Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B7pUm3QvNZC-qSW3Bl4JTp4f7AA.roa
File:                     B7pUm3QvNZC-qSW3Bl4JTp4f7AA.roa (raw, json)
Hash identifier:          M9mTtSERubIjAPoSsLPweOjm6ApUzBKN0jL3AAcCIkE=
Subject key identifier:   07:BA:54:9B:74:2F:35:90:BE:A9:25:B7:06:5E:09:4E:9E:1F:EC:00
Certificate issuer:       /CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
Certificate serial:       37
Authority key identifier: FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B7pUm3QvNZC-qSW3Bl4JTp4f7AA.roa
Signing time:             Thu 13 Apr 2023 09:52:31 +0000
ROA not before:           Thu 13 Apr 2023 09:52:31 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18125
IP address blocks:        150.26.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
        Validity
            Not Before: Apr 13 09:52:31 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=07BA549B742F3590BEA925B7065E094E9E1FEC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:13:a5:77:b8:b3:c1:2a:79:69:6c:0c:f2:
                    da:ce:1e:27:42:6c:b2:a6:36:d6:71:c7:06:1f:5d:
                    e6:ec:1f:57:a0:e2:31:2b:81:36:1f:f3:30:37:55:
                    e8:46:05:d1:a5:45:83:04:55:bb:5a:2c:7e:0f:63:
                    99:e3:e6:9a:e2:ad:49:da:13:05:81:03:0a:37:12:
                    59:f4:9e:b0:dd:c0:5a:2f:fc:30:7e:b6:aa:6f:db:
                    d9:ef:f2:0e:f4:15:bd:c3:a6:a3:21:45:cc:a3:5d:
                    1c:f4:1a:51:f9:b3:09:01:12:aa:f8:dc:4b:fe:1d:
                    7d:64:ef:42:be:4a:1f:40:69:ff:93:98:4b:86:b5:
                    10:69:54:64:fc:04:76:69:00:08:25:ef:86:cc:ac:
                    c1:48:47:ca:b8:c4:72:66:e5:fd:df:74:01:65:63:
                    ae:eb:23:22:38:c3:c1:79:2b:a6:9e:28:84:f4:29:
                    68:8b:12:06:51:bc:b7:e6:69:84:ea:23:cd:ca:3c:
                    af:0a:f4:e2:6f:79:ec:1f:7d:e8:4c:55:05:50:8d:
                    f1:1f:05:5f:37:c9:d1:e1:e5:8a:11:fb:0f:23:89:
                    da:7f:d9:28:3c:1e:ea:c8:a5:e6:04:57:87:db:34:
                    ff:c3:50:bf:2a:fb:04:7c:92:83:89:b9:52:9b:08:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BA:54:9B:74:2F:35:90:BE:A9:25:B7:06:5E:09:4E:9E:1F:EC:00
            X509v3 Authority Key Identifier:
                keyid:FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B7pUm3QvNZC-qSW3Bl4JTp4f7AA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:47:bf:c1:b8:62:92:e7:01:59:da:78:11:ae:98:e1:16:
         66:0f:0c:3b:81:3f:1f:3b:4c:15:f4:f3:48:22:dc:d9:e2:fe:
         eb:5d:47:dd:22:09:67:05:94:36:fd:7b:d9:bd:cc:df:7c:75:
         67:03:51:2e:86:84:16:6c:b1:14:22:c1:a8:5a:d3:9a:e4:9c:
         cb:81:29:0e:c2:f9:f9:72:11:86:8e:06:82:ee:9f:e7:89:e8:
         92:a0:f7:b0:7c:45:37:7f:cb:2c:3c:60:71:7a:55:54:00:9a:
         79:a6:fc:38:62:e8:9d:1e:8c:0a:76:23:39:f3:4a:47:d0:e3:
         29:c2:fa:14:72:dd:f1:54:f4:de:67:10:5f:0d:f6:9a:9e:48:
         2a:5b:06:1d:e0:07:5d:11:86:ab:0a:66:68:92:a6:59:a7:f1:
         32:2d:87:f5:ce:9a:db:e7:04:bf:38:68:0b:a2:4e:e9:1b:90:
         68:e0:fa:0b:7b:c4:55:b7:63:94:c5:98:eb:86:20:45:db:8e:
         bd:c7:b5:84:40:bb:98:ee:ac:1b:fb:c5:52:e2:69:a5:35:9c:
         6b:5d:5f:24:33:5c:75:bd:0b:b9:f7:4a:83:26:4a:45:a0:97:
         0d:c0:92:93:00:2b:32:53:a4:46:aa:f6:ac:74:39:85:0e:7c:
         fb:40:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org