Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/mTx6FdDtiIMItbGQ6fixaQcvDsM.roa
File:                     mTx6FdDtiIMItbGQ6fixaQcvDsM.roa (raw, json)
Hash identifier:          JU1dmtUWpKOomZTq7P85Et081RUT2CZ2xo2CYzOsY+k=
Subject key identifier:   99:3C:7A:15:D0:ED:88:83:08:B5:B1:90:E9:F8:B1:69:07:2F:0E:C3
Certificate issuer:       /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10
Certificate serial:       03
Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/mTx6FdDtiIMItbGQ6fixaQcvDsM.roa
Signing time:             Tue 01 Nov 2022 06:52:42 +0000
ROA not before:           Tue 01 Nov 2022 06:52:42 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     19905
IP address blocks:        133.250.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10
        Validity
            Not Before: Nov  1 06:52:42 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=993C7A15D0ED888308B5B190E9F8B169072F0EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:91:ca:cb:aa:88:72:1f:88:4c:aa:90:72:
                    13:ab:2c:52:00:de:6b:b8:51:e5:0f:55:2f:f3:62:
                    2f:0c:cc:09:4e:73:e2:ab:f7:f1:96:de:e5:04:f0:
                    c8:ac:73:79:35:c7:3b:e1:6c:19:d3:54:11:aa:9b:
                    9f:6e:d1:bb:5f:aa:7e:73:86:ec:cc:46:d3:be:ee:
                    b3:eb:91:49:46:9c:76:5a:78:55:39:3c:9e:c0:26:
                    ce:11:9b:aa:ef:8c:a3:77:07:e1:59:1b:9e:00:c7:
                    36:b6:1c:f6:df:0c:57:5c:41:a2:27:7c:fa:3f:1b:
                    ec:4e:3d:7c:f0:55:e6:09:49:5b:73:9a:98:84:ed:
                    7d:b6:b0:e2:9d:d9:82:02:56:5c:2d:a0:62:1e:08:
                    91:ea:4a:fd:ba:74:f4:3e:fe:10:f1:cb:ad:62:fc:
                    a9:db:eb:4d:ff:24:fc:2c:63:5c:a8:61:0d:f2:d5:
                    1d:aa:c0:42:80:c1:15:5f:84:d6:5d:87:e9:5e:3d:
                    43:e2:4d:0c:02:fe:89:7d:36:a6:d3:2d:43:d9:8c:
                    27:8c:9b:19:c9:2e:ce:e4:3e:5b:a2:0f:92:c5:fb:
                    74:7c:4c:6c:8c:d7:97:ab:7f:be:f1:8d:07:9e:70:
                    37:41:f8:82:b8:5a:15:56:01:0e:48:fe:1f:f4:bd:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3C:7A:15:D0:ED:88:83:08:B5:B1:90:E9:F8:B1:69:07:2F:0E:C3
            X509v3 Authority Key Identifier:
                keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/mTx6FdDtiIMItbGQ6fixaQcvDsM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         e8:97:6c:de:b4:18:25:fc:16:f4:27:8c:9e:c0:8a:f1:8d:ca:
         bc:84:90:64:c5:df:8a:20:04:14:63:f5:f1:f4:70:66:34:7c:
         d7:8f:56:8f:a2:19:87:91:da:c3:ed:3e:59:97:1c:85:43:51:
         65:1c:4a:15:58:1d:94:8d:1c:46:69:1e:1c:dd:02:94:e7:6c:
         e4:11:08:2d:35:c6:2a:9f:ae:a5:37:fa:7c:28:40:dc:66:14:
         b7:7e:23:7b:7a:70:64:df:bd:de:fa:37:24:80:32:52:f0:9e:
         cf:4e:ca:af:51:2b:18:12:03:5b:2d:5e:88:9c:db:81:2b:ac:
         de:39:e4:22:1b:5a:cd:8c:f4:e3:15:cd:a3:eb:f6:4d:96:2a:
         26:1f:6e:c4:ea:ec:b5:03:bd:34:df:5a:90:7e:e4:e4:7f:ff:
         a2:e7:25:f5:ae:41:39:71:80:fa:a4:2d:91:57:83:24:ea:69:
         45:9f:2f:c1:ff:60:62:5a:4c:d0:a9:12:a8:c4:ca:28:10:53:
         bd:59:8d:ce:46:a8:08:01:1e:e8:74:11:91:98:18:ef:7e:52:
         23:df:a5:7b:39:9c:c8:df:34:da:1c:dc:25:5a:cb:88:65:5d:
         12:6c:3c:75:e4:2f:ab:d9:46:23:48:99:66:72:f4:14:83:68:
         f2:2a:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org