Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/5Is2amcG7LRFgvTdg-1jVq5PQm4.roa
File:                     5Is2amcG7LRFgvTdg-1jVq5PQm4.roa (raw, json)
Hash identifier:          2ixhWux31KAx2MhSvU7pvihrpk0laxjXe1cxUZE6xXM=
Subject key identifier:   E4:8B:36:6A:67:06:EC:B4:45:82:F4:DD:83:ED:63:56:AE:4F:42:6E
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       2A
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/5Is2amcG7LRFgvTdg-1jVq5PQm4.roa
Signing time:             Sat 01 Jan 2022 01:31:42 +0000
ROA not before:           Sat 01 Jan 2022 01:31:42 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        210.155.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:42 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=E48B366A6706ECB44582F4DD83ED6356AE4F426E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:dc:3e:36:2d:9a:dc:f5:6d:8a:63:22:08:
                    52:4e:42:d5:9a:e4:37:98:26:bb:73:2b:92:a8:93:
                    51:3d:f2:5d:83:cc:c1:3b:74:fe:90:f3:be:47:1c:
                    57:7a:31:19:58:4c:58:d3:3b:4f:27:1b:b2:d8:71:
                    10:2a:95:a9:49:e7:1e:1e:dd:d2:fd:44:c9:f3:a6:
                    8f:f2:5d:35:26:69:9d:b8:3e:95:88:1b:da:1a:dd:
                    5f:21:32:34:3b:6b:b5:8a:b4:5d:3b:b3:2d:c8:94:
                    d5:44:58:4a:f7:dd:2d:9a:d7:31:4c:13:c5:2c:e2:
                    f3:2f:8c:97:ef:69:2f:4f:9a:b7:af:45:7d:57:c5:
                    e7:0b:b5:c3:a9:5b:df:59:03:34:68:81:f9:91:c3:
                    f2:a8:df:88:d6:a4:85:31:75:e0:b2:cd:18:02:5f:
                    e9:16:0e:d7:ec:dc:f7:f3:eb:e3:ef:9e:5b:1e:99:
                    4a:b6:45:16:45:82:4e:4c:ef:ea:db:e3:36:3a:75:
                    dd:1c:48:65:1b:88:c9:25:8c:aa:b8:52:66:f4:83:
                    7a:4b:4b:f5:95:98:59:6e:2c:8e:58:9b:ef:d9:26:
                    f9:ce:58:84:62:2f:44:f2:38:f2:4c:7c:a3:14:72:
                    fe:08:21:a3:1c:a4:da:82:0d:d0:73:80:b5:d4:31:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8B:36:6A:67:06:EC:B4:45:82:F4:DD:83:ED:63:56:AE:4F:42:6E
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/5Is2amcG7LRFgvTdg-1jVq5PQm4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:68:57:41:07:5f:d7:db:20:46:fb:96:e3:0c:a3:03:e0:f4:
         c4:e6:24:a6:58:11:7a:62:54:54:90:94:4e:2d:4f:70:aa:cf:
         a0:0e:8c:4b:4d:dc:08:01:66:c2:ae:19:f2:d8:80:46:0f:cc:
         21:df:e0:f5:3d:cb:3e:33:d5:43:96:b8:65:b5:6e:b7:52:7d:
         98:04:d1:78:0c:22:16:7a:66:27:31:fd:2e:ee:87:a0:ef:3b:
         92:b4:6c:94:00:8f:65:5b:3d:24:34:13:22:ca:d8:22:6b:8a:
         bc:79:ba:18:c1:cc:cc:02:74:e1:72:6f:4c:c6:93:a3:82:42:
         57:af:b0:33:b7:14:c2:57:43:fc:fe:82:b6:e8:45:ba:b6:32:
         eb:36:19:22:fa:ab:80:38:06:58:67:2a:cf:7b:8f:c6:84:c2:
         3d:80:b6:6f:d6:0f:50:7c:ce:26:2b:57:dc:72:7f:ea:96:18:
         59:e2:61:a0:56:78:f6:b8:fe:c9:99:1f:71:a4:27:b9:3d:e8:
         12:bc:43:35:94:db:75:06:86:88:20:44:a4:ee:49:f9:86:7f:
         74:d9:d1:3f:23:a1:f6:c8:69:7e:cc:7a:ba:df:4a:f0:ce:32:
         98:5c:cb:36:64:64:da:5c:c4:c4:9c:68:e8:84:0a:78:f9:6b:
         a0:6d:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org