Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/4yfqX-4YcWFaMvP72I2DHXFQYpk.roa
File:                     4yfqX-4YcWFaMvP72I2DHXFQYpk.roa (raw, json)
Hash identifier:          gzem61NrOCwncW1HSZvrfxL3lu0Wm90USUMHPkjde+M=
Subject key identifier:   E3:27:EA:5F:EE:18:71:61:5A:32:F3:FB:D8:8D:83:1D:71:50:62:99
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       33
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/4yfqX-4YcWFaMvP72I2DHXFQYpk.roa
Signing time:             Mon 01 Aug 2022 01:28:40 +0000
ROA not before:           Mon 01 Aug 2022 01:28:40 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.125.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:40 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=E327EA5FEE1871615A32F3FBD88D831D71506299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:24:77:9f:87:f0:59:2e:00:b7:8f:3e:6f:
                    b6:1e:a2:80:54:9b:0f:20:01:ad:79:f0:2c:37:36:
                    b3:dd:97:b1:7b:fe:fc:7e:84:5e:fb:72:de:7e:2c:
                    10:b8:61:22:8b:bb:73:60:6a:56:a8:66:48:c6:3a:
                    e2:a4:9c:6b:c2:52:46:19:71:f2:72:dc:a5:ca:a9:
                    b9:43:f8:f3:1e:87:15:41:06:61:0e:3c:9d:5d:02:
                    64:45:19:7a:7f:fd:bb:0f:aa:3a:e1:ee:02:84:01:
                    4a:65:5a:1f:bb:3c:3e:fb:54:1f:1b:a7:88:b0:cb:
                    05:0c:48:b4:b7:36:cc:de:e6:14:0c:10:28:32:ad:
                    40:ec:5f:6c:20:34:2d:67:b8:bd:38:69:3a:70:d3:
                    a1:8f:f8:db:54:75:8d:6a:8c:b7:ef:7b:49:09:2f:
                    a7:de:4e:d8:b1:70:83:c0:88:15:57:b1:b8:a3:06:
                    a4:ed:47:d7:59:82:45:5b:f4:34:10:bc:a1:62:b0:
                    9a:f4:8d:75:33:11:e1:52:ed:4c:72:c8:aa:9a:fe:
                    54:db:5c:f8:a1:49:6b:39:cf:8e:62:15:d6:ab:d8:
                    19:df:18:2e:8c:3c:46:25:5b:3c:d2:75:2e:ce:70:
                    a5:6c:09:64:f9:74:67:c4:3f:4f:31:b2:e9:41:5a:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:EA:5F:EE:18:71:61:5A:32:F3:FB:D8:8D:83:1D:71:50:62:99
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/4yfqX-4YcWFaMvP72I2DHXFQYpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:e9:10:ce:03:2a:4e:27:e5:8b:ef:75:54:69:96:57:89:
         fc:ab:46:09:d5:c3:1f:fd:44:ab:52:56:f2:1e:63:34:37:d3:
         56:fc:a8:8e:b7:f6:11:74:fc:59:e0:56:68:28:8a:bf:e3:7c:
         8d:bf:dd:42:0a:27:eb:a7:9f:a0:ef:21:15:2b:f7:a2:f1:d8:
         39:e0:b2:f2:d9:f4:97:e5:35:2a:2a:b1:88:ef:d0:b2:27:8e:
         73:f5:0f:3b:95:c4:fc:71:b8:b0:1b:91:46:e2:60:8b:00:a5:
         b8:49:9f:92:17:d0:4f:f0:c4:58:eb:d0:b1:7b:bb:13:ce:9a:
         7e:75:b0:85:06:eb:b3:4c:16:e1:75:58:70:ae:8e:d0:28:91:
         8f:cd:ff:fd:cb:ad:6b:0e:07:25:7d:d9:4b:25:30:05:91:8b:
         4b:79:d2:e0:41:36:e1:d8:b5:5b:2d:0e:0e:f3:89:0f:04:c9:
         a3:28:2c:c4:3f:15:5b:aa:70:de:e8:ba:58:52:a8:78:ce:53:
         5a:c0:be:bf:10:76:c4:e9:cc:3e:c4:c7:16:ec:f7:87:7d:d5:
         cf:fc:5f:fc:cb:29:45:38:2e:e8:79:63:a2:cf:e6:36:d0:da:
         ad:58:88:35:67:18:7b:cb:54:47:73:ac:02:07:2c:c2:09:bd:
         2c:b2:8f:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org