Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/GBhcRvXTerd2Uw5xjIeBhN2rB0A.roa
File:                     GBhcRvXTerd2Uw5xjIeBhN2rB0A.roa (raw, json)
Hash identifier:          p36ZoaiJYn06GLjsiL+s/PQdzxwcfn6SiZEO+CQ3UaE=
Subject key identifier:   18:18:5C:46:F5:D3:7A:B7:76:53:0E:71:8C:87:81:84:DD:AB:07:40
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       49
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/GBhcRvXTerd2Uw5xjIeBhN2rB0A.roa
Signing time:             Thu 13 Apr 2023 09:54:16 +0000
ROA not before:           Thu 13 Apr 2023 09:54:16 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     37892
IP address blocks:        202.145.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Apr 13 09:54:16 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=18185C46F5D37AB776530E718C878184DDAB0740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:9f:58:5c:cb:2e:6b:0a:99:c9:e5:73:2f:
                    1f:bb:85:43:80:a6:b9:fd:55:c7:33:7a:43:66:8b:
                    6e:9f:b5:9a:b0:3d:e6:85:e9:58:b6:1c:11:32:41:
                    6a:4f:1d:8c:90:35:c0:9b:99:68:61:36:3d:99:c2:
                    e8:37:b7:cf:12:70:ee:bb:65:77:79:39:80:cf:e8:
                    68:6f:6e:a6:42:96:be:d8:77:cd:75:e0:49:8b:5a:
                    8e:9a:41:b8:7d:04:66:95:42:5d:91:73:24:29:85:
                    74:0d:e9:28:f2:dc:e7:bf:6b:d6:c9:69:fa:ec:ec:
                    86:99:85:e4:48:3b:ec:7c:5e:ad:f1:06:12:f7:7b:
                    e2:be:af:57:ff:3d:c5:e5:f5:64:d8:b5:ac:24:d9:
                    ee:f3:1f:c8:b4:74:fb:b6:ac:5f:84:e0:c2:2d:4a:
                    66:4e:a4:e6:e5:e7:9d:13:8a:6f:fe:ef:9f:26:43:
                    76:b6:41:83:50:41:93:e8:26:e0:ec:e3:19:f2:27:
                    af:cd:1d:25:23:48:9b:84:65:a9:20:8d:34:fa:d2:
                    3d:4f:bf:9d:9f:ec:8e:36:4d:02:c4:75:4e:58:1d:
                    35:a3:91:24:4c:d9:23:6a:2f:fa:fa:c4:15:c1:6d:
                    ba:89:20:5a:42:60:56:0f:61:73:47:77:71:95:f9:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:18:5C:46:F5:D3:7A:B7:76:53:0E:71:8C:87:81:84:DD:AB:07:40
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/GBhcRvXTerd2Uw5xjIeBhN2rB0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:40:26:11:3d:69:46:40:de:cd:b1:69:51:1d:80:eb:6e:
         ca:7c:25:81:72:26:7e:b3:91:8a:50:06:f7:c2:f0:00:67:bc:
         f2:a1:21:a7:1b:f6:a8:76:2b:54:8f:2a:3a:cb:3b:85:ba:2c:
         bd:8b:4d:5f:c1:67:be:d2:2d:0f:f3:79:bc:de:ac:a2:d0:a5:
         5f:16:45:db:13:0f:d4:26:57:1b:78:94:d0:61:ce:d1:e5:69:
         6e:0b:b9:04:cd:05:f1:ad:c1:1b:7d:74:db:84:32:29:9f:f1:
         8b:78:03:b1:ae:b1:10:66:0b:d0:30:d8:9f:e0:83:94:ef:6b:
         94:c3:fc:df:73:83:3f:c3:f7:52:c8:b1:bb:ab:f4:d8:0e:98:
         b7:33:19:fd:03:58:af:a4:21:5b:95:ab:d3:15:d6:96:c0:83:
         98:fc:bf:21:37:08:c5:79:3a:27:11:d1:ce:b7:f3:c2:6e:20:
         cd:8e:5f:67:89:13:23:4a:27:92:95:7e:d6:33:73:d4:18:cf:
         62:f3:9a:92:bf:54:1c:e3:1b:10:ae:bf:bd:1a:f3:d3:0e:b2:
         e2:87:20:79:c7:3f:e3:eb:b1:66:33:e5:67:76:83:d0:93:c8:
         0d:cc:70:6f:f4:78:a3:3d:3f:53:45:e1:29:c8:20:3d:4b:e8:
         b1:a0:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org