Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/sygTrr1Pov0Wjfd5eyxwurjG8jA.roa
File:                     sygTrr1Pov0Wjfd5eyxwurjG8jA.roa (raw, json)
Hash identifier:          xDGygxw8eNco/ONTrNHFMclbojK/j2J4c2zDRyACdhk=
Subject key identifier:   B3:28:13:AE:BD:4F:A2:FD:16:8D:F7:79:7B:2C:70:BA:B8:C6:F2:30
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       40
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/sygTrr1Pov0Wjfd5eyxwurjG8jA.roa
Signing time:             Tue 01 Nov 2022 07:00:10 +0000
ROA not before:           Tue 01 Nov 2022 07:00:10 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        133.125.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Nov  1 07:00:10 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B32813AEBD4FA2FD168DF7797B2C70BAB8C6F230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:f4:9e:85:90:ce:d2:54:e0:33:a0:ae:2f:
                    04:fc:cc:1f:14:ae:8f:e5:69:74:ef:4f:43:19:06:
                    ef:8b:6d:b9:09:17:be:01:db:23:36:04:4e:16:0e:
                    ff:1e:9f:24:be:5e:4a:91:52:b4:55:0f:9f:dd:d7:
                    3f:e7:d4:42:5c:4c:ec:01:e4:d3:6a:32:02:3b:df:
                    91:8e:51:9c:03:3d:f9:ff:0a:38:03:54:7f:f0:db:
                    af:0d:d3:33:19:e2:ba:f8:4c:29:a9:46:f4:fb:a1:
                    bf:02:c7:70:72:7d:e1:fd:6f:d9:77:67:f4:03:aa:
                    bf:c0:9f:8e:7e:1f:02:f5:75:8b:c2:01:63:ab:21:
                    be:13:7d:26:9a:e3:d2:8e:65:2d:41:52:10:5f:c5:
                    1e:1c:6d:d6:ab:a6:f6:c9:ab:bc:84:ec:4a:d3:0c:
                    a8:bd:bc:36:2f:a3:92:b2:d1:ea:85:ce:8b:bc:81:
                    56:45:57:e6:ce:e1:cb:ce:80:bc:ef:4a:7b:35:87:
                    45:4f:22:64:39:d6:61:5a:a9:cd:5e:e5:9c:1d:aa:
                    a8:34:81:9c:c7:8c:28:7e:73:e2:43:e9:4b:1b:e7:
                    72:f6:8f:74:78:66:3c:98:30:06:f5:1c:7c:ec:cb:
                    47:33:68:07:59:90:af:bf:85:7c:f0:ee:a4:aa:5c:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:28:13:AE:BD:4F:A2:FD:16:8D:F7:79:7B:2C:70:BA:B8:C6:F2:30
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/sygTrr1Pov0Wjfd5eyxwurjG8jA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:d4:8c:67:9b:3f:89:10:80:81:8d:c4:87:e0:0c:34:04:
         bf:73:92:1a:76:24:90:a2:f9:03:ba:39:cf:c8:a2:7e:25:e9:
         8f:f6:1b:41:19:e2:39:04:74:47:21:6b:db:83:83:ca:24:93:
         5a:4a:cf:d8:4a:8d:6b:a1:c9:f5:d2:a9:88:e7:f6:65:9c:0a:
         59:4e:61:a7:b3:e6:a2:dc:cb:88:91:72:08:60:e2:1e:f8:9c:
         85:39:56:2a:da:9b:85:90:8f:a1:01:6b:d9:d0:fc:f9:02:c5:
         04:58:5c:87:f5:6e:47:64:21:cb:a3:5f:12:d2:e6:32:20:70:
         f2:12:07:17:2e:ca:85:b5:81:11:9e:b1:3a:4e:b1:9e:8f:80:
         11:70:28:75:0f:c9:c9:fa:53:83:70:cd:4a:cd:4f:62:1c:73:
         0d:8a:56:c3:6d:46:ef:c6:b6:96:cf:be:c1:a8:d5:c1:1a:6c:
         d1:e6:1e:67:df:9b:22:46:f2:08:bb:da:77:7c:1d:04:1f:91:
         38:5d:67:38:fb:49:66:9d:04:e8:88:7c:a0:03:e1:4f:b8:ba:
         8c:14:d8:31:24:d2:ba:e7:ce:71:df:cd:cc:e1:34:cb:76:5e:
         d2:1b:28:29:b4:4f:f3:e3:ea:32:12:e0:49:30:f7:21:fb:06:
         fe:a2:8d:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org