Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/1vBHJodBtrrRA4MxQO5WQVCwPpU.roa
File:                     1vBHJodBtrrRA4MxQO5WQVCwPpU.roa (raw, json)
Hash identifier:          I3L7fyfh6McGso1jp+GChviN3Mpby+ybvLZH4LXeB/k=
Subject key identifier:   D6:F0:47:26:87:41:B6:BA:D1:03:83:31:40:EE:56:41:50:B0:3E:95
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       40
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/1vBHJodBtrrRA4MxQO5WQVCwPpU.roa
Signing time:             Thu 01 Dec 2022 01:28:50 +0000
ROA not before:           Thu 01 Dec 2022 01:28:50 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        120.93.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:28:50 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=D6F047268741B6BAD103833140EE564150B03E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:ec:2b:57:ce:90:cc:d3:38:27:32:11:80:
                    5e:db:99:c4:cb:2c:d4:ba:49:32:95:db:5e:77:bf:
                    ca:3d:71:02:85:c7:e5:dd:31:f6:0d:c6:f4:f7:f9:
                    ef:03:f3:55:92:65:06:2f:c6:5a:49:ba:49:18:b1:
                    ef:33:f7:c2:cb:86:05:b7:41:b1:11:2c:2d:a9:b7:
                    f4:e8:65:0b:59:e9:4e:90:05:55:c5:cb:00:90:8d:
                    ec:33:23:00:04:2c:80:04:03:21:be:6b:dc:4d:ad:
                    50:21:08:55:12:8d:fe:e8:ac:9c:c0:57:8a:6a:32:
                    65:ba:a8:11:0f:f4:02:25:36:18:67:df:24:3f:6e:
                    87:cd:bc:dc:e8:2e:d2:e9:de:4e:bf:e9:c2:4b:6b:
                    5a:58:c9:7e:5b:b9:9b:63:47:87:ac:9a:3d:91:41:
                    07:56:3d:89:a6:a7:8b:e9:2d:7a:b9:c9:0a:de:96:
                    8b:35:66:cc:2d:88:12:76:8d:37:97:87:45:a0:93:
                    82:b5:1f:07:86:7d:a5:4f:72:51:73:0d:dd:3b:ec:
                    26:a7:7d:8d:8b:c1:d8:74:df:1e:78:bc:74:7d:b3:
                    35:ac:54:06:60:c3:e1:66:81:24:33:26:6f:32:a2:
                    36:87:5b:c6:df:5d:0a:1c:d7:9e:54:a3:b4:15:80:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:47:26:87:41:B6:BA:D1:03:83:31:40:EE:56:41:50:B0:3E:95
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/1vBHJodBtrrRA4MxQO5WQVCwPpU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:73:4d:c6:35:42:ea:fb:77:87:f5:8e:c4:b4:e0:76:3e:
         69:eb:0e:31:9d:e5:13:9d:3c:cf:7d:a8:e8:89:a5:00:84:58:
         d3:c5:2c:4c:32:7f:36:93:cd:7a:f4:d9:7e:d5:c8:b6:5f:b2:
         fc:f6:8d:54:3f:2e:98:b0:f0:46:2e:8b:cc:f0:19:10:de:ab:
         dd:db:be:8d:c8:0f:ec:95:4f:fb:b8:6c:37:2d:e4:a3:ee:28:
         54:3e:29:89:18:ed:58:db:ba:db:27:08:9a:56:c6:5f:62:ca:
         95:6d:b5:1a:61:d6:d1:73:ad:9d:42:1e:fc:9b:8e:26:c7:fe:
         64:80:b1:9e:af:8a:83:be:db:36:d7:73:d4:f9:28:ad:39:f7:
         e1:63:36:f4:9f:e0:02:f1:bf:9c:c3:8a:9b:c7:80:14:0b:87:
         96:db:93:4f:0a:fa:4c:b8:9f:bb:e3:ff:0f:cd:3d:0d:41:96:
         c4:df:67:66:bd:66:1d:06:25:fd:55:91:8e:44:9f:b6:f3:26:
         5b:fe:19:38:58:95:a4:c1:30:f3:a1:60:c7:d7:52:41:8a:bd:
         28:21:79:15:f8:e7:29:1a:cf:03:92:99:42:61:c5:5c:b0:15:
         5e:ca:9d:1c:ee:f3:25:42:4b:18:0c:7e:79:96:1c:0b:53:8d:
         17:b7:5c:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org