Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/ZNX1mgCWuWsFXY6nmHO9B6Dj8WI.roa
File:                     ZNX1mgCWuWsFXY6nmHO9B6Dj8WI.roa (raw, json)
Hash identifier:          gvXHlY95dUGk/IIOjI3g3EJ73z32tiQ9VJEKgvJDmCs=
Subject key identifier:   64:D5:F5:9A:00:96:B9:6B:05:5D:8E:A7:98:73:BD:07:A0:E3:F1:62
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       03
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/ZNX1mgCWuWsFXY6nmHO9B6Dj8WI.roa
Signing time:             Tue 09 Mar 2021 05:25:56 +0000
ROA not before:           Tue 09 Mar 2021 05:25:56 +0000
ROA not after:            Wed 09 Mar 2022 04:53:50 +0000
asID:                     55396
IP address blocks:        192.50.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Mar  9 05:25:56 2021 GMT
            Not After : Mar  9 04:53:50 2022 GMT
        Subject: CN=64D5F59A0096B96B055D8EA79873BD07A0E3F162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:4f:d2:37:1e:ba:08:73:92:2d:79:d6:c7:
                    87:57:24:21:84:ae:a8:e4:9d:f5:c9:72:50:fd:56:
                    45:ee:26:fd:85:f9:6c:07:59:1c:77:5b:d8:16:da:
                    9f:ba:19:e5:c6:58:1c:1e:1f:04:66:a7:0f:2f:63:
                    81:6a:e3:c9:4f:6f:4e:f4:7a:47:9d:38:c2:8e:23:
                    05:84:ad:8f:7f:08:88:f5:3a:9b:c5:fa:28:af:64:
                    37:f6:50:15:25:24:ed:05:76:cb:3b:5b:00:18:82:
                    a5:4c:75:8b:67:f7:06:07:22:53:91:8c:88:5a:06:
                    e0:cd:00:23:ba:42:47:1a:9b:12:fb:41:b1:3c:82:
                    04:73:db:17:e2:1f:97:b8:5b:7d:fe:f4:83:3b:d2:
                    8a:74:b1:8b:5c:b9:28:f8:64:4b:ac:a7:5a:a0:03:
                    10:d8:b1:19:78:81:03:6c:94:2f:f9:6e:5b:a8:ec:
                    54:7e:e4:63:d4:d8:f9:74:ce:c1:32:be:e2:09:01:
                    20:3b:6f:8c:3b:d8:2f:59:84:07:76:0f:ac:05:a7:
                    bc:0b:7d:32:e6:d2:3b:44:0f:c1:c9:ec:dd:c7:0b:
                    16:53:5f:c9:58:0e:b2:ce:94:dc:79:77:f7:e7:58:
                    55:37:97:d6:40:0b:61:6e:1a:e0:fb:05:21:4f:e6:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:F5:9A:00:96:B9:6B:05:5D:8E:A7:98:73:BD:07:A0:E3:F1:62
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/ZNX1mgCWuWsFXY6nmHO9B6Dj8WI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:f8:44:dd:f1:0a:67:58:db:e1:bd:d5:15:a3:75:86:a0:89:
         04:4e:7a:05:6e:7e:b1:cc:b4:f1:9e:a0:89:e3:f8:ed:e8:fb:
         fb:8f:6a:c6:65:9d:b2:b2:0e:d4:03:a2:39:29:b4:e8:b2:cc:
         a3:6d:02:74:a0:7e:f0:fd:8d:93:0b:8a:04:5f:c4:fb:28:30:
         35:3a:51:38:e6:09:86:d4:d5:1d:b7:a1:01:3c:cc:c2:19:d9:
         45:42:e9:90:d1:4f:dd:bc:42:40:01:b8:35:af:10:83:76:c5:
         d2:e9:7a:69:6c:77:5e:50:2c:e0:6f:9f:3e:ca:fd:70:7d:07:
         48:25:3e:17:67:d7:cf:17:24:4b:c3:f0:dd:47:98:cd:2d:fb:
         1c:3a:2f:8e:e3:30:90:93:d7:4c:80:eb:a7:bb:24:fe:58:d6:
         0a:e4:11:bd:bd:0e:af:08:8d:11:b4:c1:6a:04:94:60:97:4d:
         79:5b:fc:b6:67:7a:a5:4a:69:09:ac:2b:35:8b:7b:a7:dd:d8:
         26:43:f4:20:19:21:1c:5b:2e:78:e5:0b:9b:d3:69:9f:b2:5f:
         f1:6b:d0:9f:c9:44:00:93:a3:7a:4e:66:1e:34:b8:05:2c:e0:
         ab:a4:21:ac:23:17:18:83:65:70:57:69:40:41:d5:1d:f4:23:
         cc:d2:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org