Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/jIwL_u1ibOmMth2nqvLmK5eH9f4.roa
File:                     jIwL_u1ibOmMth2nqvLmK5eH9f4.roa (raw, json)
Hash identifier:          59Q9NlLqy09CjqcrEFE4saHLZsHqWOg2dwzFMIFWkGc=
Subject key identifier:   8C:8C:0B:FE:ED:62:6C:E9:8C:B6:1D:A7:AA:F2:E6:2B:97:87:F5:FE
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       37
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/jIwL_u1ibOmMth2nqvLmK5eH9f4.roa
Signing time:             Wed 20 Apr 2022 09:27:35 +0000
ROA not before:           Wed 20 Apr 2022 09:27:35 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:27:35 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=8C8C0BFEED626CE98CB61DA7AAF2E62B9787F5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:33:ff:6f:24:e3:18:ef:7c:ba:c6:f4:ac:
                    2b:ee:2d:96:97:29:65:6c:97:cc:ce:56:80:e3:f7:
                    cd:8c:4c:03:fc:e1:07:3e:d1:7a:3c:9e:58:c6:77:
                    fe:e2:3d:a8:c3:10:af:a3:8c:c8:a6:4a:56:b7:2f:
                    ea:c1:8a:bf:67:be:5d:02:5c:28:32:fc:55:68:b2:
                    4b:7c:c6:84:2b:b4:88:9c:11:b3:fe:c8:2d:68:e7:
                    fd:d5:61:86:a4:61:7a:75:9f:4f:76:b2:14:5d:8c:
                    7d:1f:cc:02:72:06:40:9d:99:0f:9a:92:7d:c3:d2:
                    b8:f1:c0:e0:5c:b6:8f:88:34:72:45:c9:de:a2:e5:
                    9e:14:82:20:89:a4:20:a7:fb:2b:d6:60:5f:ae:b8:
                    4b:ef:f3:ce:7c:02:ff:e1:76:13:ef:58:1d:15:d4:
                    89:5f:91:13:c9:e0:83:55:67:5b:34:ab:13:40:12:
                    1b:d1:42:0e:8d:35:f9:9c:c3:be:fc:ea:ee:be:77:
                    c4:d1:a0:89:8a:18:99:41:50:d2:5d:30:09:18:2a:
                    f1:55:63:fe:fa:c3:84:5c:53:5d:7d:e3:57:9c:a5:
                    5c:f7:51:6a:e3:16:ce:ba:a7:24:38:ab:b7:8c:89:
                    48:f4:ce:5e:fe:f9:d5:a8:63:0d:ea:72:44:f4:ae:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:0B:FE:ED:62:6C:E9:8C:B6:1D:A7:AA:F2:E6:2B:97:87:F5:FE
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/jIwL_u1ibOmMth2nqvLmK5eH9f4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:df:ac:89:f8:d7:86:d0:73:c3:85:49:73:31:60:76:2d:41:
         9c:ee:6d:3d:09:4b:bc:67:96:d9:af:0c:5c:07:2f:79:a6:74:
         25:ea:98:13:94:ac:d9:d5:af:e7:7e:e6:d7:c0:8a:43:f7:a5:
         5d:dc:dd:df:4d:13:d0:c9:59:25:db:4a:a3:85:8f:e4:e1:71:
         95:51:80:be:57:d8:1e:c6:af:57:5a:b9:d6:fe:02:e5:b0:a0:
         b5:a1:5b:c7:a4:34:60:b1:5c:ef:e7:9a:0c:1b:0a:98:34:91:
         a0:bd:43:36:6b:5d:14:78:1a:8c:bf:6a:df:de:a9:0c:54:23:
         5f:81:eb:f2:62:cb:26:8f:c1:8c:ed:f1:46:c8:6b:fa:c7:9e:
         e0:4a:1a:6c:01:bf:9d:ea:71:0d:58:82:57:87:20:b4:13:b6:
         12:e3:5d:82:d4:0e:ba:24:a1:b5:66:88:f8:a2:9e:87:45:14:
         05:a3:f4:7c:73:1b:07:1e:f4:a9:2a:43:c1:16:56:08:9d:3c:
         d7:ee:01:f1:1d:71:c2:4d:a6:94:32:92:44:74:88:f0:69:b0:
         1e:40:46:f1:26:ae:be:18:52:c2:0d:13:20:76:d5:d6:99:f0:
         9d:44:ea:8d:f2:70:c6:f1:3a:38:b4:a0:21:08:a3:f8:bc:23:
         dd:fd:ac:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org