Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/xY4p-T2KIwlmXJoQ8-EfViCXOQI.roa
File:                     xY4p-T2KIwlmXJoQ8-EfViCXOQI.roa (raw, json)
Hash identifier:          NBy3fH8OtrzAmM+VDKBxL7/wV7lLuAw+TM7pwcMiXtU=
Subject key identifier:   C5:8E:29:F9:3D:8A:23:09:66:5C:9A:10:F3:E1:1F:56:20:97:39:02
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       36
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/xY4p-T2KIwlmXJoQ8-EfViCXOQI.roa
Signing time:             Sun 01 May 2022 01:31:16 +0000
ROA not before:           Sun 01 May 2022 01:31:16 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     37892
IP address blocks:        202.145.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May  1 01:31:16 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C58E29F93D8A2309665C9A10F3E11F5620973902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:7a:e3:c4:f6:76:f8:08:c6:27:fc:91:96:
                    a2:b7:0e:9f:9d:2a:1e:85:a9:51:22:91:d3:09:23:
                    e3:59:19:4c:75:46:94:41:fc:c3:02:a1:9e:64:fd:
                    20:0b:2c:4b:8e:07:69:aa:98:e1:cb:97:d0:eb:ff:
                    45:40:95:57:fa:62:1c:5a:ce:ce:62:1b:2b:de:90:
                    1e:15:86:91:77:b0:2f:d2:13:2e:02:65:36:fe:54:
                    b8:b5:b9:ab:7e:2f:4b:e4:20:97:cf:57:da:9f:f9:
                    13:61:02:c4:cd:4a:59:84:ee:39:62:b2:89:eb:cb:
                    5b:e0:79:ba:31:ae:27:08:16:47:e2:d2:58:da:0b:
                    e5:ed:44:36:1c:51:6c:b4:66:47:1f:92:8d:3a:3b:
                    15:05:62:2c:11:4b:95:50:a4:59:b1:f3:5c:04:f2:
                    b9:aa:f6:8e:f0:7c:04:ba:73:1f:55:8f:cb:1a:be:
                    68:90:e7:06:40:6a:43:dc:4d:0d:0d:b8:9d:8e:53:
                    c2:d3:30:08:b6:67:2b:87:20:c0:52:55:a8:d9:d3:
                    a8:eb:3c:03:c3:52:8d:c7:17:5c:71:f8:13:17:e7:
                    9d:11:fb:b1:39:7c:24:8c:1d:0a:bd:55:cb:7b:7f:
                    8c:6d:bc:88:31:9f:7e:5d:50:9a:38:a9:15:57:5d:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8E:29:F9:3D:8A:23:09:66:5C:9A:10:F3:E1:1F:56:20:97:39:02
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/xY4p-T2KIwlmXJoQ8-EfViCXOQI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:3c:7b:de:7c:23:2c:63:5c:94:9a:27:01:c2:2c:bc:2c:
         d8:ff:e9:71:e2:62:ed:3b:d6:55:1e:ce:e8:cb:a4:f6:89:4b:
         1d:9f:0b:bd:f1:35:0a:ec:e9:05:21:9f:b8:88:04:d1:bf:0c:
         60:43:73:c1:63:50:a1:ae:2e:a0:b4:d0:34:c4:6b:f5:f9:56:
         45:56:87:ab:cc:61:0b:a7:63:3e:7f:93:f2:1b:4a:fb:af:0f:
         8f:24:8d:98:c6:13:b9:3e:15:9e:75:de:4c:79:8b:48:09:88:
         64:2d:ea:8a:ce:c4:93:e4:7f:cb:39:7c:38:f6:c1:9d:af:1c:
         b3:c5:94:83:2d:f4:08:15:ae:d2:d4:a2:8a:71:34:19:19:10:
         bf:1f:61:20:72:a2:7d:c3:a9:2e:37:b6:36:7e:9b:aa:25:6e:
         d2:f6:42:76:b9:fb:ea:dc:ae:25:e6:a9:ac:ce:d0:28:1e:f2:
         9b:74:89:a8:a6:80:4b:86:de:e1:d5:83:9a:ca:1e:d0:32:20:
         69:86:53:33:3d:40:8c:07:14:25:df:f3:6e:86:4a:04:5e:1b:
         ca:3d:31:c1:f0:b2:6a:db:f2:af:9b:72:19:e1:7c:55:7c:dc:
         e6:c3:16:b0:cb:74:a8:03:a3:98:91:c0:fe:92:82:93:bf:78:
         88:4f:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org