Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/0G3UU2amUydhesYi98VVxAH_cxM.roa
File:                     0G3UU2amUydhesYi98VVxAH_cxM.roa (raw, json)
Hash identifier:          lpcTzFpAc8928fZfvAXhT0n9+R936QgAHx2YXMTz2qM=
Subject key identifier:   D0:6D:D4:53:66:A6:53:27:61:7A:C6:22:F7:C5:55:C4:01:FF:73:13
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       2C
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/0G3UU2amUydhesYi98VVxAH_cxM.roa
Signing time:             Thu 01 Sep 2022 01:28:52 +0000
ROA not before:           Thu 01 Sep 2022 01:28:52 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     24296
IP address blocks:        203.95.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Sep  1 01:28:52 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=D06DD45366A65327617AC622F7C555C401FF7313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:2a:cc:ff:17:21:0e:50:fe:78:cc:18:85:
                    12:20:bd:80:a1:cc:fe:dd:3e:dd:bf:06:e9:89:19:
                    26:55:92:3f:3b:ab:25:a3:26:e3:db:33:f3:92:b2:
                    d9:b1:56:69:01:4e:f5:38:0d:0d:dd:f6:1d:67:7f:
                    3d:42:d9:ec:d1:db:c0:b4:81:d0:af:01:aa:7e:6d:
                    35:d6:76:f9:51:c3:14:f8:4e:9d:c8:50:72:97:ea:
                    aa:f5:b4:51:3d:d9:88:d7:8d:58:2b:9b:b0:22:42:
                    64:78:f3:8e:de:b9:66:7c:86:b2:16:bc:1d:ce:ab:
                    d7:97:a0:a8:9c:72:06:86:44:21:b2:b0:df:ae:69:
                    3a:1b:ac:21:c9:a0:44:4f:ca:f4:d9:d8:d8:b6:45:
                    1f:e9:55:35:5e:e8:1b:c0:98:a5:94:ad:4c:62:43:
                    dd:99:ce:a1:78:2b:f0:a7:e0:b1:08:25:e6:51:b2:
                    3e:da:80:2a:7f:06:97:f3:db:e0:54:5b:0d:94:27:
                    e1:32:11:0a:6e:62:d9:72:18:5f:4a:13:89:1a:a3:
                    5b:94:52:fb:14:10:29:10:07:f6:de:72:d1:1a:7e:
                    3f:3c:61:0f:d6:12:ed:b4:f6:b9:e0:49:eb:d5:fa:
                    af:ae:8e:20:be:ce:d3:1c:9b:2a:31:f2:ce:67:47:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6D:D4:53:66:A6:53:27:61:7A:C6:22:F7:C5:55:C4:01:FF:73:13
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/0G3UU2amUydhesYi98VVxAH_cxM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:9e:cc:90:d3:1a:72:b4:d8:c8:b9:13:f5:5a:2c:ea:41:
         92:0e:19:52:73:c6:c6:fe:99:be:9a:e3:e6:a3:0b:74:23:b4:
         21:e2:d5:79:f2:a3:c0:f5:46:60:4b:2b:d0:2d:fd:95:b8:05:
         6f:59:d0:a5:c5:f2:53:f5:ee:61:05:9e:0a:f2:3a:2f:bc:dd:
         ae:c7:1a:71:b9:c5:48:26:8b:52:7e:4e:a9:a8:7e:8b:60:49:
         e6:9b:f5:dd:35:45:1c:cd:be:dd:ba:35:ba:cf:c8:82:b5:c8:
         bf:6b:e1:1a:3d:aa:a2:8c:86:00:63:1a:73:34:e8:a2:71:36:
         3e:bf:1f:80:1b:db:eb:d8:f2:79:b4:e5:2a:cf:11:c9:9f:53:
         51:5d:c8:87:da:68:41:29:1d:1c:f1:7d:4e:3b:ca:86:b8:ff:
         3b:b3:6d:7e:75:d3:c9:2a:e5:07:a9:09:9f:af:24:aa:e7:7f:
         c9:13:69:d2:ee:5d:f7:c4:75:99:e6:1d:b4:61:b3:d7:5a:33:
         a7:bf:d7:d0:f9:d9:e7:e1:ed:ff:39:1f:4c:d2:20:51:d4:62:
         d0:6f:b0:c7:e2:2b:de:7f:d7:10:9f:5d:51:a3:86:6c:dc:ee:
         b6:24:3b:01:f6:00:6e:9e:24:7f:90:9a:ae:aa:be:4e:90:85:
         ac:68:ca:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org