Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/OAOP7K3IHa1pigoqI3uBl9zaq9I.roa
File:                     OAOP7K3IHa1pigoqI3uBl9zaq9I.roa (raw, json)
Hash identifier:          1P4NORMOuUmNEHAL1lm5bCY2gBRsNelH1T2T2zgHwTY=
Subject key identifier:   38:03:8F:EC:AD:C8:1D:AD:69:8A:0A:2A:23:7B:81:97:DC:DA:AB:D2
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       27
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/OAOP7K3IHa1pigoqI3uBl9zaq9I.roa
Signing time:             Sat 01 Jan 2022 01:31:41 +0000
ROA not before:           Sat 01 Jan 2022 01:31:41 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        113.192.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:41 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=38038FECADC81DAD698A0A2A237B8197DCDAABD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:a2:a2:04:99:fc:10:78:86:e9:2b:44:4d:
                    24:4f:ad:bd:e7:13:fd:00:49:05:6a:8f:78:76:ee:
                    91:d7:4b:6b:9c:bc:43:c5:6e:84:3b:de:4b:28:02:
                    56:09:a8:ee:4c:6d:2f:52:b9:8b:64:15:be:fa:e3:
                    a7:5d:fa:8b:0d:60:45:55:b6:45:03:33:b8:7f:06:
                    f4:03:9c:c6:1e:81:e0:b7:f6:10:e2:76:fd:fb:a9:
                    0e:74:ce:0b:2d:d9:b3:85:3d:93:94:f6:fa:d1:38:
                    8f:28:f4:eb:36:3b:21:47:50:c9:58:68:63:a8:22:
                    95:95:66:4a:03:23:22:fc:49:db:a7:ed:8b:eb:ba:
                    f7:4e:ee:61:6d:dd:0c:bc:32:81:89:f0:2c:c0:de:
                    56:a7:d0:e0:41:a5:05:9f:60:d8:f5:5a:69:6a:06:
                    88:15:bd:92:eb:6d:40:2b:c4:4e:a4:0f:42:0c:60:
                    6e:04:01:90:4b:ed:3d:f6:44:76:c7:ca:63:68:b3:
                    21:f3:a0:11:19:e8:9c:a4:51:89:cc:a4:01:c3:76:
                    ba:3f:3c:85:0b:f6:07:51:01:3a:06:64:f4:19:c6:
                    be:fd:48:d9:7d:9f:79:c1:d8:44:cc:11:be:a3:28:
                    b8:e5:b0:c1:bb:d4:c2:c2:6c:ec:f6:bc:59:2e:9b:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:8F:EC:AD:C8:1D:AD:69:8A:0A:2A:23:7B:81:97:DC:DA:AB:D2
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/OAOP7K3IHa1pigoqI3uBl9zaq9I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bd:18:dc:dd:f3:bb:83:9b:79:52:61:7b:9e:f2:f3:e9:db:cf:
         44:2e:08:d2:e8:56:09:c7:0b:90:8a:f5:7d:40:c6:2e:7c:17:
         65:9b:27:5b:0d:09:51:73:41:03:0e:42:e6:c6:bd:39:46:5c:
         fc:d6:9e:de:76:4b:1c:ff:50:e2:88:af:e7:e0:50:f6:e4:49:
         d0:da:0e:5f:11:58:d1:bd:0f:f5:56:1a:13:66:fb:e9:cb:75:
         6c:32:5a:f6:ec:ba:31:87:55:1c:57:11:8c:c3:b0:56:89:8e:
         eb:5b:1d:ce:4b:46:0a:33:14:b1:1f:5d:d6:76:4c:36:28:9c:
         66:72:ea:af:12:08:68:4b:0b:9f:df:14:02:95:b0:75:1b:e9:
         b9:74:6d:2f:d8:14:db:21:49:dd:89:85:1f:c3:7a:b9:8e:7a:
         38:1f:4c:ad:9e:dc:dd:0d:95:58:25:b8:c2:a4:dc:13:6e:b3:
         b3:44:25:c2:8c:3d:5c:65:d2:69:4e:8b:73:a4:4f:82:e3:b3:
         da:c5:54:f4:98:98:ce:bb:2d:4a:da:c2:2d:3c:66:45:73:73:
         7d:ed:4b:9a:44:30:f6:ea:56:cf:40:91:2b:a3:59:ff:10:1b:
         ab:88:80:d0:3a:01:43:8e:7e:e4:54:12:9c:f5:44:08:44:74:
         3e:80:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org