Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/Ey1Epal9de-1-eUgZ1tj7NfafWk.roa
File:                     Ey1Epal9de-1-eUgZ1tj7NfafWk.roa (raw, json)
Hash identifier:          wDsVHZCPYmSZq2pKVm9qNoMHXzYEUQsL16d15dbEn/Q=
Subject key identifier:   13:2D:44:A5:A9:7D:75:EF:B5:F9:E5:20:67:5B:63:EC:D7:DA:7D:69
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       25
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/Ey1Epal9de-1-eUgZ1tj7NfafWk.roa
Signing time:             Sat 01 Jan 2022 01:31:40 +0000
ROA not before:           Sat 01 Jan 2022 01:31:40 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        210.198.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:40 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=132D44A5A97D75EFB5F9E520675B63ECD7DA7D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:23:00:b0:1e:29:95:7d:26:e8:98:2e:1d:
                    8d:56:b4:0b:a0:2b:2d:1e:03:59:a7:2f:f8:7c:65:
                    b1:c0:a3:55:b7:48:f0:a8:8b:1a:25:8b:cc:c0:9d:
                    0a:6f:7d:7c:0d:57:93:57:e4:32:9c:77:1b:36:57:
                    2b:06:cf:4f:bf:b3:b8:9c:f0:49:8e:26:75:93:e6:
                    eb:88:d6:21:d2:83:2f:4c:10:72:70:db:64:91:43:
                    e2:de:2c:82:65:82:76:53:fc:0a:b1:73:f6:5a:52:
                    71:5f:79:3d:5b:b6:72:0a:08:6a:57:03:ea:03:a1:
                    ab:7b:dc:e2:dd:a7:4c:5d:7c:23:76:18:3f:32:0b:
                    d3:0f:7f:06:7d:fc:b9:8d:21:da:b8:5f:54:46:5d:
                    c1:af:68:5a:a4:b2:4d:fd:21:83:b8:7a:2a:95:c9:
                    98:dc:06:e3:97:6a:da:2f:99:0a:0b:b4:fb:3a:9c:
                    d6:c9:52:4d:03:da:4f:f9:ae:fe:e2:98:6d:a1:a8:
                    f8:85:9f:c9:0f:b4:b9:08:54:53:13:5c:ee:27:89:
                    43:c2:bc:1e:60:8f:24:eb:7e:22:11:cb:03:75:c1:
                    35:a2:46:60:46:dd:9a:cf:c9:47:b0:98:bb:c1:3a:
                    42:0f:37:9b:92:b3:13:35:ad:29:38:03:1d:47:b3:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:44:A5:A9:7D:75:EF:B5:F9:E5:20:67:5B:63:EC:D7:DA:7D:69
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/Ey1Epal9de-1-eUgZ1tj7NfafWk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:d8:eb:16:63:23:94:52:86:75:31:62:ac:f4:fb:3c:03:
         01:32:ac:34:da:2e:26:69:94:59:f3:7a:a9:fc:81:e1:73:97:
         4a:ed:2d:31:76:b4:9a:b4:7e:9f:d2:8b:fd:b1:a9:3c:db:fb:
         a2:9b:24:a3:4a:8a:73:6e:8b:3f:23:f6:75:bd:c9:20:5b:fd:
         28:9c:95:1b:af:e7:8c:86:f1:65:ed:4d:bd:4d:68:5a:41:7d:
         95:cb:fe:47:bd:53:2b:f0:fa:7c:35:a1:b2:90:57:cc:c5:d2:
         a2:0a:ab:ec:48:5e:1b:0b:e7:49:c4:a9:e1:71:22:37:9d:57:
         f3:e1:79:21:70:0d:96:dd:2a:88:bb:7c:23:46:cf:7f:31:1b:
         ee:54:2f:97:92:f1:da:a2:68:d8:02:4b:f4:4f:26:96:c9:f4:
         c2:47:ca:fc:7a:ee:28:aa:43:1a:a6:2d:22:13:1a:f3:88:94:
         0c:13:cf:59:a7:90:d0:2e:e6:92:d4:1d:83:7d:83:9a:44:06:
         ca:ea:72:d3:a8:f1:64:08:19:fa:8c:95:fb:d1:d9:47:b7:f1:
         52:34:d1:f2:17:64:70:77:84:86:df:e5:4d:af:3b:c3:8d:c2:
         d6:b5:bf:ff:53:14:0c:8b:ac:96:62:78:92:a4:e1:0c:1a:0c:
         a3:a2:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org