Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/eYq9baKkJ21l5kupuRoITbsbiII.roa
File:                     eYq9baKkJ21l5kupuRoITbsbiII.roa (raw, json)
Hash identifier:          u4VowyGFvUmpo445G0MDFdlplr/Q1WPKo8/M1fDToWE=
Subject key identifier:   79:8A:BD:6D:A2:A4:27:6D:65:E6:4B:A9:B9:1A:08:4D:BB:1B:88:82
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       37
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/eYq9baKkJ21l5kupuRoITbsbiII.roa
Signing time:             Mon 01 Aug 2022 01:28:42 +0000
ROA not before:           Mon 01 Aug 2022 01:28:42 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     0
IP address blocks:        103.10.112.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:42 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=798ABD6DA2A4276D65E64BA9B91A084DBB1B8882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:b8:a4:de:b7:09:63:9f:e0:6d:ad:e5:05:
                    44:b4:5c:78:33:be:c7:88:52:92:2e:21:89:23:31:
                    f9:5d:3c:c4:05:cb:43:b4:dd:a0:92:23:79:41:06:
                    58:d0:f8:69:a0:67:df:63:c8:c0:2a:3e:e4:51:9a:
                    78:17:1e:ce:01:b9:47:0e:d7:6e:f0:71:0c:13:90:
                    80:29:70:5d:e4:a4:11:95:43:1e:bb:de:02:b5:c4:
                    8b:93:c4:fc:9a:fb:82:36:66:ec:b5:2c:01:1f:04:
                    cf:89:c0:f6:02:8b:4a:3a:ac:ed:99:da:e3:ed:88:
                    89:a4:84:f3:7f:33:91:14:67:fe:d4:22:60:1b:7d:
                    74:6f:a0:4b:15:eb:9d:29:9b:36:26:d0:41:80:21:
                    ca:f9:75:29:5c:73:05:92:79:e0:f1:f3:5f:bd:c7:
                    d0:d7:6f:df:43:75:3e:e2:6c:15:88:f8:33:9f:fe:
                    91:57:ad:b6:8c:31:64:8f:e6:77:03:07:64:ff:d9:
                    9e:9a:68:16:17:1e:39:5e:1b:7c:93:7a:f0:f7:d0:
                    d8:4c:bf:30:47:19:2e:9e:e0:b9:74:8c:74:f7:e4:
                    f7:e1:72:5d:bb:d9:f9:72:2a:35:bb:34:d7:44:3a:
                    aa:8f:fc:73:02:0a:a4:c8:8a:1c:0f:ff:d7:00:3e:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:BD:6D:A2:A4:27:6D:65:E6:4B:A9:B9:1A:08:4D:BB:1B:88:82
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/eYq9baKkJ21l5kupuRoITbsbiII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:2e:cb:53:9f:f2:d4:03:e0:98:31:54:ef:d9:00:c8:45:
         87:a9:ad:9b:56:8c:6f:a9:43:94:89:c3:ca:5f:d7:68:61:06:
         d1:37:36:29:d3:9d:89:97:80:b6:42:03:0b:eb:93:53:b7:0d:
         ff:ae:58:4e:4f:0c:21:42:80:5c:e8:91:46:66:fd:95:fd:51:
         5c:4f:f0:45:a2:82:56:12:c2:92:5a:f4:61:d3:d0:d8:0a:a3:
         23:f5:0b:29:36:6e:18:1b:c2:46:6e:c7:e6:cd:f7:94:34:fe:
         50:be:e5:9e:ab:0a:6f:5b:5c:65:a7:2b:3e:4d:50:4e:8b:89:
         e2:f3:d9:2e:a1:0b:41:f7:32:f4:45:88:3a:28:b3:8e:80:d5:
         20:75:9a:cc:2f:7d:06:01:46:ae:fa:c6:d5:f9:69:31:2a:f0:
         c4:08:9f:f9:48:33:94:5c:04:a8:0d:55:92:9a:8c:0f:76:72:
         c0:cb:1d:c2:28:28:cb:e4:c6:4e:aa:2c:24:a7:c2:87:31:c7:
         38:e5:48:af:b5:11:96:57:d9:a2:cd:db:33:2b:c7:c3:19:79:
         39:ee:fc:fd:52:66:38:81:35:f5:e1:32:48:1f:e5:27:df:80:
         fc:54:a4:33:f7:92:e2:c4:99:5e:6f:c5:24:42:a5:94:e5:6b:
         48:22:56:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org