Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/vZhQYzFpouSsEW2iCe44PuOsnJI.roa
File:                     vZhQYzFpouSsEW2iCe44PuOsnJI.roa (raw, json)
Hash identifier:          OnvlyMJSHL3streM6vpFGaYK67R6mWBUUWeGRp/UNy8=
Subject key identifier:   BD:98:50:63:31:69:A2:E4:AC:11:6D:A2:09:EE:38:3E:E3:AC:9C:92
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       26
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/vZhQYzFpouSsEW2iCe44PuOsnJI.roa
Signing time:             Sat 01 Jan 2022 01:31:40 +0000
ROA not before:           Sat 01 Jan 2022 01:31:40 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        211.13.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:40 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=BD9850633169A2E4AC116DA209EE383EE3AC9C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:58:45:59:92:e3:06:45:f0:8c:58:28:6b:
                    13:c8:13:34:b6:b7:e9:58:92:38:3e:f4:31:81:0d:
                    03:58:04:2c:a6:26:2e:36:e3:0c:c8:43:18:3a:ca:
                    2e:50:1f:76:d6:e6:28:23:01:24:9c:d4:d1:8a:ae:
                    59:52:ea:4d:b3:5a:4e:6d:bc:e2:19:14:65:e5:4b:
                    7f:22:d6:1c:ab:c1:d7:83:1e:b5:2b:9a:53:33:04:
                    f0:8c:f6:19:10:6a:50:45:f2:01:45:06:5c:6a:ee:
                    78:fc:b8:6e:d5:67:d1:bc:54:b6:e8:00:a8:27:94:
                    72:42:58:f1:26:98:91:0f:6c:47:3d:e0:ce:6e:99:
                    b1:0f:6c:9f:f9:dd:16:e5:62:53:00:08:ef:a8:b9:
                    46:50:92:43:74:ff:43:a6:d4:29:13:33:c0:34:8a:
                    0d:7a:dc:6a:3a:c0:b3:1d:08:7b:d6:81:a8:c8:9a:
                    0f:c1:39:db:e3:05:c0:13:9c:f8:37:db:dc:d6:24:
                    82:70:84:ef:06:26:40:f4:90:8e:15:86:26:40:19:
                    15:2d:56:f0:44:a0:da:ab:35:76:fe:2c:7a:7d:7f:
                    1c:8e:ef:13:49:bd:08:8b:b9:dd:3a:06:26:db:26:
                    8e:61:1c:91:09:09:3f:e9:72:93:f9:90:96:98:96:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:50:63:31:69:A2:E4:AC:11:6D:A2:09:EE:38:3E:E3:AC:9C:92
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/vZhQYzFpouSsEW2iCe44PuOsnJI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:ab:59:f0:a0:a4:bc:54:93:5c:05:11:56:a5:ba:44:20:
         a0:3e:f4:49:78:27:09:1d:e6:ba:78:8f:38:43:b9:eb:76:e6:
         ca:88:83:5c:d3:dd:25:e8:de:f9:33:b6:d2:e7:e5:b1:8c:60:
         61:60:e8:d1:e6:22:d8:de:53:33:49:77:68:9e:7a:50:b2:fd:
         9f:d3:1c:b5:e2:53:bf:51:dd:90:e1:ab:60:53:20:d0:90:8e:
         27:30:83:d9:a3:f7:f0:50:78:d4:c5:85:13:1b:1f:28:ca:7d:
         ca:76:be:6f:92:65:81:7d:4c:24:72:94:5d:03:71:86:f2:38:
         c5:c2:a6:39:67:50:a3:c7:73:a9:35:4a:7e:d1:d4:98:d4:6d:
         c4:82:11:3d:52:3b:7b:37:40:84:79:f9:12:c8:3c:18:ad:7a:
         c3:da:3d:58:bd:9c:6d:06:8a:5a:e1:bb:8c:89:7f:f9:f8:8e:
         31:9c:e2:38:80:5f:8c:57:61:37:57:3e:7c:24:4b:e6:8b:00:
         bb:58:58:10:4a:c2:0d:21:36:99:68:72:83:f1:0b:d7:4b:1e:
         a3:8d:2d:25:c5:c1:f1:f7:81:78:5b:4f:65:81:b3:ec:66:94:
         24:4e:6f:9a:26:b7:5c:46:27:55:59:44:37:bb:60:ae:f9:51:
         03:2e:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org