Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/Tu7wLCc439qKC22VRRna-NJu7_c.roa
File:                     Tu7wLCc439qKC22VRRna-NJu7_c.roa (raw, json)
Hash identifier:          hffYNU+KP5XRATXwnZQY/sI3BkuAbcBg6dgFnnNLFOQ=
Subject key identifier:   4E:EE:F0:2C:27:38:DF:DA:8A:0B:6D:95:45:19:DA:F8:D2:6E:EF:F7
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       38
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Tu7wLCc439qKC22VRRna-NJu7_c.roa
Signing time:             Sun 01 May 2022 01:31:16 +0000
ROA not before:           Sun 01 May 2022 01:31:16 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     37892
IP address blocks:        202.145.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May  1 01:31:16 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4EEEF02C2738DFDA8A0B6D954519DAF8D26EEFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:e1:ac:16:12:b5:f4:86:48:06:52:cd:6f:
                    07:c4:8b:b7:14:f4:b7:b9:a6:f5:c1:66:86:aa:d8:
                    e1:bd:b8:0f:1e:3a:91:94:f7:ea:eb:3b:52:89:b3:
                    e1:6c:72:b7:ad:52:77:b8:19:a6:e2:36:18:3f:b3:
                    12:4a:e1:fa:0d:11:06:0f:e5:cc:14:e5:c1:3f:c4:
                    b0:ef:66:8b:a0:83:04:e5:0f:25:0a:45:65:9b:13:
                    46:9e:57:7b:2f:d7:a8:bb:54:78:34:06:80:16:0b:
                    55:fc:29:80:09:aa:d6:2d:b7:58:58:48:56:c6:25:
                    b4:95:bd:96:ae:0b:8f:e8:ba:0d:80:5a:10:20:c8:
                    01:73:f6:14:d3:6f:b2:d6:a0:b6:4a:69:c9:f8:82:
                    0e:45:c8:db:40:d8:4b:a5:74:63:51:bf:9f:b2:34:
                    ce:70:1e:fa:35:61:43:a2:42:82:73:c6:05:a7:48:
                    86:3f:86:c2:75:b4:15:21:ba:a9:f7:d4:ab:b8:e1:
                    cb:4a:89:95:d4:7c:84:3d:45:67:b6:65:8b:27:3c:
                    a5:33:5d:01:7b:1c:37:5a:16:fb:c1:08:f8:17:07:
                    6e:e8:51:43:55:f7:d8:82:a6:65:ec:23:af:06:de:
                    af:2c:ba:07:e4:20:8e:e5:7f:42:b7:4c:50:8c:8a:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EE:F0:2C:27:38:DF:DA:8A:0B:6D:95:45:19:DA:F8:D2:6E:EF:F7
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Tu7wLCc439qKC22VRRna-NJu7_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:3d:a1:1c:07:94:78:7a:de:26:5c:15:5f:a4:39:5a:4b:
         9d:03:44:57:72:06:68:d0:21:7a:34:5a:68:d1:29:34:51:3f:
         e0:c1:74:f5:fe:4a:dc:c1:8c:5f:d3:b2:5a:bb:08:68:e7:1d:
         0d:6e:ca:9f:45:b5:6c:19:9e:a2:f7:62:c4:7d:31:0e:30:37:
         7b:58:33:46:4c:d4:58:87:d5:0c:88:9d:0f:be:d0:a7:6b:f7:
         12:a0:18:14:af:d0:ae:c2:e4:fb:e4:24:e0:1c:c8:ef:3e:2e:
         1e:cd:6b:0e:ce:47:27:51:22:23:11:22:99:c6:00:f4:ef:ca:
         24:b6:4c:50:78:c0:39:c6:19:14:b5:7b:64:03:8c:43:38:e4:
         b0:3d:ff:d2:21:da:46:6f:d1:2f:37:4e:88:32:8e:df:98:bf:
         02:d5:b3:44:8c:54:21:73:18:6a:44:44:f3:ed:f9:ed:4f:0b:
         da:35:3c:37:7d:85:76:27:17:33:b4:65:f9:76:07:e4:31:82:
         c2:be:e4:d5:fa:79:99:2d:65:a1:ea:61:d9:c5:74:af:c4:eb:
         a1:0f:12:96:61:7a:c7:d6:45:0f:79:f8:4a:0d:b6:12:60:18:
         95:64:9d:0b:de:25:b1:df:71:2d:46:c0:60:31:c6:ad:48:80:
         9c:65:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:21 2023 by rpki-client on console-ams.rpki-client.org