Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/RGnskCTUvBmIMsfp4y8Gb6fiFBA.roa
File:                     RGnskCTUvBmIMsfp4y8Gb6fiFBA.roa (raw, json)
Hash identifier:          YlM3zs6gZzX7+MbsKU0SR3QKyycgP2aFBCWazZoh7EA=
Subject key identifier:   44:69:EC:90:24:D4:BC:19:88:32:C7:E9:E3:2F:06:6F:A7:E2:14:10
Certificate issuer:       /CN=ECB5D12C9271C43DB6FB2AD152F79ACF93F5AD2E
Certificate serial:       07
Authority key identifier: EC:B5:D1:2C:92:71:C4:3D:B6:FB:2A:D1:52:F7:9A:CF:93:F5:AD:2E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7LXRLJJxxD22-yrRUveaz5P1rS4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RGnskCTUvBmIMsfp4y8Gb6fiFBA.roa
Signing time:             Wed 20 Apr 2022 09:42:29 +0000
ROA not before:           Wed 20 Apr 2022 09:42:29 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        165.76.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB5D12C9271C43DB6FB2AD152F79ACF93F5AD2E
        Validity
            Not Before: Apr 20 09:42:29 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=4469EC9024D4BC198832C7E9E32F066FA7E21410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:3a:02:ed:37:51:62:50:39:0a:8a:c0:eb:
                    5b:8b:f7:42:78:fa:88:f9:1c:b5:fa:eb:bc:4c:2b:
                    af:7f:ab:5a:c3:e2:d0:79:af:d8:87:f8:19:0d:fa:
                    c6:5b:95:39:4a:5f:7c:cf:82:06:20:5b:93:c9:05:
                    8a:43:bf:6f:60:86:10:28:ef:08:20:da:39:37:80:
                    4b:87:45:f4:1e:d1:ab:30:fe:d4:f6:19:38:af:24:
                    47:7f:28:45:43:bb:9a:38:1b:60:17:0b:c0:fa:5a:
                    e8:de:d5:05:cc:de:38:2d:01:92:f6:0e:99:6d:8e:
                    21:99:a1:4c:4c:b4:b4:c1:19:73:da:2f:ec:8b:96:
                    2b:a0:e2:30:b7:c3:21:16:71:9f:8d:4c:02:5a:c4:
                    30:65:b3:01:14:c9:bd:6f:7e:d6:a3:8b:21:0d:34:
                    6d:a1:81:2d:e7:80:be:18:8f:72:ec:14:77:5f:8d:
                    e0:02:05:2b:d9:8e:a4:a9:ea:77:b2:ea:c4:5a:ae:
                    aa:2d:97:6e:1c:9a:d4:e0:d7:53:58:03:a6:cb:77:
                    ac:71:36:f8:71:a1:1e:5f:c9:8d:d6:ed:f4:19:ff:
                    b0:22:cc:c3:0f:9e:47:d8:f0:d7:a7:5b:e0:24:9b:
                    54:ce:ec:00:b9:81:1d:1b:6b:d1:91:0d:d2:8d:cb:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:69:EC:90:24:D4:BC:19:88:32:C7:E9:E3:2F:06:6F:A7:E2:14:10
            X509v3 Authority Key Identifier:
                keyid:EC:B5:D1:2C:92:71:C4:3D:B6:FB:2A:D1:52:F7:9A:CF:93:F5:AD:2E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/7LXRLJJxxD22-yrRUveaz5P1rS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7LXRLJJxxD22-yrRUveaz5P1rS4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RGnskCTUvBmIMsfp4y8Gb6fiFBA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.76.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:14:86:b1:a5:82:22:af:a5:53:7b:1a:6d:c6:07:7c:24:
         02:41:74:ba:4a:b4:7e:d1:77:ae:28:16:60:ca:f3:ce:dd:43:
         3f:02:d5:06:64:e6:ac:68:88:cc:0b:4f:47:97:61:08:6a:72:
         ae:e6:0c:d2:bb:aa:4d:9e:e9:5d:8e:f5:35:cf:fc:55:28:bc:
         90:56:a7:bc:38:5f:22:71:70:4e:cb:de:39:96:b4:a2:91:c4:
         32:24:59:39:50:ee:e0:28:f3:2f:a6:ce:aa:6b:cf:f3:6d:5a:
         bf:60:e0:cf:8a:65:b4:b1:63:3e:be:6c:3d:f5:a2:d6:67:9b:
         cc:9f:6f:c2:5f:63:d2:41:4e:36:71:04:68:8e:41:64:bf:57:
         2e:e2:51:96:1f:96:4e:2e:bd:c4:c7:b8:8a:6b:68:c5:6e:16:
         a9:e9:40:f8:28:67:61:5c:1b:eb:b8:d6:a4:15:37:b1:29:92:
         13:2c:29:a7:53:04:27:87:ff:6a:7d:19:ea:74:6e:16:ae:f6:
         53:1e:6c:83:df:08:73:a1:0b:39:a1:03:bb:c4:ee:a9:a9:2d:
         45:7d:4f:ec:2e:4e:4e:2c:70:bd:60:61:bb:d8:73:5a:c4:fe:
         d1:78:69:d8:26:db:37:1d:d3:74:e0:d9:ea:4f:5c:ad:86:a5:
         36:58:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org