Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/NyZrPPlPSisKDppTFT6pwRPDQcI.roa
File:                     NyZrPPlPSisKDppTFT6pwRPDQcI.roa (raw, json)
Hash identifier:          s+Dgg2o/EPo3xrTVIyi8EhaWlyEOroI8QSiQecxZ+eI=
Subject key identifier:   37:26:6B:3C:F9:4F:4A:2B:0A:0E:9A:53:15:3E:A9:C1:13:C3:41:C2
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       6C
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/NyZrPPlPSisKDppTFT6pwRPDQcI.roa
Signing time:             Tue 28 Sep 2021 08:05:31 +0000
ROA not before:           Tue 28 Sep 2021 08:05:31 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     55898
IP address blocks:        203.141.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 28 08:05:31 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=37266B3CF94F4A2B0A0E9A53153EA9C113C341C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:0b:39:29:a8:99:e7:09:35:cb:cb:ba:c8:
                    81:d7:f2:08:5c:ab:7b:db:8d:6c:09:64:26:88:bf:
                    4a:22:5d:90:63:f8:34:2d:74:e4:c7:e2:54:3b:7d:
                    58:d5:0d:c2:1a:22:70:02:38:95:d6:f9:b6:ae:7b:
                    14:31:b7:10:f5:47:e2:e8:9f:40:11:fd:9e:d0:ca:
                    ff:4a:0d:68:9f:13:64:e0:8f:e6:90:69:cb:43:b1:
                    e0:a1:65:99:10:fd:55:8a:e8:7a:84:ab:e9:48:d6:
                    d4:3f:05:cf:be:d7:7e:31:1b:27:a5:0d:cf:e7:72:
                    63:7a:40:41:8d:da:f4:d6:ac:e1:7b:f9:0b:fd:b0:
                    f3:a9:d8:14:d9:fc:99:45:27:46:a2:04:b3:cb:14:
                    8d:b0:ca:02:4c:b9:e4:a4:73:99:b0:aa:ff:23:9c:
                    2c:c3:d9:83:97:fc:41:8d:98:28:3d:d1:0c:72:07:
                    b0:aa:98:54:6c:48:d9:d7:77:d8:8f:45:c9:39:e4:
                    f0:fd:d0:99:b8:dd:c5:82:24:43:66:f5:d4:c6:07:
                    3e:aa:d9:38:f0:00:e7:2d:e7:e2:05:c2:22:c0:5f:
                    2d:37:49:3b:69:98:a9:7a:43:62:8d:30:d1:d3:ff:
                    a6:3a:d5:a4:8b:f1:2b:c6:ff:07:ec:9e:de:5c:bd:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:26:6B:3C:F9:4F:4A:2B:0A:0E:9A:53:15:3E:A9:C1:13:C3:41:C2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/NyZrPPlPSisKDppTFT6pwRPDQcI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:a5:04:2d:9b:f9:65:8d:42:ee:77:8d:a8:98:11:c1:94:
         8b:5b:05:7f:52:51:bd:7d:dd:88:34:1d:a1:71:b2:43:df:cb:
         59:3c:30:89:f2:d6:80:1d:16:73:1d:a0:2b:ce:ba:ac:8b:7a:
         87:37:50:7f:cb:a0:ad:46:b1:ff:49:10:bd:74:8d:ff:bd:4a:
         07:ee:f2:55:f1:f9:24:fa:b7:47:01:02:60:84:50:69:fa:d8:
         5c:27:6c:60:6d:ac:b5:18:c3:8f:01:90:9f:4e:e2:d3:cb:4d:
         db:96:71:aa:76:53:39:d1:9c:29:49:d6:75:05:8b:3c:9c:5d:
         21:15:52:dc:be:fc:13:70:74:d0:3b:ec:04:8d:40:1e:2a:7f:
         5f:ce:6c:2d:98:d4:7f:e6:09:e1:11:02:0d:69:b7:b9:11:56:
         9a:6a:09:c4:db:87:29:1e:e4:64:82:bd:91:12:c7:89:e3:72:
         23:cf:85:88:fe:4e:de:bd:c7:cb:fa:d4:ba:c1:58:78:39:5b:
         d2:47:ad:35:c0:c5:76:af:08:4d:c6:06:1c:19:70:c9:23:67:
         db:1f:3c:64:85:94:b3:5b:da:c3:09:64:a8:62:40:12:fe:2c:
         b0:3f:5e:59:a9:be:87:55:95:b2:31:ca:96:e5:e2:41:15:f6:
         78:a2:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org