Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/OBfqw2wLasSvaRaW4TQeBQpKbMI.roa
File:                     OBfqw2wLasSvaRaW4TQeBQpKbMI.roa (raw, json)
Hash identifier:          u0rVlxfH2MXnLWd9hDjR4G4zij7K9x8Jtn/BXcgh9w8=
Subject key identifier:   38:17:EA:C3:6C:0B:6A:C4:AF:69:16:96:E1:34:1E:05:0A:4A:6C:C2
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       14
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/OBfqw2wLasSvaRaW4TQeBQpKbMI.roa
Signing time:             Wed 15 Mar 2023 04:11:44 +0000
ROA not before:           Wed 15 Mar 2023 04:11:44 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55385
IP address blocks:        119.47.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Mar 15 04:11:44 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3817EAC36C0B6AC4AF691696E1341E050A4A6CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:aa:73:b8:93:7a:b9:89:77:1d:13:b8:93:
                    1c:af:00:2e:02:37:e3:63:1a:c1:5c:ac:e0:b9:18:
                    ff:f2:39:87:eb:61:6e:7f:5c:bf:bd:2a:dd:45:d5:
                    8c:0f:89:82:2b:26:59:9b:f5:99:d2:80:19:8f:4e:
                    45:4e:d8:22:b7:f5:0a:c7:da:43:54:55:36:47:77:
                    e4:8c:fb:19:cd:d2:05:2f:a2:f4:5d:81:62:82:2b:
                    f0:ed:f9:0b:c3:c6:a1:5e:d5:51:56:c3:55:32:88:
                    3b:78:ef:34:b3:f8:bf:d2:02:7f:2c:bb:0c:5a:e6:
                    d0:1e:1d:cd:16:da:e7:5c:15:b8:f8:12:99:d6:78:
                    ff:17:eb:89:12:b5:fc:55:26:7d:d7:39:3a:01:ee:
                    93:7f:55:4c:7d:8d:f4:48:9a:61:1d:5d:1d:3a:c0:
                    82:04:02:43:41:88:05:d4:fb:ca:84:8a:75:eb:5c:
                    1d:2f:1a:a9:bb:24:ce:88:9d:8e:66:5e:54:ae:b2:
                    4d:f6:90:71:ca:b6:7c:3b:f1:3b:3f:93:dc:51:e2:
                    44:02:22:5a:63:f2:2f:93:05:ae:bf:3d:9e:25:e8:
                    f4:b5:f5:33:f4:b0:f7:d4:d5:ce:62:2f:67:a3:73:
                    3a:ad:7f:e9:aa:03:51:6b:27:61:85:f2:a9:06:5e:
                    8b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:EA:C3:6C:0B:6A:C4:AF:69:16:96:E1:34:1E:05:0A:4A:6C:C2
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/OBfqw2wLasSvaRaW4TQeBQpKbMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:a2:1c:cd:40:81:32:9d:5e:f1:cc:64:e1:59:3d:91:87:11:
         54:7d:25:ff:98:1c:7b:b5:23:c3:ee:17:79:56:94:d5:3e:33:
         4c:10:a7:e7:00:7f:75:5c:f0:5e:c3:a6:0a:ab:56:12:6c:0d:
         ce:fa:01:44:df:bf:99:7a:d5:14:61:d0:a0:8e:ae:2a:54:14:
         88:41:db:dd:84:5a:e4:46:ad:47:d3:44:f1:98:60:c6:4b:da:
         ce:38:57:0c:34:61:cc:da:cb:ba:ce:62:48:80:40:8d:ed:b5:
         d5:36:47:01:92:dc:ed:1c:ea:41:67:2f:d7:96:58:cb:8f:12:
         c4:b9:65:fa:14:8d:94:1c:d1:6b:ef:10:96:5e:37:c2:5f:8e:
         22:e8:96:44:7f:7c:29:9a:63:f8:9a:e9:bc:ff:46:1c:26:3e:
         f6:b7:6f:51:da:ad:c2:08:11:d3:81:59:13:b2:45:79:3b:de:
         e9:88:2f:4d:7d:8f:e7:f9:fd:97:77:55:8b:7a:b3:a4:82:2b:
         80:b8:27:0b:ad:a1:f8:89:dd:c4:18:71:88:81:bd:82:9d:01:
         68:ff:d2:96:8d:af:d1:86:93:c4:e8:bb:fe:8b:ae:62:82:1a:
         19:62:66:0c:67:b7:5f:87:1d:4a:53:00:e4:f6:38:d2:a8:55:
         41:2c:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org