:27:
                    cd:2d:45:07:fe:20:f0:35:0f:d1:f3:7b:83:c6:44:
                    18:c0:49:49:10:cf:d5:e6:51:d1:51:02:5d:70:d0:
                    39:e5:27:bc:ac:50:64:2c:3e:29:cd:0c:06:85:cc:
                    75:01:e4:95:36:7f:d8:ff:9a:71:bf:c9:7f:b0:6d:
                    d7:a4:4f:af:4a:ed:c2:27:4f:27:e1:a7:0e:2c:73:
                    06:9b:c8:16:da:35:49:3c:a4:7b:29:14:fd:ed:23:
                    5e:63:6a:f7:4a:12:ff:1c:cf:2e:03:35:eb:17:be:
                    bf:ab:ef:03:cc:b6:41:c5:e3:5a:b7:ea:6d:1c:32:
                    e8:ba:3c:7f:bf:b4:72:fe:5e:96:5e:04:54:77:64:
                    9c:b1:58:ba:84:71:43:08:76:76:21:17:6b:d2:d1:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:B9:BF:F8:77:53:97:67:63:3A:B3:A0:BE:49:CB:D7:7C:5E:70
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/2m-5v_h3U5dnYzqzoL5Jy9d8XnA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:a6:d9:cf:04:9b:86:bd:c1:f0:c5:ba:7c:e0:5e:aa:f0:f2:
         f1:62:9b:ea:08:2f:d5:fc:1e:bb:5b:52:0b:4a:5d:ee:8b:f2:
         07:f2:98:14:1e:b2:0c:a6:1f:de:af:1f:f8:95:a6:b7:56:30:
         53:52:71:ad:4f:18:5b:13:9e:80:ca:dc:ed:6b:bb:f9:c0:ac:
         c5:ca:ea:c4:af:20:7a:c3:40:90:38:7d:40:c4:9b:98:58:e4:
         73:d2:95:da:50:60:31:91:bf:4c:ed:cf:82:82:74:f0:91:10:
         30:b5:fa:73:18:d3:de:99:15:4d:c3:f4:6b:50:17:f8:ca:71:
         25:8f:33:0b:d4:ac:0f:c1:52:03:e1:ae:1d:79:a7:c9:db:86:
         2c:fd:9f:80:1a:72:c5:f7:b9:0f:f6:dd:5a:6e:df:47:2b:28:
         9d:b8:e3:90:f3:05:49:4e:70:6b:f1:d0:a5:d5:10:15:30:fe:
         5e:a8:61:33:f4:2e:20:3c:02:87:6b:f3:a4:d2:0c:11:65:19:
         7d:d5:0b:f0:c2:a3:e4:ee:ab:e0:0c:45:b3:3a:25:a4:1e:60:
         ee:22:5b:40:4b:d9:f6:7a:5f:31:4e:20:36:e1:ff:b5:f4:0a:
         f0:81:ef:66:eb:1f:32:ed:33:0e:d8:a8:c8:1d:85:92:81:70:
         10:67:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org