Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/B2uBifyXoiNHk1A0EdRUQ9E8cv4.roa
File:                     B2uBifyXoiNHk1A0EdRUQ9E8cv4.roa (raw, json)
Hash identifier:          Wu6z27Uu2+TNmIjgioBtFsr9MkXA1Zti/SNctIidPXM=
Subject key identifier:   07:6B:81:89:FC:97:A2:23:47:93:50:34:11:D4:54:43:D1:3C:72:FE
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       5A
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/B2uBifyXoiNHk1A0EdRUQ9E8cv4.roa
Signing time:             Sun 01 May 2022 01:30:52 +0000
ROA not before:           Sun 01 May 2022 01:30:52 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        119.235.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:52 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=076B8189FC97A2234793503411D45443D13C72FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:a7:57:b1:dd:9d:19:6a:7d:01:13:b8:26:
                    f9:c7:eb:e2:3b:29:58:97:59:4d:5c:fe:67:8e:de:
                    0a:e6:6b:99:50:5e:90:2d:ef:90:d2:19:8d:17:21:
                    1b:95:21:8b:9c:c6:8f:9d:05:fa:33:b9:a6:1c:8a:
                    42:d2:9f:41:99:10:6f:1d:e0:3a:c3:3c:d1:a0:79:
                    cf:a6:3d:d2:3c:85:73:6f:da:57:30:9c:13:d0:a7:
                    e9:b3:fc:1a:fc:c6:9d:79:83:63:cb:09:7c:e7:cb:
                    ef:24:af:e5:28:7e:b3:ad:c9:b3:ef:f4:5e:66:b7:
                    15:6f:56:53:bf:63:37:93:10:db:cf:57:2e:50:ee:
                    48:c3:67:b1:39:4f:e7:c6:1b:ab:af:1c:4c:33:c0:
                    12:09:6c:b2:e7:29:fd:d6:d8:68:54:97:5a:18:25:
                    00:6b:29:4e:8a:f5:f7:28:f8:21:58:8b:86:84:a0:
                    63:cc:71:16:ff:6f:63:3d:ed:e2:4d:6f:e3:95:6c:
                    ad:d2:cf:1c:85:81:68:89:e4:09:6d:3a:33:91:64:
                    c9:e5:f6:e8:3a:d9:03:fb:73:27:26:c2:5c:24:b7:
                    7e:6e:80:81:01:9d:84:69:75:41:15:36:d8:48:e5:
                    eb:0b:b1:76:81:0a:f3:41:1f:b0:38:64:47:9f:0d:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:81:89:FC:97:A2:23:47:93:50:34:11:D4:54:43:D1:3C:72:FE
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/B2uBifyXoiNHk1A0EdRUQ9E8cv4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:26:98:ad:b9:91:83:f4:0e:98:13:35:7e:2f:59:fe:9a:
         c1:6d:db:32:7a:d5:ed:e7:19:74:9e:85:d1:39:48:14:e6:04:
         f5:c1:42:03:48:a2:b2:f1:47:06:9b:e4:97:cf:27:20:86:15:
         1e:61:c5:53:f4:be:37:4b:6d:22:fb:40:81:5e:15:71:25:f9:
         14:b3:ba:f8:6a:59:cc:e6:77:a7:f9:ac:7e:ea:4a:e9:95:20:
         3e:9a:9f:22:9d:a5:9f:71:90:31:cc:cb:67:c4:0d:92:80:d2:
         b1:0e:1b:00:46:64:0a:6d:1f:7c:7a:93:29:de:a5:a0:32:ad:
         8d:11:34:ee:0f:79:12:40:08:5e:cb:4f:32:08:27:b5:7e:48:
         6a:33:1f:8f:91:9f:8c:86:5f:1b:20:03:58:e0:b4:d8:0d:f0:
         d8:40:23:5d:e9:6a:cd:47:20:0d:fb:95:e2:50:25:c6:3e:f5:
         b6:46:a4:f4:60:70:1e:42:e5:8d:41:b0:ca:9e:11:82:df:bb:
         13:65:ff:b6:84:b3:5b:4b:1b:38:68:6e:72:34:ad:71:e5:53:
         8d:d1:47:b4:e9:f4:8c:9c:0f:ac:cf:19:a1:90:57:a8:01:29:
         57:cf:0e:6a:1d:42:d4:4a:a7:9d:d7:36:7c:97:3a:74:61:03:
         5b:7f:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:21 2023 by rpki-client on console-ams.rpki-client.org