Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/7lunKwy4ENddqUkCt5zXnWAgGFI.roa
File:                     7lunKwy4ENddqUkCt5zXnWAgGFI.roa (raw, json)
Hash identifier:          WCyDxxEEd2JFsOn9sWHtV0o0rrkTe1Nus45QF3LK0BU=
Subject key identifier:   EE:5B:A7:2B:0C:B8:10:D7:5D:A9:49:02:B7:9C:D7:9D:60:20:18:52
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       37
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/7lunKwy4ENddqUkCt5zXnWAgGFI.roa
Signing time:             Sun 01 May 2022 01:31:16 +0000
ROA not before:           Sun 01 May 2022 01:31:16 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     37892
IP address blocks:        202.145.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May  1 01:31:16 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=EE5BA72B0CB810D75DA94902B79CD79D60201852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:07:73:c2:9f:b4:85:91:e0:9f:1f:48:2b:
                    b1:fe:35:09:8f:83:a7:94:d8:08:21:c8:bb:83:f6:
                    9a:f7:32:91:91:60:9e:41:59:ca:08:fa:1a:1e:ff:
                    5b:03:9d:6d:2c:d1:91:fc:45:76:5d:d4:b2:8a:1a:
                    e5:ea:1e:f9:c3:9a:ff:e2:65:c2:5a:eb:e8:4c:8e:
                    42:56:32:52:89:da:05:1f:d1:ab:7e:a4:3d:5d:52:
                    6a:2c:79:a5:a0:1d:37:7e:2f:b1:51:12:ff:9c:fa:
                    30:16:46:da:2b:f2:e7:0e:b2:30:9f:50:1c:8e:0e:
                    9d:73:9c:df:f2:bb:1e:be:d6:a1:a9:04:81:6b:15:
                    ea:f2:51:ac:95:ba:1e:db:df:1b:1a:ef:9b:45:52:
                    e6:34:ae:31:31:49:2f:b0:73:fa:cc:ea:ba:ba:7a:
                    20:34:18:dd:76:1c:1d:d1:7c:3d:2d:a0:91:69:40:
                    c1:2e:34:1d:ce:bc:2a:c8:be:df:87:33:06:5a:3d:
                    56:94:61:20:62:fe:87:44:62:18:93:da:83:e6:c9:
                    d9:09:e6:00:0f:40:d2:21:f9:1b:ec:58:5e:6a:0c:
                    d4:7b:1b:7c:4d:0d:e8:aa:44:87:92:ff:3b:95:72:
                    48:5d:e5:a5:c5:cd:8f:85:c5:95:1b:4a:08:89:82:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5B:A7:2B:0C:B8:10:D7:5D:A9:49:02:B7:9C:D7:9D:60:20:18:52
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/7lunKwy4ENddqUkCt5zXnWAgGFI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:35:60:e3:3b:62:35:07:3e:e6:80:96:bf:48:45:5c:3f:
         a9:e2:b8:bf:7f:0b:9b:52:a7:16:9a:51:33:c1:32:62:3b:c0:
         fa:98:1b:28:73:41:71:1e:34:84:0b:7d:5b:f4:dd:1f:03:9e:
         f2:a7:98:e3:38:ab:43:ad:80:d8:a6:0f:4b:ba:2d:0e:4d:10:
         d7:3b:db:fb:3e:e6:79:85:78:c2:e2:48:4f:90:ec:4b:7b:51:
         22:2f:c4:59:00:42:11:b7:67:e6:06:da:0a:4a:74:9e:df:2e:
         29:32:17:06:6f:64:19:12:95:66:09:9b:4e:84:39:48:7e:25:
         67:63:8e:9c:aa:ea:ec:75:bc:59:c4:54:0c:1e:94:2a:1e:ba:
         fa:cc:19:52:6c:b7:ce:5f:8e:23:f9:65:26:d2:a1:1b:2d:89:
         eb:cc:72:b5:de:3a:2e:3c:16:8f:85:47:2a:05:d0:ab:28:53:
         ef:12:b2:cb:d1:2f:92:e1:4a:58:e2:ba:aa:a9:a6:f2:d3:2c:
         92:e1:ef:90:3a:ce:51:df:11:24:f8:7d:38:a0:8f:20:52:31:
         62:60:69:c4:e5:2d:f2:b8:0b:44:79:8e:78:6d:35:6d:13:a7:
         53:44:35:81:08:40:53:15:26:61:cb:71:31:36:c3:62:6b:eb:
         f2:46:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org