Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/-vgDMuHuQFjN81WQ8xCEPSx1Zsc.roa
File:                     -vgDMuHuQFjN81WQ8xCEPSx1Zsc.roa (raw, json)
Hash identifier:          oYySG7qOWRlMG2ZJfgo+JMZtzOuSvSodiNeTwx7W81s=
Subject key identifier:   FA:F8:03:32:E1:EE:40:58:CD:F3:55:90:F3:10:84:3D:2C:75:66:C7
Certificate issuer:       /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial:       2A
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/-vgDMuHuQFjN81WQ8xCEPSx1Zsc.roa
Signing time:             Wed 05 Apr 2023 06:29:42 +0000
ROA not before:           Wed 05 Apr 2023 06:29:42 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     3491
IP address blocks:        203.170.52.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
        Validity
            Not Before: Apr  5 06:29:42 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FAF80332E1EE4058CDF35590F310843D2C7566C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:7c:03:94:ec:25:a5:02:5e:8a:c5:ad:01:
                    1f:d4:02:a8:c6:f7:10:e4:9f:bb:e8:b1:9e:f3:82:
                    3f:af:18:90:9a:af:23:fe:c5:fb:7c:ed:bc:18:9c:
                    f2:b5:e7:55:a8:b4:c1:ee:31:d2:a6:01:1b:ef:69:
                    67:d4:e7:71:1a:d8:1e:2f:93:3d:50:20:d6:86:44:
                    b1:40:21:0a:a2:49:9e:0d:35:2e:69:94:9e:f8:c0:
                    36:bc:e6:4f:f1:2f:34:03:38:09:79:79:81:4e:93:
                    d2:13:07:19:a7:2b:c9:0f:00:fc:56:66:cc:5b:3a:
                    31:fe:d5:e7:9f:05:e5:3f:a4:78:17:b9:4d:9c:7b:
                    28:1d:88:9c:67:96:51:26:ca:32:67:ef:8e:5f:7b:
                    b1:56:8b:32:40:45:0d:17:40:28:89:76:30:b0:ea:
                    75:77:19:84:c6:e1:b7:df:2d:2b:2b:81:f0:b1:cc:
                    4a:e3:5e:db:09:7f:72:81:e6:53:09:af:5c:5a:4f:
                    0d:81:24:69:31:8f:b5:a7:4d:4c:8c:e0:b2:01:d6:
                    2d:64:1d:3d:6a:d5:89:eb:3d:b8:e4:0f:2a:aa:a1:
                    b6:27:83:80:6d:6c:59:1c:54:ff:82:db:06:a9:a1:
                    96:37:b8:38:39:49:a7:e8:e3:ba:f3:c3:31:62:7c:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:03:32:E1:EE:40:58:CD:F3:55:90:F3:10:84:3D:2C:75:66:C7
            X509v3 Authority Key Identifier:
                keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/-vgDMuHuQFjN81WQ8xCEPSx1Zsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:04:31:a6:67:b9:e3:58:49:80:9c:01:df:3f:28:bc:47:ab:
         6f:d8:44:49:56:0e:31:be:b5:11:45:08:9d:98:da:0d:ae:6b:
         46:8d:e5:6c:d0:ed:b7:f5:f7:62:b1:0a:2f:c8:e4:1e:ee:b9:
         43:a3:dc:9c:5b:f0:a8:65:7f:2a:18:26:bc:cb:f0:b3:79:fa:
         85:2f:ed:d8:ef:39:96:79:42:1b:4c:ba:11:6f:3c:4f:a3:74:
         72:05:8f:6c:a8:14:9a:88:a2:9f:1c:b7:c5:b9:14:56:93:79:
         e0:7a:3f:83:73:17:a5:03:88:6e:c1:26:b0:a1:5c:30:0e:85:
         81:62:9b:d1:f0:dd:c7:df:72:45:40:49:9d:65:6c:f5:eb:79:
         e7:ee:d1:5d:2b:be:6e:d7:f8:20:bb:54:97:86:12:d1:4b:6a:
         51:97:56:73:ca:e8:55:c3:0c:f1:1a:0b:78:1b:b8:35:cf:6c:
         c3:d6:52:cc:1d:e1:65:25:04:70:ea:a3:2d:9a:de:5b:98:53:
         39:c7:1f:a2:c4:27:15:7d:7b:70:a3:45:57:13:c2:7b:42:f7:
         3d:a1:50:14:25:52:f4:9e:9a:6b:a8:37:fc:f3:1d:6a:ef:02:
         6f:29:bd:4d:2a:54:19:5a:8f:a8:00:cf:8d:e3:eb:12:68:04:
         de:e9:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org