Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nZigaxZ4ZkCtBguuwUkOiyyEVSM.roa
File:                     nZigaxZ4ZkCtBguuwUkOiyyEVSM.roa (raw, json)
Hash identifier:          wHT3oMYTifh+1oypZ7QaddqUbJJkphCd89QnaKk2zhI=
Subject key identifier:   9D:98:A0:6B:16:78:66:40:AD:06:0B:AE:C1:49:0E:8B:2C:84:55:23
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       41
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nZigaxZ4ZkCtBguuwUkOiyyEVSM.roa
Signing time:             Tue 01 Nov 2022 07:01:27 +0000
ROA not before:           Tue 01 Nov 2022 07:01:27 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        133.242.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Nov  1 07:01:27 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9D98A06B16786640AD060BAEC1490E8B2C845523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:93:63:cc:64:af:8c:02:fc:1e:7b:b6:87:
                    0c:a4:92:c1:b0:cb:5c:23:1d:7b:d7:89:83:5b:59:
                    26:3f:4a:93:ec:4c:99:b9:e2:6b:2a:bc:76:a4:4f:
                    bc:b3:6e:d8:fb:a0:56:49:c0:fa:5f:e2:0f:e7:8a:
                    be:b3:a8:a3:55:72:c7:3c:d7:bd:21:9a:e1:e9:29:
                    22:7b:e9:47:1c:dc:58:e2:9b:e2:11:70:c6:67:e8:
                    cb:80:7d:19:70:da:38:2f:6d:9e:95:9b:53:18:f6:
                    e1:f2:17:21:e1:8b:81:68:41:dc:ed:0d:de:60:cf:
                    10:54:2c:4c:08:1a:de:cc:45:e2:5f:c6:29:65:7d:
                    5f:67:5c:1a:39:a8:3f:2a:6a:e1:36:11:6d:3e:7e:
                    c2:1a:15:f4:cc:7f:b9:5d:f0:aa:fc:73:24:f8:12:
                    00:2b:9c:2e:bd:79:d8:08:7f:6c:e9:f8:1f:d3:0a:
                    80:03:e0:e0:81:3c:76:ce:a3:73:bd:e9:f2:d1:57:
                    f1:f3:00:6f:c4:ce:48:9f:f0:b4:2a:17:1b:c9:d3:
                    30:e2:91:17:cb:4b:e0:36:eb:7e:7b:62:00:e1:79:
                    3d:d5:e7:4d:e2:1b:10:01:60:12:a2:7e:a6:cc:c4:
                    50:08:9a:c8:8c:9b:f5:37:c6:f2:39:c2:e6:5c:78:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:98:A0:6B:16:78:66:40:AD:06:0B:AE:C1:49:0E:8B:2C:84:55:23
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nZigaxZ4ZkCtBguuwUkOiyyEVSM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:27:bd:7a:91:43:5e:7a:6f:8b:b4:49:02:98:c8:48:51:5a:
         b2:b8:7b:fe:d5:37:f3:9a:7e:a5:76:33:c3:d3:27:28:b9:8f:
         46:0c:cf:5b:e3:fd:5a:a1:d3:e0:77:5b:5d:80:c6:a7:45:5b:
         9e:f3:25:9d:35:eb:50:37:fc:59:1e:1d:b8:61:2d:f9:d4:bf:
         04:da:d8:40:e6:fa:62:fd:80:4d:05:c9:07:ae:eb:45:b0:53:
         fa:95:32:e3:c8:aa:f0:28:ca:fb:11:7c:34:12:31:87:47:86:
         90:c1:41:d2:b8:c9:22:f9:cc:d6:d2:66:24:09:79:e8:1c:14:
         e6:49:47:ed:0b:fb:b6:8d:36:53:bf:b3:dc:1b:f7:70:d2:1a:
         c5:b1:55:31:27:5c:92:ab:42:4c:2c:37:3b:28:8f:f5:27:69:
         96:12:af:7f:d2:a8:81:81:6d:f3:1d:ca:de:cd:15:a7:66:5d:
         57:f5:c7:1e:68:e2:08:ab:39:dd:91:5c:7b:76:88:ae:b8:be:
         58:5d:e7:4f:f2:df:03:a2:9e:21:70:42:9e:f3:82:ba:a9:a2:
         0d:ba:d2:03:0a:a0:63:34:90:18:13:08:8a:35:e7:8b:de:8d:
         31:e6:aa:eb:d3:b0:ab:38:db:e0:43:3b:7b:b3:b5:fc:e2:50:
         b6:f7:42:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org