Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/XDsG9tiopj-I2doq6X4fUN9OV2E.roa
File:                     XDsG9tiopj-I2doq6X4fUN9OV2E.roa (raw, json)
Hash identifier:          ZmQwf8SrNZjdApTt63RQ6k6tjHnXQSeVp15DN4hXpbY=
Subject key identifier:   5C:3B:06:F6:D8:A8:A6:3F:88:D9:DA:2A:E9:7E:1F:50:DF:4E:57:61
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       3A
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/XDsG9tiopj-I2doq6X4fUN9OV2E.roa
Signing time:             Mon 01 Aug 2022 01:28:42 +0000
ROA not before:           Mon 01 Aug 2022 01:28:42 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:42 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=5C3B06F6D8A8A63F88D9DA2AE97E1F50DF4E5761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:db:56:4e:db:70:f3:bc:90:4b:a4:65:e0:
                    93:5e:5f:f3:0d:0c:c7:a7:07:a8:e0:9e:de:52:50:
                    d5:c2:6c:05:7b:37:ec:6a:33:2b:e4:9e:26:f5:3e:
                    9d:f8:70:da:76:f2:86:88:77:d0:a9:73:c5:e8:e2:
                    35:5a:8c:05:8e:49:c6:1e:8a:7b:63:51:5a:73:74:
                    25:df:e0:65:ff:8f:f5:88:88:8d:d4:37:ef:61:ab:
                    01:89:9c:88:64:52:c9:f2:ea:bc:9b:87:3d:59:c9:
                    a8:38:39:e6:db:8f:6c:18:76:ca:e4:55:a3:02:20:
                    18:ac:e9:48:03:4c:a9:f7:27:73:22:97:0f:e3:90:
                    65:b9:03:4e:7f:46:a3:ea:a3:ec:6e:93:39:e5:3a:
                    1c:12:5e:59:78:20:73:5d:c7:84:cf:6c:76:39:8c:
                    7f:6f:16:f8:c5:dc:2d:d1:b6:d8:71:5c:3b:02:c5:
                    cb:93:ef:9b:63:f5:6c:d8:ca:e3:67:f8:b3:bd:85:
                    c0:b8:7a:b6:ab:d7:d7:95:ae:08:36:eb:99:d0:d9:
                    86:d6:ae:99:93:41:84:54:13:18:6c:8d:79:f2:0d:
                    a3:0c:d2:a9:9c:8f:7b:0d:55:1f:8d:33:06:4c:26:
                    54:b3:30:0c:a2:ba:c7:40:37:91:60:70:b1:92:50:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3B:06:F6:D8:A8:A6:3F:88:D9:DA:2A:E9:7E:1F:50:DF:4E:57:61
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/XDsG9tiopj-I2doq6X4fUN9OV2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:11:d4:66:1d:5f:5c:1b:ea:5e:67:f2:ed:b0:36:fb:fe:02:
         dd:2c:fe:f0:ec:09:de:38:4b:42:d5:53:b0:44:71:7a:53:f7:
         86:57:7c:74:1b:2d:87:2b:1a:b4:94:95:b6:62:4a:96:c2:88:
         7d:c4:40:5d:c1:a4:2e:89:52:1f:08:51:d0:b7:0e:da:c9:12:
         1d:48:54:b8:45:61:9c:e2:40:b0:4d:ec:4a:38:76:43:fc:d2:
         a6:b3:2f:bf:82:95:99:32:90:7e:f8:9a:c1:ff:3f:0a:9d:ca:
         22:c0:da:27:c6:50:f8:82:ef:4e:a9:bf:12:02:12:65:41:66:
         39:a5:55:35:1a:45:2e:82:ef:08:e7:43:35:53:3a:a6:e7:c3:
         99:a6:1e:82:0d:bb:ed:33:1d:29:1c:f3:5e:68:8d:6a:aa:bf:
         7f:7b:10:05:58:46:75:36:c8:08:fa:60:bd:d2:58:a2:a8:ec:
         b7:bd:5a:1d:9a:98:7c:82:89:8c:db:9d:8b:a1:63:c2:70:10:
         ab:e4:9f:7f:be:4c:b5:d0:98:ce:5a:a5:66:1c:79:5d:71:f1:
         81:a3:61:35:78:b1:aa:c2:ba:13:ec:82:97:04:f6:d1:8f:c5:
         05:59:f5:17:bc:1e:8a:22:6d:1c:ee:12:51:cc:46:ae:ec:39:
         6d:39:ff:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org