Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/RQIh1LI_nbefPSRNWT-mjvNh_l0.roa
File:                     RQIh1LI_nbefPSRNWT-mjvNh_l0.roa (raw, json)
Hash identifier:          KfPT38wJb6Gvwj4hTPePPi32RmYwe+An7Em+RxvpxPQ=
Subject key identifier:   45:02:21:D4:B2:3F:9D:B7:9F:3D:24:4D:59:3F:A6:8E:F3:61:FE:5D
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       38
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RQIh1LI_nbefPSRNWT-mjvNh_l0.roa
Signing time:             Wed 20 Apr 2022 09:32:45 +0000
ROA not before:           Wed 20 Apr 2022 09:32:45 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.36.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:32:45 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=450221D4B23F9DB79F3D244D593FA68EF361FE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:a4:fa:25:13:fe:64:44:95:2e:ef:e0:f8:
                    7f:4e:93:85:e6:f8:56:23:00:67:9e:0e:a2:66:f5:
                    b3:80:18:f0:bb:9f:6d:40:4d:04:92:8a:f8:22:ee:
                    7f:10:48:43:55:86:f5:eb:2d:22:03:3d:24:ea:31:
                    81:6a:26:aa:92:b2:69:84:c2:fa:58:80:99:9c:b8:
                    1d:3c:7c:53:c5:42:de:91:76:fe:5a:e6:e7:6b:ab:
                    a1:d0:b7:85:29:a6:0e:54:5d:6e:70:3e:d9:47:45:
                    eb:a6:ec:b2:2d:f5:7a:83:8d:74:8e:05:c5:42:94:
                    60:21:31:bf:d3:e1:ae:7a:e6:91:bf:a0:ad:d5:e3:
                    4b:b4:9a:27:89:dc:bc:9e:21:64:9b:7e:38:2a:af:
                    ed:ba:85:93:7c:12:86:c1:3a:e5:f4:50:d7:3b:14:
                    c8:0f:e4:a4:97:71:13:90:c6:7a:14:46:c5:02:fb:
                    fb:55:b8:ad:8b:ab:c7:33:6c:47:31:82:ed:08:ff:
                    d2:e9:21:49:77:74:ec:a5:c9:ca:47:16:6e:e6:46:
                    cd:92:1f:c0:5f:ca:4d:13:c0:94:df:c3:37:be:c3:
                    e7:ae:f0:dd:3b:e0:f5:90:d7:e2:7b:91:46:c5:67:
                    a5:70:93:b3:e7:bb:13:53:4d:06:7a:d7:e4:a3:91:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:21:D4:B2:3F:9D:B7:9F:3D:24:4D:59:3F:A6:8E:F3:61:FE:5D
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RQIh1LI_nbefPSRNWT-mjvNh_l0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:6c:66:38:5e:f0:d8:fe:29:07:93:96:85:69:ee:f5:ac:
         90:b3:8e:fe:6a:9c:ad:9f:0c:b8:00:90:e0:b8:d9:9f:63:1f:
         be:e5:71:3e:3c:d7:0d:8c:5d:c4:6a:84:9b:fd:c6:ea:53:cd:
         64:8f:79:83:e0:19:3d:32:78:27:c7:4c:9e:9b:44:7e:0a:48:
         d0:e8:75:ba:07:43:c9:08:55:96:dd:2b:11:5e:bd:04:8b:87:
         07:c0:3c:b2:76:29:a1:d5:b3:65:c1:e1:27:8f:c5:5a:cb:ea:
         22:84:28:c5:a4:9b:cb:59:9c:8a:ab:d3:42:7d:77:15:86:bd:
         be:c0:1b:af:03:07:77:84:ac:ac:41:7c:32:c6:f3:da:69:5e:
         28:70:0e:98:82:05:a6:d2:3a:4d:0c:4a:d6:3c:90:df:e9:84:
         e9:d5:ae:74:fe:32:38:cd:cd:35:3a:41:af:ef:e6:76:11:49:
         34:dd:63:fa:91:f7:4b:9f:b5:16:db:f9:39:1e:c9:52:10:28:
         4b:8b:60:97:26:86:45:c1:e6:83:17:68:c0:91:01:04:aa:b5:
         6c:2a:cd:2e:4d:47:a3:7d:a0:71:8e:92:bf:cc:48:d5:b0:e8:
         18:9d:f1:a8:83:ef:15:95:a4:46:aa:62:cf:ac:f8:c9:12:07:
         ce:92:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org