Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/k8TjXqC1OQByL3bK7cwjLBkZzf8.roa
File:                     k8TjXqC1OQByL3bK7cwjLBkZzf8.roa (raw, json)
Hash identifier:          0zR/FEa8iCRUInabutj9Y0s/qwF+E2RLMTxZEj8mFR8=
Subject key identifier:   93:C4:E3:5E:A0:B5:39:00:72:2F:76:CA:ED:CC:23:2C:19:19:CD:FF
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       63
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/k8TjXqC1OQByL3bK7cwjLBkZzf8.roa
Signing time:             Sun 01 May 2022 01:30:55 +0000
ROA not before:           Sun 01 May 2022 01:30:55 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        119.235.236.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:55 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=93C4E35EA0B53900722F76CAEDCC232C1919CDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:99:e9:79:1b:8c:a2:a1:03:63:28:e7:3e:
                    97:89:83:cf:5e:cd:8b:d2:70:6e:3c:24:ee:90:d5:
                    65:8d:e4:74:37:66:34:66:ac:4f:a6:e0:84:1b:90:
                    dc:81:48:d5:44:1e:d7:40:d8:7f:86:e7:c8:db:b3:
                    e6:43:d2:af:aa:2d:c6:43:e3:46:82:66:a6:21:af:
                    4e:a3:37:1c:07:18:94:98:2b:fd:fe:00:fc:66:94:
                    5a:b1:3a:93:e2:e0:d6:9a:fc:5c:56:bb:9b:ec:f2:
                    40:28:e6:bc:bd:f5:45:9e:b0:a1:40:6b:90:6e:8a:
                    0b:f8:95:38:01:62:c5:fd:64:b5:86:bd:b1:9b:72:
                    dd:bf:ed:82:52:c9:6a:36:b0:53:53:66:3a:6a:af:
                    9e:e7:4b:18:9c:94:cf:f3:4a:d2:4f:7f:79:01:56:
                    ac:30:c0:a0:6a:84:26:93:d2:81:85:e2:ed:0d:78:
                    1c:ae:db:91:12:69:68:55:fb:40:cb:6a:15:71:43:
                    70:83:20:11:85:d6:77:17:ff:95:7a:1a:18:8a:22:
                    56:fc:a4:57:e7:33:36:c7:a3:1b:f4:c0:f6:b0:57:
                    8e:89:d1:f1:e4:d9:cc:f2:65:57:9b:2d:6b:fc:7c:
                    ec:40:df:aa:20:75:29:4d:d1:8f:01:f0:0f:04:0e:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:E3:5E:A0:B5:39:00:72:2F:76:CA:ED:CC:23:2C:19:19:CD:FF
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/k8TjXqC1OQByL3bK7cwjLBkZzf8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:27:0f:be:ae:24:0f:01:4b:29:8b:e9:ff:37:bc:14:5a:
         77:c5:d0:c1:5d:f3:4a:15:01:d9:df:e8:e2:18:3d:97:2a:a3:
         ab:98:dc:4d:de:d4:7e:33:7f:88:f3:96:f3:b4:2e:c9:87:70:
         33:0a:ff:14:ca:0e:d8:83:29:6f:b1:5b:e6:e4:02:d9:21:c7:
         25:40:01:c6:cd:00:a4:24:bc:48:2c:00:58:81:39:dd:23:2f:
         db:f6:d6:ff:79:81:08:d5:61:f8:e7:3a:45:a3:f3:13:f5:a1:
         56:48:1c:21:14:d3:0d:3c:ea:ab:16:57:92:a8:f7:09:20:43:
         bc:c9:28:d8:b3:ef:3d:cd:bd:fa:0d:c2:d7:8b:8d:ed:4d:ee:
         35:aa:13:04:b9:98:be:f5:ca:73:2b:98:4a:d0:0a:9f:87:12:
         f0:e5:e4:57:85:a6:29:fc:98:d1:a2:6f:0a:d0:47:93:51:86:
         53:00:d6:fb:ac:34:a7:23:ed:4e:33:be:38:4f:2d:f2:c1:c6:
         a4:0e:68:a4:b1:d0:89:47:8b:a4:8a:f2:3c:83:fa:d4:bf:bd:
         ba:d6:77:a6:21:ad:c5:a7:ea:b0:8e:26:4a:7f:87:96:73:13:
         2b:47:d1:df:22:76:e7:2c:bc:68:61:77:8d:46:df:64:e8:cb:
         56:ae:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org