Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/BQX4IkVATJDZ76SBA6xb_y0llbQ.roa
File:                     BQX4IkVATJDZ76SBA6xb_y0llbQ.roa (raw, json)
Hash identifier:          6gHZLs+Z0u0YBJa/D4Did+vtqrXCmW9jLS34HdHVE4U=
Subject key identifier:   05:05:F8:22:45:40:4C:90:D9:EF:A4:81:03:AC:5B:FF:2D:25:95:B4
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       48
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/BQX4IkVATJDZ76SBA6xb_y0llbQ.roa
Signing time:             Thu 13 Apr 2023 09:54:16 +0000
ROA not before:           Thu 13 Apr 2023 09:54:16 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     37892
IP address blocks:        202.145.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Apr 13 09:54:16 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0505F82245404C90D9EFA48103AC5BFF2D2595B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:b5:28:0c:7b:38:f6:25:ef:c7:be:62:47:
                    fe:7f:89:24:fe:d2:a7:d2:29:f8:be:a8:37:db:fa:
                    03:d8:7f:71:a3:9a:fd:98:81:49:f6:16:0d:6e:70:
                    f8:c2:9c:6b:95:f2:9c:0e:bd:a7:c0:f8:24:e7:33:
                    4c:ab:e5:ed:24:00:40:ca:75:89:a3:0a:08:c9:fd:
                    d4:96:8b:80:a9:b0:10:d8:45:5f:f9:4c:04:d3:75:
                    1a:f5:6e:82:62:dc:7e:7c:f0:80:0c:41:48:30:47:
                    4b:ee:fb:a6:18:e6:05:2e:62:f0:f3:a9:21:eb:05:
                    cd:f9:07:cd:3f:ad:d7:ef:78:01:15:f6:97:19:2c:
                    da:c5:78:14:bf:1b:9f:87:eb:bf:4e:32:7a:c4:9f:
                    f6:2d:d7:24:d4:40:9d:af:ab:db:6d:62:66:f8:e2:
                    c6:6a:e2:5f:31:41:c9:68:e6:fe:2a:9b:59:2c:15:
                    5f:ca:6c:05:6e:0e:71:8b:f0:7a:75:b6:a0:ea:99:
                    6e:0e:de:00:ed:9d:6a:b4:a6:57:26:cc:62:42:7b:
                    34:4f:13:56:cf:6b:59:5d:45:e9:9e:2a:d5:ff:94:
                    dd:80:19:fd:55:16:95:3a:fd:96:ce:2f:cd:05:ce:
                    7a:08:e5:de:4d:45:1a:b3:5a:8b:40:2c:30:4d:9a:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:F8:22:45:40:4C:90:D9:EF:A4:81:03:AC:5B:FF:2D:25:95:B4
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/BQX4IkVATJDZ76SBA6xb_y0llbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:db:5e:2e:31:09:40:d0:62:a7:c4:c7:b5:83:92:e0:1a:d9:
         b3:4d:e9:90:2a:1e:cc:5c:bd:a2:09:5f:2e:f3:22:9a:4e:dc:
         bc:06:09:78:aa:2a:de:cf:0a:25:e0:e3:98:cf:74:54:0d:6e:
         f0:4e:69:da:e4:9c:b2:57:9d:89:60:5f:20:52:36:ab:f2:0a:
         da:86:20:a2:89:90:08:09:60:5e:21:ad:87:a1:28:fd:ab:8a:
         c1:6a:a0:cb:21:9e:ad:db:e1:a8:e4:35:87:60:f3:93:4f:88:
         df:9a:d2:ec:74:a5:89:bf:ff:59:41:e3:c0:69:d7:09:b4:a2:
         8f:54:28:f6:7c:c0:5c:03:71:48:bf:92:5e:67:f0:ab:c9:55:
         58:84:ef:97:7d:f9:bf:78:7b:3a:04:bf:11:80:55:20:37:57:
         bb:1b:ac:83:98:1b:ce:e3:0a:51:47:0b:88:ed:3e:92:82:a2:
         7b:63:85:2a:9a:37:4d:d0:aa:46:a1:0e:dd:87:7e:9a:76:8a:
         6d:11:3b:17:61:2d:45:7a:e6:73:5a:f1:40:f0:39:78:4c:28:
         8a:4b:ed:63:95:20:fc:71:c4:7b:2f:11:f2:fd:ea:d7:15:61:
         c7:e2:41:6e:e0:c7:bc:f9:83:d9:f2:48:af:4c:f9:e8:1c:47:
         8f:e2:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org