Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/Jj3d2FCz9nRMC7-sqHqynMEKUbk.roa
File:                     Jj3d2FCz9nRMC7-sqHqynMEKUbk.roa (raw, json)
Hash identifier:          knyRRfvt+uAiKJBuqXLKuumsoeOCjrJZAjOSyk7qiwA=
Subject key identifier:   26:3D:DD:D8:50:B3:F6:74:4C:0B:BF:AC:A8:7A:B2:9C:C1:0A:51:B9
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       7B
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Jj3d2FCz9nRMC7-sqHqynMEKUbk.roa
Signing time:             Thu 13 Apr 2023 09:53:52 +0000
ROA not before:           Thu 13 Apr 2023 09:53:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        119.235.236.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Apr 13 09:53:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=263DDDD850B3F6744C0BBFACA87AB29CC10A51B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:c5:b5:c6:e6:5e:30:42:5b:5b:3d:e4:4e:
                    8f:63:e7:6b:7c:76:c0:ef:6a:07:92:5f:57:a6:1e:
                    d0:dd:c1:d7:40:44:b2:30:5a:ba:35:e8:ca:32:b7:
                    9f:8f:ae:cb:14:58:0c:ed:dd:c6:3c:61:79:87:78:
                    b1:9f:4b:b3:f4:ed:fe:7c:d0:7c:bd:be:53:61:7b:
                    59:dd:14:83:39:bd:8e:60:86:cc:79:e7:88:7d:0e:
                    62:1b:b4:f6:b4:af:3f:70:22:1a:cc:d7:6d:27:ea:
                    cc:17:cd:79:46:53:62:92:f6:53:96:67:96:ec:86:
                    24:ac:92:17:e4:20:d2:92:a7:60:a6:01:12:95:50:
                    fd:3b:f5:a9:a4:d4:61:69:15:fd:4c:ef:0e:23:d5:
                    9d:d5:b0:26:fd:e3:a1:a0:42:8a:2f:42:f5:32:dc:
                    0e:08:93:fc:25:2e:b1:f4:c9:39:55:47:68:dd:40:
                    40:02:1f:7c:a2:2b:a6:aa:1a:0e:2e:44:64:8e:6d:
                    de:6d:7e:05:d5:45:e3:76:1c:3d:0c:99:74:b9:d1:
                    5c:05:ed:1c:33:26:16:a4:79:b3:fc:d4:b0:1c:90:
                    50:5d:03:36:7a:11:b2:4f:50:b8:12:f7:b1:0d:38:
                    10:f2:01:a8:9d:7d:61:c1:bf:8a:eb:d7:3e:de:3c:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3D:DD:D8:50:B3:F6:74:4C:0B:BF:AC:A8:7A:B2:9C:C1:0A:51:B9
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Jj3d2FCz9nRMC7-sqHqynMEKUbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:9c:9d:13:8b:c3:54:41:74:1a:ad:50:13:c3:90:fb:b9:
         83:d5:1e:36:40:2d:63:e5:4b:f7:27:45:33:3f:89:2d:9e:df:
         1a:0b:af:56:39:d4:84:1f:d9:6b:c3:e2:db:d2:1d:54:e9:63:
         b5:e1:55:a7:27:b7:bb:05:ca:bb:b7:82:1b:29:3b:4d:b6:22:
         77:a2:03:09:da:01:6f:41:6e:19:88:ca:e3:ec:c8:ac:ef:0a:
         fa:7d:51:77:5a:c5:ed:b8:45:01:ef:50:ab:3f:04:f6:92:4e:
         76:ac:3c:d3:17:e1:49:d1:2d:be:e7:70:4c:a9:f1:c1:07:02:
         b8:19:83:87:93:a1:8c:64:ab:f3:f2:d4:7e:94:64:f8:0c:f6:
         a9:3a:7f:cc:d9:bd:50:ca:1c:c4:54:7e:65:c3:70:b3:0d:ab:
         9d:5c:52:80:ca:ee:83:c8:06:9e:05:f9:97:1e:09:86:6b:8e:
         fa:18:8d:d8:eb:47:4c:66:cd:f6:c2:a1:76:ee:94:90:e7:a7:
         21:73:ce:cc:05:ac:4a:76:55:75:39:cf:8c:e6:59:58:d5:46:
         43:a4:42:06:f4:28:67:79:80:61:22:8e:68:b8:50:d4:c7:50:
         7b:eb:b1:4a:92:0e:0d:44:f4:46:13:4d:45:bf:68:b7:d8:b8:
         cf:dc:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org