Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/-VBJncu0FxfPkVyGuE5YUukRoqM.roa
File:                     -VBJncu0FxfPkVyGuE5YUukRoqM.roa (raw, json)
Hash identifier:          /AcYWKOXhwhjvg6wgy1gnTmOtiUFYgc4zgPF/hAYeTs=
Subject key identifier:   F9:50:49:9D:CB:B4:17:17:CF:91:5C:86:B8:4E:58:52:E9:11:A2:A3
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       87
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-VBJncu0FxfPkVyGuE5YUukRoqM.roa
Signing time:             Sun 01 May 2022 01:30:18 +0000
ROA not before:           Sun 01 May 2022 01:30:18 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        211.14.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:18 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=F950499DCBB41717CF915C86B84E5852E911A2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:a0:cd:b5:c7:f2:01:77:a0:68:e4:20:34:
                    44:4f:ac:df:a9:bc:c2:c7:07:be:aa:fa:48:5e:cf:
                    a9:b4:65:61:80:91:fc:4b:20:af:92:f6:08:d9:dc:
                    60:a5:47:c3:55:21:10:54:4a:48:0e:b4:94:96:cc:
                    ba:3e:9c:75:4f:6f:d8:06:74:78:71:ff:82:8f:69:
                    05:e8:45:84:5e:0c:dd:cf:d3:cc:4f:47:ab:1f:bb:
                    ed:62:ff:85:66:28:6b:2e:8c:fe:0a:cb:f8:7b:0d:
                    43:34:8c:f4:00:40:91:2a:36:f3:41:d9:53:88:4b:
                    64:83:95:e0:e2:a6:44:41:00:9c:4c:32:2d:7c:04:
                    73:fe:d3:31:35:e4:00:b9:6e:3b:0f:da:c3:88:74:
                    03:9b:92:b1:cb:63:6d:e8:bb:11:7b:23:1d:a7:37:
                    96:0c:ad:4b:76:e0:0d:89:b1:05:59:cf:1e:86:e8:
                    82:01:0c:43:d7:e7:d2:06:6c:52:1e:b7:38:95:38:
                    31:1a:88:e1:d2:f0:f4:8f:36:b3:7c:a7:1e:c4:e8:
                    c0:b2:ad:db:8f:56:ee:e3:8b:be:2a:62:9d:17:38:
                    d3:55:63:56:fa:1b:be:bf:4a:f8:56:5a:18:cb:40:
                    c9:85:52:ab:9f:cb:fc:69:58:b9:ad:a5:46:e8:47:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:50:49:9D:CB:B4:17:17:CF:91:5C:86:B8:4E:58:52:E9:11:A2:A3
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-VBJncu0FxfPkVyGuE5YUukRoqM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:f9:04:e8:5c:5d:9e:f1:0f:e4:d9:eb:57:a7:7d:8c:aa:fa:
         8a:2d:af:e3:c0:ca:db:e2:1b:aa:81:8a:67:5e:3c:5a:81:e5:
         28:19:39:1f:c2:ed:aa:fb:7a:d9:48:85:f7:c4:0a:69:f7:fa:
         af:be:3c:65:a0:22:14:fd:2a:dd:0e:1d:aa:ed:b6:0c:a7:c6:
         6f:d6:f1:a6:39:1a:27:8d:fe:50:01:52:a2:f6:34:91:85:8b:
         3f:e3:dc:60:4b:ca:08:9b:8e:30:26:ca:c2:dc:32:55:87:1d:
         bb:12:3c:5c:d4:d7:86:c5:fd:87:ec:a7:ae:ad:76:f4:2b:0f:
         a3:1b:a9:09:71:a7:13:ab:83:67:8d:97:25:c7:44:66:83:f5:
         90:3d:cd:30:8f:c7:5c:b3:17:75:88:6e:64:29:95:36:16:bb:
         7b:17:eb:59:dd:71:93:00:56:f2:86:3c:a8:13:db:e6:7b:b6:
         2b:13:6a:ef:27:d6:ce:2b:d6:f0:d5:6e:c6:df:21:a4:cf:7e:
         14:16:31:34:f5:0e:8a:4f:26:b6:6a:6d:63:57:93:5d:89:1a:
         c4:8f:ac:84:4b:03:3e:af:a7:85:ee:8e:7d:cb:75:66:cd:99:
         26:8e:ef:25:93:4b:39:86:5c:c0:40:2f:ac:96:e1:16:18:5a:
         46:50:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org