Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/Pir1V_V1A_BhqNEKFreR5ahfYLM.roa
File:                     Pir1V_V1A_BhqNEKFreR5ahfYLM.roa (raw, json)
Hash identifier:          N0DOYkGgpj95lwV4wLpz/lPtsESX29G4HsimO8Dj6Xs=
Subject key identifier:   3E:2A:F5:57:F5:75:03:F0:61:A8:D1:0A:16:B7:91:E5:A8:5F:60:B3
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       3F
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/Pir1V_V1A_BhqNEKFreR5ahfYLM.roa
Signing time:             Thu 01 Dec 2022 01:28:50 +0000
ROA not before:           Thu 01 Dec 2022 01:28:50 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        120.89.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:28:50 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=3E2AF557F57503F061A8D10A16B791E5A85F60B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:fd:e2:65:33:72:65:68:aa:c3:a1:5d:32:
                    0d:4f:7a:0e:a8:d6:c9:8d:f1:fa:a8:6e:4b:b5:00:
                    ae:a3:8e:38:0e:5d:cb:76:d3:26:e7:5e:fa:05:28:
                    96:15:a5:2d:cb:3d:42:34:7a:16:fd:70:a0:49:06:
                    31:b6:e6:c6:39:a2:f4:c9:45:4c:89:20:29:d8:2d:
                    7d:4f:5b:00:94:9e:2b:a6:dd:c0:0a:3f:0b:ef:14:
                    2d:d2:83:54:67:4a:b3:31:ff:2b:9c:f4:65:e5:06:
                    4b:bb:f8:1f:f8:36:4a:0c:5e:b2:5f:46:07:c3:3b:
                    92:53:b3:d1:07:bc:73:a9:e6:f0:0b:04:b0:78:1e:
                    7d:76:ce:bc:57:68:d8:e0:5d:73:0f:44:a6:84:99:
                    9f:e1:a6:42:75:67:ae:85:d3:8d:65:c2:59:55:a7:
                    b5:fc:c8:17:56:ef:59:ac:f6:7b:63:7f:5c:eb:63:
                    c4:93:ca:73:2c:81:fb:21:0d:33:9c:93:00:f3:54:
                    6f:e8:61:e0:72:ff:6c:1b:d5:9b:51:1d:6d:37:b6:
                    fb:dd:cd:7c:88:05:d0:02:31:1e:c3:ac:57:cf:b0:
                    3e:a5:da:f3:b3:1e:21:35:9f:27:f4:f8:cd:a9:f3:
                    9d:84:48:0a:28:a1:46:88:8a:b2:ad:29:40:81:c9:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:F5:57:F5:75:03:F0:61:A8:D1:0A:16:B7:91:E5:A8:5F:60:B3
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/Pir1V_V1A_BhqNEKFreR5ahfYLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.89.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:4c:10:d8:3e:ff:2a:d1:c1:1e:b5:26:93:dc:45:ee:66:
         6f:90:32:24:71:35:b2:ea:ad:64:11:e0:e2:4a:df:ae:c0:9a:
         af:8f:99:91:d9:90:7b:b6:bb:d6:21:bb:76:96:8c:71:0b:e9:
         22:1b:58:54:31:6d:6e:a0:e3:5f:7a:32:cf:a1:b3:f6:66:3a:
         3c:af:b2:39:63:22:6b:76:49:5e:41:5f:52:83:f4:5f:6b:0f:
         57:69:d1:b8:6e:98:2b:25:1d:e3:0e:1c:b9:76:fa:e3:97:4d:
         ad:cf:65:cd:80:b7:0b:a6:dc:77:79:d4:c2:35:f4:ea:8b:78:
         09:b0:83:4f:8f:31:4b:50:cf:06:ea:3c:87:38:c1:cc:e1:3f:
         72:21:96:8c:84:85:85:0f:58:27:20:07:72:7d:10:88:35:6e:
         94:16:ed:ca:68:fd:88:dc:3c:2f:4d:58:8b:61:26:ef:5c:91:
         88:7e:bc:5a:f7:39:3a:cb:fc:13:a1:52:69:e0:65:01:d2:9c:
         5d:3f:eb:dc:35:c3:8f:d5:a8:bd:eb:3a:a4:88:04:af:4f:ba:
         a7:94:a7:c4:35:9b:c6:3d:cf:8e:9f:a4:fb:2e:03:71:d1:a0:
         fe:a5:e0:43:22:15:2e:8f:77:25:0a:45:d5:c7:14:11:11:03:
         f0:59:a8:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org