Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/rXZIZLYX6yIEj6s2CA5hIEGxoZs.roa
File:                     rXZIZLYX6yIEj6s2CA5hIEGxoZs.roa (raw, json)
Hash identifier:          3Si96MYjWGl71XdHpwmnrjRLgwXgxWg8T1Z0yrbLpac=
Subject key identifier:   AD:76:48:64:B6:17:EB:22:04:8F:AB:36:08:0E:61:20:41:B1:A1:9B
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       2D
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/rXZIZLYX6yIEj6s2CA5hIEGxoZs.roa
Signing time:             Thu 01 Sep 2022 01:28:53 +0000
ROA not before:           Thu 01 Sep 2022 01:28:53 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     24296
IP address blocks:        210.189.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Sep  1 01:28:53 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=AD764864B617EB22048FAB36080E612041B1A19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:12:46:ca:04:5a:6c:ff:f3:76:e5:f1:d9:
                    1b:8a:b4:3b:e9:3a:bb:8a:66:de:e6:19:c7:a5:a7:
                    d4:e0:30:16:da:d1:b7:79:df:7c:f4:95:3e:85:55:
                    b5:c1:e7:2f:8c:16:6e:83:6d:86:5e:d3:79:a3:77:
                    73:d7:91:a9:3a:e2:62:ca:2a:57:68:dc:f4:bb:a9:
                    c1:e2:f2:5d:6d:75:5b:23:4d:8a:ba:0e:95:98:cf:
                    34:51:b2:ea:29:e5:e3:c8:86:cb:cd:85:82:14:51:
                    08:bf:a1:19:a5:6b:03:8f:35:eb:8e:3d:64:a5:15:
                    db:49:2f:24:a9:83:c9:34:18:cc:af:6c:e0:b5:83:
                    af:9a:02:2d:43:07:06:66:b0:76:40:66:ab:b4:e1:
                    99:3a:f3:f8:81:99:1e:d9:88:df:d2:63:0a:49:84:
                    24:4f:e3:0f:38:e6:a4:c8:36:9a:9c:6f:8e:75:34:
                    ca:36:54:d3:43:16:bd:a8:a2:f2:b1:64:e8:e5:15:
                    42:cf:38:01:b7:0f:84:06:84:2a:ab:3d:66:02:8f:
                    69:9b:1a:b4:04:9c:2e:9a:39:b8:36:30:e2:13:c3:
                    e7:93:a1:d6:f5:7c:f0:73:b0:23:86:7e:d5:4d:5d:
                    e7:d3:d1:e6:7f:4c:b9:a8:df:4a:b0:52:d2:b2:6b:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:48:64:B6:17:EB:22:04:8F:AB:36:08:0E:61:20:41:B1:A1:9B
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/rXZIZLYX6yIEj6s2CA5hIEGxoZs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:5a:fe:7f:f1:aa:8d:2a:fe:6e:6e:af:a9:bb:d0:9e:fe:5f:
         d3:f0:5b:87:02:cc:3d:8a:2d:7f:de:42:62:25:7b:52:a2:f5:
         e9:72:be:98:94:c2:5b:21:d7:8d:02:b9:4e:87:71:32:e2:1e:
         18:83:28:60:ee:10:4a:0d:2c:d8:4c:78:11:74:48:11:67:42:
         88:54:f8:a3:0b:71:6a:b1:67:b4:e0:23:b8:5e:ad:61:20:54:
         20:ae:d9:90:04:ce:d8:90:31:84:95:92:50:10:c1:37:c1:7f:
         a0:f6:89:85:89:58:15:1f:6a:47:52:42:2b:d9:ce:a4:41:1b:
         61:59:30:87:fe:3a:d6:1e:07:a9:4d:0c:61:49:8a:db:59:35:
         d7:10:57:0f:b7:7f:e4:b7:b2:95:e5:49:ad:63:ac:4f:69:cc:
         28:30:a2:e2:70:f5:85:e2:fa:4e:e7:45:ca:0c:ab:63:13:14:
         fb:36:dd:c4:7a:f1:4f:94:86:dc:fe:aa:95:7e:f2:fc:fc:0d:
         09:24:64:b4:60:eb:f7:ee:b8:4e:2f:51:72:79:70:88:ae:3a:
         26:d7:07:8d:d1:0a:89:9b:0f:27:20:45:0f:16:ad:da:34:93:
         a5:96:8c:95:9a:6c:7a:59:6e:1b:54:ef:90:21:ec:28:91:02:
         2e:d1:a3:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org