Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/DlcvW8CeMnHKKYzPuZJNR6jqHfY.roa
File:                     DlcvW8CeMnHKKYzPuZJNR6jqHfY.roa (raw, json)
Hash identifier:          Rz4w599fYU+NNBmXKtMf1Efq/0d8fDJ9bKTSytOM6Yg=
Subject key identifier:   0E:57:2F:5B:C0:9E:32:71:CA:29:8C:CF:B9:92:4D:47:A8:EA:1D:F6
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       32
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/DlcvW8CeMnHKKYzPuZJNR6jqHfY.roa
Signing time:             Sun 01 May 2022 01:29:57 +0000
ROA not before:           Sun 01 May 2022 01:29:57 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55392
IP address blocks:        14.1.4.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: May  1 01:29:57 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0E572F5BC09E3271CA298CCFB9924D47A8EA1DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:ce:82:5c:9b:cf:57:c9:a6:60:98:d8:99:
                    bd:25:55:d0:88:bb:ca:c1:98:fc:05:60:39:43:ce:
                    13:1a:94:de:c3:8a:1c:7c:f3:df:50:76:4f:48:a0:
                    b8:b9:1b:a5:ab:a8:a4:4a:d7:e1:52:ae:f6:48:d3:
                    a2:f3:63:f4:6f:e4:de:11:b3:51:77:11:00:44:a9:
                    ee:11:55:4b:ba:b7:1d:3e:f4:eb:ec:1e:79:ee:a2:
                    ef:48:29:5a:bb:3c:05:ea:8b:4a:d5:cc:50:83:10:
                    99:4e:8e:1e:18:9f:b2:40:74:50:57:41:f2:84:3a:
                    d2:a4:37:08:cd:16:a6:e7:17:e3:eb:01:1a:86:f1:
                    cc:8d:74:a6:3b:79:58:98:ed:12:3f:10:cb:4c:9c:
                    a9:0f:75:94:5f:70:a9:68:b0:54:2b:4b:88:2a:f7:
                    28:9c:a9:12:7b:b4:a3:8e:7e:93:94:46:fc:26:b5:
                    5e:79:14:5b:19:c4:b8:57:68:43:ec:4a:ba:71:e3:
                    85:69:e3:61:b0:76:81:11:a3:6f:0a:2d:fb:ae:05:
                    3f:65:22:0f:c0:64:a8:62:16:02:9d:59:f7:7e:fd:
                    d1:0c:f5:e4:66:1b:73:d1:d6:4d:f8:f6:83:ab:03:
                    c6:66:a7:b1:15:23:df:8d:5f:39:c8:04:75:74:dc:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:2F:5B:C0:9E:32:71:CA:29:8C:CF:B9:92:4D:47:A8:EA:1D:F6
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/DlcvW8CeMnHKKYzPuZJNR6jqHfY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:02:3a:66:5b:7b:0f:a3:32:9d:28:e1:94:e5:11:12:77:00:
         87:b7:13:49:29:e4:34:47:e7:77:20:75:d8:d7:76:45:01:8a:
         e1:3f:df:e8:9e:8f:04:2a:3f:38:8f:6b:74:6a:39:1c:78:d0:
         b0:ef:a2:78:8b:2e:98:c3:6b:a3:8e:56:5f:90:ec:4b:c8:a2:
         ae:b0:23:95:85:99:29:80:ef:b3:51:63:80:bb:f2:58:fa:dc:
         dc:84:3c:a7:af:f3:c6:1c:08:87:98:62:14:2a:c5:83:4c:c9:
         54:72:cc:82:78:e4:51:c1:a8:fe:6b:21:07:6c:53:30:1b:5c:
         b2:70:3b:a8:20:66:12:e7:67:cb:f8:49:e0:08:b2:8d:f5:95:
         24:6f:ad:29:66:98:af:b9:53:6b:84:e6:af:4a:4b:28:31:be:
         99:ce:db:d6:64:0a:37:56:8e:19:a0:94:01:f1:9f:ae:7d:32:
         3b:2d:c3:f0:6d:c4:5a:ef:66:e6:15:3b:3b:49:dd:c9:a6:f5:
         28:1c:cf:b8:66:08:4e:69:7c:5c:95:9e:b6:66:72:f1:60:67:
         c0:30:41:50:06:32:d6:67:19:95:5c:e1:d5:b0:50:a8:2a:f6:
         2e:00:6c:69:9b:bf:47:c1:1e:3b:47:aa:e3:b3:4e:e2:01:6e:
         a2:36:00:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-ams.rpki-client.org