Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ZEdGwZ8MjDI9yjAiVIQZB6jaWLU.roa
File:                     ZEdGwZ8MjDI9yjAiVIQZB6jaWLU.roa (raw, json)
Hash identifier:          qgwnR7GFteHwkcty5ZccmSSJrjuddK4CiBO4rVCbvLk=
Subject key identifier:   64:47:46:C1:9F:0C:8C:32:3D:CA:30:22:54:84:19:07:A8:DA:58:B5
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       34
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ZEdGwZ8MjDI9yjAiVIQZB6jaWLU.roa
Signing time:             Mon 01 Aug 2022 01:28:41 +0000
ROA not before:           Mon 01 Aug 2022 01:28:41 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.121.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:41 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=644746C19F0C8C323DCA302254841907A8DA58B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:34:75:9c:04:26:04:e5:6e:99:cf:6d:50:
                    ac:c1:f7:cc:ed:03:3e:64:8e:fc:b3:70:ef:49:eb:
                    41:3d:96:03:28:a0:5a:ad:fe:25:91:cb:3f:5b:88:
                    77:3f:23:fb:15:56:f8:ce:61:4a:16:8d:cd:94:0f:
                    af:72:15:4a:b3:70:f3:a9:ab:0d:96:ed:23:96:3d:
                    85:1e:62:e2:c8:b0:63:cb:8f:ef:6e:c4:28:32:e3:
                    0f:9b:8e:5a:fd:bf:ec:dd:e1:bd:05:e4:f3:a6:f7:
                    4b:d1:54:6c:22:6b:3d:3b:d7:ac:0b:cd:c7:77:c1:
                    bc:7b:52:1f:e0:a8:d8:7b:7d:2f:0b:c1:f2:24:aa:
                    6b:6f:cf:ce:a3:42:2b:2a:89:39:3e:71:f6:7e:00:
                    1a:ea:67:3b:af:4d:60:49:f3:73:76:5f:31:8d:81:
                    7d:d7:5b:05:a3:fa:a4:74:be:bc:cf:44:de:b4:b6:
                    ca:ab:22:13:db:bd:0a:b0:02:09:1c:9e:86:c3:f7:
                    83:35:fe:eb:89:62:0f:a7:6c:8a:59:11:6a:d4:26:
                    be:bf:67:f4:cf:3a:e9:ef:62:a4:8c:6b:66:7d:b7:
                    b3:f3:d8:5a:09:44:7f:75:f6:9c:66:8b:94:dd:fd:
                    ab:b3:a4:e8:0b:8e:99:7c:bb:38:c7:e6:b3:29:cf:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:46:C1:9F:0C:8C:32:3D:CA:30:22:54:84:19:07:A8:DA:58:B5
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ZEdGwZ8MjDI9yjAiVIQZB6jaWLU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:f9:fa:33:57:42:cc:df:df:15:13:1c:3c:c7:01:84:65:6b:
         22:9a:77:06:38:02:be:e4:f4:a5:9d:eb:51:e3:7c:55:2d:1f:
         a2:bc:75:d3:f8:3c:b1:0e:c0:97:a3:03:38:d5:01:f7:bc:8c:
         e3:62:63:c0:18:0b:1c:60:a0:f3:7b:7e:5f:31:a3:0a:2e:dc:
         86:af:e5:be:3a:f1:13:30:4f:5c:a6:e9:a4:31:49:3b:6f:34:
         2c:61:77:ee:ad:d3:59:6b:c6:77:3c:6b:23:12:d6:f3:5e:6f:
         e2:90:08:c8:d2:eb:53:15:1c:06:3d:7a:bd:c3:77:fe:84:83:
         bd:06:e1:f6:d2:04:d9:fb:06:34:14:a9:e7:b3:44:d9:95:68:
         ca:7f:de:a9:b5:86:cf:54:33:ba:69:3f:4a:96:34:46:53:d5:
         69:2d:4a:1b:11:06:98:3d:03:a1:aa:4f:03:63:33:dc:6a:59:
         34:fb:a7:03:80:e0:08:47:94:7a:87:a6:a1:92:2b:cf:54:16:
         90:b2:b6:20:e2:47:95:0d:79:e3:b8:bc:78:68:7d:e3:65:35:
         27:fa:cd:c1:35:08:26:df:e2:0c:f2:b2:ee:36:d1:af:0b:5b:
         28:a2:27:49:1b:a6:67:2c:5d:c1:38:3d:97:ce:51:34:f4:02:
         d4:84:54:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org