Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/WuHwVeddayyXsWTCPp3GF8v7L6Q.roa
File:                     WuHwVeddayyXsWTCPp3GF8v7L6Q.roa (raw, json)
Hash identifier:          dr0+y3xR5SgQoNOhPsaGWT7P3+aT5Ksrh4fVCbJH7yg=
Subject key identifier:   5A:E1:F0:55:E7:5D:6B:2C:97:B1:64:C2:3E:9D:C6:17:CB:FB:2F:A4
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       3F
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/WuHwVeddayyXsWTCPp3GF8v7L6Q.roa
Signing time:             Sun 01 May 2022 01:30:43 +0000
ROA not before:           Sun 01 May 2022 01:30:43 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     45680
IP address blocks:        218.100.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: May  1 01:30:43 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5AE1F055E75D6B2C97B164C23E9DC617CBFB2FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:e9:56:b4:b0:ea:e6:e9:06:fb:10:93:20:
                    a2:36:5f:48:ef:5a:fe:10:68:b3:19:bb:db:c2:48:
                    fa:99:90:67:a6:25:d1:06:28:8c:0e:34:32:91:16:
                    36:b3:1e:2f:55:ac:7f:8b:ec:a9:8c:f4:f2:ec:7a:
                    18:f1:68:32:fe:da:97:53:0c:9b:60:2d:45:6d:45:
                    64:9c:56:b1:20:b8:84:ca:18:3e:49:05:bf:cf:6d:
                    79:9a:f3:e0:b2:14:a9:a0:4f:80:80:e0:e4:db:2c:
                    87:59:7a:71:3f:e2:5e:34:c2:bd:96:a5:63:f2:16:
                    4f:05:f8:d5:3b:17:15:28:06:67:0b:92:59:02:23:
                    d6:50:ac:73:79:97:5d:80:43:0b:b1:d7:60:55:0b:
                    59:02:d9:ab:94:51:5f:df:a5:b1:02:0a:ba:72:7b:
                    67:9e:c8:a5:34:78:c9:2b:08:e2:cb:2b:0b:22:d2:
                    db:20:3d:7c:7f:85:70:d7:d3:e9:f4:42:a8:6a:27:
                    82:23:6c:5d:00:c7:bd:9b:ef:8e:af:c3:a3:cd:8d:
                    13:42:fc:e7:b7:05:21:18:d0:85:db:aa:68:fc:51:
                    c0:cb:c4:28:f5:54:0f:66:1d:71:39:53:6b:d4:71:
                    2c:9b:4e:52:7c:e1:a2:d5:92:61:33:de:f0:24:51:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:F0:55:E7:5D:6B:2C:97:B1:64:C2:3E:9D:C6:17:CB:FB:2F:A4
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/WuHwVeddayyXsWTCPp3GF8v7L6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:87:19:f9:01:b4:bc:5e:a3:6c:8b:8b:e9:8f:4f:37:b9:
         26:49:29:d3:da:10:d9:05:78:c6:68:8c:97:71:17:37:fc:3e:
         eb:ae:6d:e8:20:23:62:50:b4:7f:06:b7:cf:d9:6a:15:fb:96:
         62:8f:28:8d:76:d6:b1:6c:5c:66:7f:a1:52:b7:44:32:d3:a7:
         82:ca:0e:98:f5:10:39:15:49:a2:f1:96:80:bb:54:95:5b:b7:
         2f:4a:b4:ba:06:b4:0c:5b:7b:b2:11:93:b1:b8:62:61:63:03:
         03:9f:01:e4:1f:b8:95:03:d4:a2:2e:1d:be:00:23:78:02:1f:
         30:d2:a5:2e:63:85:26:cd:9c:ab:3c:1d:df:4e:47:ba:ec:47:
         3c:ef:dc:5d:e9:9d:8d:d3:e8:1f:e4:93:cc:b2:aa:3e:24:c2:
         4d:17:c9:a0:2d:d4:17:c0:50:86:f0:21:42:20:cd:fa:26:94:
         ea:f8:64:01:86:fe:e5:05:db:94:80:c4:92:36:19:66:df:8a:
         70:bc:ec:70:d2:d9:10:f4:8e:64:48:30:0f:f8:ec:c7:21:ef:
         2b:97:47:91:72:9f:36:cf:8f:44:1e:03:3d:cd:bc:af:09:2e:
         32:a1:5d:7e:7f:2a:f7:ba:44:9a:34:a8:0f:4f:89:93:a5:69:
         db:aa:bd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:21 2023 by rpki-client on console-ams.rpki-client.org