Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/HVuwWwE9gp8tXqy6HYshWS9wABQ.roa
File:                     HVuwWwE9gp8tXqy6HYshWS9wABQ.roa (raw, json)
Hash identifier:          CWSJ3stvb/HyTdWRibnyPCQ0EoEsVh0Ua0PuG5aVCeY=
Subject key identifier:   1D:5B:B0:5B:01:3D:82:9F:2D:5E:AC:BA:1D:8B:21:59:2F:70:00:14
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       93
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/HVuwWwE9gp8tXqy6HYshWS9wABQ.roa
Signing time:             Mon 01 Aug 2022 01:28:47 +0000
ROA not before:           Mon 01 Aug 2022 01:28:47 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        36.53.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:47 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=1D5BB05B013D829F2D5EACBA1D8B21592F700014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:78:64:13:5f:93:53:2f:da:43:1b:f3:4a:
                    58:bc:47:95:cf:9b:41:7c:2e:f9:68:cf:4a:30:45:
                    f2:e3:d6:54:74:1d:45:83:5f:84:82:4a:1f:3c:64:
                    8c:18:c1:91:ac:eb:61:69:f3:3f:36:6f:df:aa:a1:
                    58:5a:1d:f9:27:44:ac:43:82:e1:52:b1:1b:0a:34:
                    96:d9:ce:c9:61:ea:d6:d1:f8:a1:cb:cc:23:60:8e:
                    07:61:09:f0:aa:59:c4:b8:36:27:30:48:70:11:89:
                    44:de:5f:b3:88:fe:99:33:f3:6b:79:e6:04:26:9d:
                    d7:73:63:f2:e0:9d:c5:6f:0f:7e:13:07:3e:e3:98:
                    ef:bd:42:bd:21:92:43:54:2f:54:29:e1:d5:d8:c9:
                    51:bc:e4:32:43:6c:37:80:81:8d:1c:fd:b5:ba:73:
                    78:46:8c:cd:e8:b3:d7:14:f7:1c:38:7d:0f:0e:38:
                    3a:49:b9:d2:06:08:51:d7:cb:a7:60:39:cb:24:c5:
                    75:f2:b7:55:02:67:31:4c:56:9c:ab:d6:58:81:78:
                    3b:62:a9:00:7b:91:c9:8d:e7:c9:ae:bb:1b:4d:ab:
                    89:1f:00:5d:52:db:64:15:61:3f:5b:53:98:b2:d4:
                    d8:12:e3:d0:21:cf:92:9c:46:a6:1e:ca:27:56:41:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5B:B0:5B:01:3D:82:9F:2D:5E:AC:BA:1D:8B:21:59:2F:70:00:14
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/HVuwWwE9gp8tXqy6HYshWS9wABQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:c2:ba:40:10:b9:73:30:4a:3c:8c:3e:5b:30:b4:29:a6:
         df:29:5e:f6:d2:24:46:58:09:28:ef:b4:11:06:16:c4:49:43:
         5d:91:77:89:39:13:8e:ac:61:06:43:a1:b6:2e:5e:8f:fc:36:
         0a:0d:d2:e3:7e:96:ae:a4:10:fa:fd:be:9d:12:94:c6:4f:3a:
         68:b1:80:0f:44:83:95:81:fb:6c:d6:09:08:ec:a0:a6:b4:65:
         d0:be:bf:c4:6b:fb:38:4d:6b:a0:ac:61:a5:0b:23:7f:b7:cc:
         a6:85:b2:54:e6:54:e0:e5:5a:2d:2d:28:bd:77:29:29:bb:03:
         bd:30:e2:21:e1:27:81:9a:47:90:b8:19:f9:e5:cc:80:37:4f:
         a1:1b:92:ff:26:0b:b5:14:2f:a1:15:32:c2:f2:48:a1:a7:e5:
         c9:1c:37:c5:41:fc:a3:85:27:bf:52:cc:6b:11:8b:d2:3f:9e:
         da:51:52:b7:ee:f5:42:47:db:69:a2:c0:3b:dc:d3:81:91:53:
         e7:be:07:37:e4:49:8c:8f:1c:46:1d:04:9a:94:b6:ff:6e:be:
         c6:df:da:e0:16:11:d5:b0:1f:da:24:c1:19:55:d6:72:96:fb:
         d1:51:22:1c:b9:7c:a8:21:fe:32:52:cd:b3:db:4a:91:be:ab:
         ad:36:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org