Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/7vDz_l6WD-1EK6XI9ssLKbkbl-M.roa
File:                     7vDz_l6WD-1EK6XI9ssLKbkbl-M.roa (raw, json)
Hash identifier:          e/kO9q9pQPTQQQgghMSj090Xa43WO/RZ2gOrPISB958=
Subject key identifier:   EE:F0:F3:FE:5E:96:0F:ED:44:2B:A5:C8:F6:CB:0B:29:B9:1B:97:E3
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       82
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/7vDz_l6WD-1EK6XI9ssLKbkbl-M.roa
Signing time:             Sun 01 May 2022 01:30:14 +0000
ROA not before:           Sun 01 May 2022 01:30:14 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        203.141.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:14 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=EEF0F3FE5E960FED442BA5C8F6CB0B29B91B97E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:f4:fc:43:68:a7:24:d2:b8:dc:bd:e5:1d:
                    a6:cd:e4:0b:1a:da:40:87:7b:8e:db:9c:70:4a:27:
                    6d:3d:9c:8d:d0:2a:4b:01:29:e6:e7:47:25:b7:46:
                    5b:ae:5d:32:ad:e9:64:86:7e:be:e5:82:40:91:79:
                    54:60:db:9d:03:82:5b:3c:7d:cf:c4:3e:bb:20:db:
                    2b:08:fa:ab:52:fc:16:99:fa:a7:40:cf:a1:bd:be:
                    a6:5b:65:17:45:24:2e:11:4e:f4:74:9b:8f:44:85:
                    4d:de:6e:fa:7f:f0:d2:13:0c:33:b6:73:4e:ed:74:
                    6a:6c:3a:6f:c3:a6:c2:e1:a9:81:25:6a:d4:32:e0:
                    98:6f:2d:ad:61:26:b4:01:19:7b:3f:c1:ef:8f:b4:
                    ae:52:16:c0:2f:52:9c:34:81:3d:62:cf:8c:6c:87:
                    89:c9:0a:99:59:bb:8a:ec:5a:69:7f:65:c0:4a:b1:
                    11:90:c4:54:7e:7b:42:75:7c:0a:b2:7b:d0:ca:32:
                    4a:54:ae:2e:9b:14:1c:18:e5:79:4f:19:b1:50:83:
                    db:30:1b:f4:bd:21:fe:1a:83:b7:ff:f3:c8:55:20:
                    6e:6c:4a:1d:1d:22:27:7f:65:2f:e5:2b:0f:2f:41:
                    7e:85:79:d4:96:82:19:8a:58:b7:17:01:33:06:e4:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:F3:FE:5E:96:0F:ED:44:2B:A5:C8:F6:CB:0B:29:B9:1B:97:E3
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/7vDz_l6WD-1EK6XI9ssLKbkbl-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:57:77:80:d4:5e:cf:4a:98:0f:ce:d0:87:80:27:83:8b:
         ed:d0:6a:7f:cc:02:d6:6b:64:5f:b4:99:47:2a:54:21:8c:37:
         59:61:d5:a7:73:0a:86:53:85:0b:12:5e:ec:c2:b7:44:75:78:
         9a:72:7d:0c:f9:1d:01:58:8b:e4:97:30:3e:5c:b9:82:4d:74:
         72:cc:74:44:5c:3f:69:81:79:a9:0c:6a:d4:7a:b8:f5:d0:1a:
         1b:f9:c8:ce:b2:c0:0b:1c:fb:b7:7a:59:f5:fb:b8:00:d5:da:
         af:df:f7:df:ba:b3:11:a1:41:29:fa:25:a7:18:a5:c8:b0:d4:
         bd:fa:e4:a1:44:88:61:1a:42:49:4d:35:ec:85:a5:2f:d2:5f:
         5a:e7:ca:2e:24:8b:b9:0d:87:e1:09:1e:f2:33:5b:72:52:4c:
         01:67:86:50:e8:eb:08:e1:d4:5e:fc:ae:b7:1b:df:75:90:d9:
         89:a0:fa:77:55:04:02:ab:0c:80:e1:56:18:bf:5c:a2:99:a8:
         9b:54:cc:34:b6:08:35:3a:e9:74:a8:e0:fe:4f:3b:3b:1c:7a:
         10:9d:e8:3a:68:22:a5:51:b4:c2:22:b7:7c:fe:62:fa:0d:43:
         b3:fa:ed:53:f7:c2:67:db:c2:e6:69:46:42:f7:0e:3c:47:ba:
         81:1d:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org