Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/_jUfhBPjgx-8Y2iwpvtB39CTcAw.roa
File:                     _jUfhBPjgx-8Y2iwpvtB39CTcAw.roa (raw, json)
Hash identifier:          bShKhCtAhcgSKdK1ZkeRRiruF+DBiSwW7uGjBVL+7eY=
Subject key identifier:   FE:35:1F:84:13:E3:83:1F:BC:63:68:B0:A6:FB:41:DF:D0:93:70:0C
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       29
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/_jUfhBPjgx-8Y2iwpvtB39CTcAw.roa
Signing time:             Sat 01 Jan 2022 01:31:42 +0000
ROA not before:           Sat 01 Jan 2022 01:31:42 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        120.93.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:42 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=FE351F8413E3831FBC6368B0A6FB41DFD093700C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:0e:ab:30:e0:a9:a7:15:b5:f7:44:2f:d6:
                    bd:24:5f:39:64:30:48:02:bd:f3:e3:e6:0f:6c:aa:
                    49:2e:ab:14:17:15:88:32:b3:f5:cc:9b:cc:9d:92:
                    c1:30:20:85:7b:f7:57:cf:b7:ba:29:8c:ce:dd:60:
                    aa:80:cf:35:92:db:bb:b5:30:d9:64:93:c7:a1:49:
                    56:0f:6c:e8:8b:5a:d4:b0:9c:81:7e:ef:95:78:22:
                    75:74:b0:65:17:bb:84:69:cb:6c:3e:1e:9b:6c:49:
                    44:54:44:24:7f:f8:15:e0:6d:36:40:b6:07:81:0a:
                    ea:b2:8a:03:1b:40:29:07:69:14:e2:f0:04:ad:63:
                    d3:6e:51:c7:c3:8a:2d:1f:98:5e:9f:bf:2f:39:9e:
                    c7:f3:f1:1a:47:32:11:81:14:07:7b:81:24:71:70:
                    cf:1a:32:db:f4:21:71:6f:93:f8:da:62:f0:71:fa:
                    c9:71:e6:c8:4a:66:3a:0f:f8:78:61:62:33:ff:6f:
                    e4:d9:02:68:35:17:e7:8b:5c:be:58:7c:ec:b7:09:
                    e6:3b:a1:5c:19:3d:c9:1f:86:48:54:56:5e:d5:cf:
                    1c:24:19:ab:a4:5e:c6:70:7e:a1:db:9b:0c:f8:93:
                    49:9e:ff:35:1a:7b:3f:57:ef:21:4b:48:63:9b:11:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:35:1F:84:13:E3:83:1F:BC:63:68:B0:A6:FB:41:DF:D0:93:70:0C
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/_jUfhBPjgx-8Y2iwpvtB39CTcAw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:06:77:8d:0d:d9:33:17:12:1e:08:16:d7:16:69:cf:b5:7e:
         fe:d4:5e:a6:7d:2b:12:56:3c:84:bf:9b:91:12:43:77:e0:cd:
         70:f1:0d:91:08:8f:5d:73:54:31:4f:54:76:5b:76:84:b7:bf:
         7c:92:86:10:10:06:06:5b:7a:e5:0e:95:c8:ac:43:24:b2:e8:
         a6:86:41:a2:58:50:be:6f:92:61:84:f7:20:14:04:e0:b3:90:
         4d:6c:47:dc:8d:f9:eb:33:56:56:d1:e3:b8:9e:72:e7:50:ff:
         40:81:f1:a4:12:1c:ce:41:aa:7f:e8:a8:1f:42:50:39:09:25:
         ad:0e:9f:b9:ae:76:c8:d6:b7:69:b7:ba:37:2c:f6:62:c3:6a:
         d3:98:48:6d:dd:16:61:3f:f3:62:6b:d5:30:d5:62:6c:7e:e2:
         cf:86:e3:f9:0c:82:82:09:c7:6b:73:86:89:7a:cd:a1:34:a6:
         d1:bb:84:2e:9b:4a:f9:10:0c:fe:e8:43:37:ac:75:81:5c:96:
         e7:8c:e1:a3:a9:a4:6a:2a:35:09:a3:62:68:d2:85:43:68:8f:
         0a:81:39:5c:62:0e:d4:1d:a9:f8:b5:74:e7:af:41:f1:f3:db:
         04:04:c2:38:a1:06:94:2d:f3:92:dd:ec:2f:3c:86:32:f2:92:
         7c:e8:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org