Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/tMIejIHX-iPwxHxwd3-Zg3odIcI.roa
File:                     tMIejIHX-iPwxHxwd3-Zg3odIcI.roa (raw, json)
Hash identifier:          TuEf1ss58dMs7/rnolGY8PGyxxPlo77WMt0eq0x16eI=
Subject key identifier:   B4:C2:1E:8C:81:D7:FA:23:F0:C4:7C:70:77:7F:99:83:7A:1D:21:C2
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       3B
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/tMIejIHX-iPwxHxwd3-Zg3odIcI.roa
Signing time:             Thu 01 Dec 2022 01:28:49 +0000
ROA not before:           Thu 01 Dec 2022 01:28:49 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        218.216.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:28:49 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=B4C21E8C81D7FA23F0C47C70777F99837A1D21C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:f4:73:02:35:90:14:a2:82:9b:56:28:d4:
                    f3:cf:2f:42:4c:bf:07:3a:ca:d9:46:dc:5a:b4:2c:
                    c1:2f:81:ba:dd:33:36:dd:94:9f:cf:f2:68:5d:3c:
                    07:8e:87:3e:5b:28:23:d0:b2:47:d2:df:34:16:8d:
                    2f:ff:10:6e:e7:6d:e4:71:53:16:88:52:bd:01:82:
                    3f:e1:26:cb:ec:73:ad:4b:eb:e4:a9:ea:a3:a1:d6:
                    89:1b:14:43:0c:d3:53:76:db:e1:19:72:02:c8:f3:
                    86:42:47:4c:80:10:a0:1c:e3:b9:14:51:f0:4b:f3:
                    ff:eb:a0:39:21:72:54:e8:b6:0f:f8:81:57:8d:5f:
                    c3:20:ab:ea:8c:95:13:ae:d7:b4:50:c9:62:e8:60:
                    ac:42:9d:1e:66:40:3d:25:62:75:aa:31:cb:c3:c4:
                    36:c0:93:f2:78:37:38:6a:c6:fb:15:0b:ba:be:dd:
                    37:81:0c:d9:2f:a9:05:96:3c:7c:1d:6b:7e:42:a7:
                    94:77:dc:61:a0:e9:0c:57:91:32:29:2f:d4:95:a5:
                    42:1c:86:46:0a:d2:3a:70:73:88:64:b3:e9:0c:6b:
                    10:56:cd:1d:2b:93:8b:3f:1a:61:ce:33:d0:11:58:
                    04:6f:42:0b:dd:28:c2:32:95:b8:9f:c2:69:5c:2a:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:1E:8C:81:D7:FA:23:F0:C4:7C:70:77:7F:99:83:7A:1D:21:C2
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/tMIejIHX-iPwxHxwd3-Zg3odIcI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:4b:2c:26:1d:12:87:be:42:34:a3:74:15:bb:8b:8d:f2:
         f8:6d:1b:5f:2f:0f:a2:4f:97:82:e2:d2:6a:dc:ac:a4:1d:e5:
         32:7a:80:3f:67:e7:07:c3:81:2d:ec:ca:40:fd:a5:b4:41:c0:
         ec:61:50:8b:05:3c:2d:35:f9:18:95:0d:c9:3b:3d:af:1b:0b:
         1a:e1:df:1f:eb:5e:cf:8b:a2:13:d9:c2:f6:2e:69:9f:97:88:
         0c:65:a1:1b:b9:d9:e4:4e:a1:21:11:cb:8d:6c:b4:37:c2:ba:
         fa:f5:13:fe:23:51:63:76:3a:c5:82:d5:36:03:ce:eb:b3:a3:
         83:c9:ac:1f:59:04:f0:c2:4f:42:01:14:fd:ba:37:53:e7:ab:
         ce:90:9e:f5:15:6d:b1:ba:8f:0a:82:1e:db:38:fd:f3:c9:41:
         2a:f8:93:ba:d4:4a:e3:0c:34:b7:02:ed:67:d5:8a:99:4d:17:
         d0:a9:d0:40:fe:54:f5:73:c2:f1:65:93:af:a3:dd:33:59:02:
         b6:da:0e:17:39:82:4d:1b:b5:43:40:04:8d:9c:81:15:13:29:
         f6:ca:c9:6f:57:96:b9:e8:e7:dd:df:4a:76:74:c1:a6:05:a9:
         c5:f1:f3:c5:fb:55:07:4c:74:bb:c9:7f:5c:06:4f:15:48:bc:
         cc:e7:e7:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org