Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/eHsx7d2xeYE1doLbyJLywFRu5bc.roa
File:                     eHsx7d2xeYE1doLbyJLywFRu5bc.roa (raw, json)
Hash identifier:          yU63XX8c7xBAcke7TOosILxblDzDhuUuJB3seIJMoX8=
Subject key identifier:   78:7B:31:ED:DD:B1:79:81:35:76:82:DB:C8:92:F2:C0:54:6E:E5:B7
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       4F
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/eHsx7d2xeYE1doLbyJLywFRu5bc.roa
Signing time:             Thu 13 Apr 2023 09:53:35 +0000
ROA not before:           Thu 13 Apr 2023 09:53:35 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     45680
IP address blocks:        218.100.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Apr 13 09:53:35 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=787B31EDDDB17981357682DBC892F2C0546EE5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:db:00:5c:15:ea:33:cc:14:bc:c3:e0:ad:
                    76:e9:3a:27:45:ab:ef:0b:09:ff:74:a1:7e:00:cc:
                    64:9c:90:a9:7b:45:50:29:a5:ef:d7:2f:b8:64:4c:
                    d2:8b:e4:ac:47:70:20:3c:a5:69:9c:0e:0d:62:fd:
                    9a:dd:a3:0d:e2:32:5a:94:46:fc:0e:76:f4:aa:ec:
                    23:7e:06:44:59:de:87:33:56:42:76:62:7d:87:df:
                    26:97:7d:9f:9b:ee:7c:ce:e8:b3:dd:65:cc:58:35:
                    f5:38:02:a0:93:0f:3f:59:8a:5f:a2:26:d0:60:30:
                    13:a7:ff:d0:b3:a6:79:14:e6:55:b9:40:60:17:f9:
                    dc:f6:df:e0:99:cd:13:5b:32:8a:e5:75:2e:40:8f:
                    5b:7c:0d:76:8b:b5:7b:85:f9:70:1a:d1:58:a0:c5:
                    8c:69:47:70:10:7e:12:b7:54:e9:00:ce:af:f7:c1:
                    fb:39:36:d3:d7:44:5c:20:2a:a1:fa:05:23:a6:ea:
                    93:28:fa:63:32:47:c9:5f:28:26:96:be:a7:76:04:
                    7a:f8:5e:1a:80:d0:cd:d2:6b:ec:dc:5c:66:fc:2b:
                    1f:7a:f6:f1:1f:24:8e:f9:8f:82:f4:ff:8a:c3:9e:
                    81:75:03:20:cb:e7:5f:23:e1:b0:4f:4a:69:37:c7:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:31:ED:DD:B1:79:81:35:76:82:DB:C8:92:F2:C0:54:6E:E5:B7
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/eHsx7d2xeYE1doLbyJLywFRu5bc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:52:99:16:8b:35:85:fc:8c:53:de:cd:8b:86:c3:30:18:
         e6:f1:ba:ff:61:0f:5a:3e:1c:95:e3:9d:98:ee:da:16:d9:f1:
         c9:2b:d4:32:9d:8c:3e:63:82:9a:c8:84:d9:ad:3f:b4:b1:b8:
         cc:54:63:59:4c:0b:7f:e6:a2:dd:41:fd:6e:65:84:55:d4:69:
         b5:a2:e3:e8:5f:08:eb:9a:4d:e0:c0:33:d9:2f:cc:df:5d:66:
         69:b7:a7:5f:75:87:84:84:cb:ad:b6:3a:52:ec:57:4f:14:42:
         e4:aa:f3:a1:08:35:6a:6f:1a:e3:35:08:52:76:8a:58:db:dc:
         37:a5:78:c6:27:59:98:ee:cb:5b:51:59:28:5a:18:65:bc:53:
         40:cf:0a:74:be:75:dd:5d:59:a3:e1:f9:2e:c9:a6:8a:27:cf:
         fc:a1:6e:06:d2:9e:fa:8b:a7:ea:26:6b:af:3e:49:47:34:e3:
         32:e9:b8:6b:12:77:a3:e3:f8:42:e9:a8:db:1a:18:91:49:4b:
         46:98:3a:03:52:04:2d:25:05:2e:d2:f5:37:b6:05:71:69:6f:
         b7:64:17:29:3a:b4:c0:34:2c:29:1b:89:5d:f5:a8:f7:dc:f0:
         f4:b9:05:fb:12:eb:92:30:30:d5:bf:66:64:96:66:d7:e0:9c:
         2a:ce:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org