Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/XLRUoMASM_1iSqSZh99TTs3wj8M.roa
File:                     XLRUoMASM_1iSqSZh99TTs3wj8M.roa (raw, json)
Hash identifier:          D4OApH4IvI7Fb8wyAMFjiK9FHidscDqyIAWw3KmfPWw=
Subject key identifier:   5C:B4:54:A0:C0:12:33:FD:62:4A:A4:99:87:DF:53:4E:CD:F0:8F:C3
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       1A
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/XLRUoMASM_1iSqSZh99TTs3wj8M.roa
Signing time:             Wed 18 Aug 2021 07:54:09 +0000
ROA not before:           Wed 18 Aug 2021 07:54:09 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     7684
IP address blocks:        153.121.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug 18 07:54:09 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=5CB454A0C01233FD624AA49987DF534ECDF08FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:52:b4:37:de:a6:b3:98:7b:f7:82:c5:37:
                    7b:e2:77:e3:82:3d:dd:17:20:00:5c:76:98:a3:4a:
                    0b:3f:a0:13:61:46:7c:86:f8:59:5f:b0:40:98:7f:
                    df:9b:21:03:cf:85:94:39:23:86:98:87:e7:b3:8e:
                    a4:c2:64:70:2f:88:c6:65:50:e9:fa:27:07:00:dc:
                    07:b4:df:ff:3e:9c:8d:df:cd:10:9d:f6:a4:d4:ce:
                    10:4b:c0:6f:95:ee:73:74:c9:01:e3:03:a3:8c:6a:
                    33:eb:fa:ed:64:77:6c:a9:8e:0b:5a:f1:b5:86:4b:
                    5c:fe:92:95:18:b1:ba:ea:f6:ca:8c:4a:b6:b7:8d:
                    f3:39:21:d5:52:72:ef:f4:a6:be:63:c7:96:d2:53:
                    2e:36:7b:69:17:60:15:c1:12:00:29:d3:bd:d9:dd:
                    ad:b7:fc:e5:f6:fc:4b:dd:05:eb:d9:1b:c3:19:7e:
                    d2:65:1c:70:ef:be:65:ec:3f:90:66:f4:c8:81:19:
                    bc:fb:c9:6d:e8:e8:bd:53:3c:f4:1b:87:57:55:de:
                    07:47:1e:8b:0f:f0:1a:a3:7a:c8:34:42:85:80:c6:
                    f9:9f:65:9a:10:54:39:d3:9c:61:33:e5:54:91:39:
                    f3:02:d2:59:e3:fc:59:19:33:f6:7d:41:b3:f7:3c:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:54:A0:C0:12:33:FD:62:4A:A4:99:87:DF:53:4E:CD:F0:8F:C3
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/XLRUoMASM_1iSqSZh99TTs3wj8M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:a2:b8:0f:fc:6b:bd:7f:04:b0:4b:0c:c3:a8:c0:e8:21:
         3a:49:b4:a7:57:0e:10:bf:56:eb:a3:f2:5b:50:bc:2a:41:ed:
         dc:ff:33:c7:3c:fe:03:fb:94:87:60:f3:c9:ee:27:00:61:06:
         4f:b8:02:d6:c2:0d:5e:69:35:c1:68:3a:8e:1c:59:6e:ce:d8:
         d3:df:a7:5a:d4:5f:4a:76:b2:21:04:8e:3d:66:70:0f:c6:42:
         02:c1:01:46:85:7d:13:17:4f:1f:77:e7:d3:96:07:70:ac:cc:
         6a:8b:e4:66:0b:80:a0:75:4a:e9:a6:29:a1:e4:c6:9d:c2:2a:
         03:fe:bf:cc:38:51:1b:bb:10:8d:25:55:b2:17:05:87:19:7a:
         3a:40:c8:a8:00:86:aa:f3:24:6f:26:48:ac:6d:4c:f0:4a:da:
         99:48:ba:cd:c2:3e:fb:05:f0:05:69:9b:9f:ca:6e:ad:72:6d:
         60:ab:97:36:3d:a0:43:a6:b5:31:ec:fb:cb:6f:13:1a:ef:4b:
         ac:c7:57:8c:47:c9:84:ba:1f:8c:6a:f0:cd:58:11:95:ec:dd:
         f5:75:d6:67:83:b7:c9:60:44:96:10:0a:56:fb:6b:ac:1d:1b:
         99:ca:3b:70:1d:b3:7c:3a:c9:07:4c:2e:e6:17:eb:6d:a3:dd:
         0b:04:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-ams.rpki-client.org