Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/RLeBz2kfGqRFhWg0csSmSFh16b0.roa
File:                     RLeBz2kfGqRFhWg0csSmSFh16b0.roa (raw, json)
Hash identifier:          pOEBJiV3z39rFHJXbcKqc11oDMoo4rTmanhK1aH5HJE=
Subject key identifier:   44:B7:81:CF:69:1F:1A:A4:45:85:68:34:72:C4:A6:48:58:75:E9:BD
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       80
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/RLeBz2kfGqRFhWg0csSmSFh16b0.roa
Signing time:             Sun 01 May 2022 01:30:12 +0000
ROA not before:           Sun 01 May 2022 01:30:12 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        203.141.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May  1 01:30:12 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=44B781CF691F1AA44585683472C4A6485875E9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:24:75:5a:45:e2:23:32:f0:cd:51:24:fb:
                    7f:d9:c0:6f:5f:68:78:1a:5c:3c:0c:67:a2:27:fb:
                    d2:72:3a:49:b8:76:b8:3e:e9:c7:34:dc:f6:4a:32:
                    e1:44:8a:67:d6:65:3f:dd:a3:e3:86:13:33:e9:fb:
                    39:92:e4:92:be:7b:18:de:1f:19:ef:9a:2f:cf:71:
                    23:93:f7:28:79:e8:78:66:b9:62:1b:98:b7:1a:06:
                    65:08:ba:82:ba:7a:75:b7:19:92:1b:1e:45:a8:67:
                    98:b9:e3:f2:72:71:6f:52:08:45:0e:60:d8:d5:94:
                    c7:f2:5b:af:84:33:72:71:62:04:b6:49:4d:59:e4:
                    2d:31:c5:c4:fe:1e:e7:6f:78:e7:8e:a9:9f:55:61:
                    38:e8:71:ac:a1:28:b5:9a:5f:12:6e:08:b3:d7:96:
                    18:b1:5c:c0:dc:7a:94:e0:b2:a2:e1:b6:a8:e6:20:
                    32:e8:69:64:59:03:a2:e2:c0:11:3a:bc:f9:98:4b:
                    b9:ff:39:fc:ee:4a:8b:96:19:2c:c7:60:db:5f:91:
                    e0:8c:01:b5:ab:70:c1:b0:ed:5c:ee:c1:0d:e3:f5:
                    70:da:87:52:a2:b4:ab:b8:42:a3:b4:ac:96:ba:e4:
                    5c:44:bb:ca:87:fa:5e:b1:be:a7:cd:35:51:16:10:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B7:81:CF:69:1F:1A:A4:45:85:68:34:72:C4:A6:48:58:75:E9:BD
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/RLeBz2kfGqRFhWg0csSmSFh16b0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:8d:56:08:ba:cb:0f:2d:5e:c6:04:7c:07:56:8d:f9:5e:79:
         d1:46:f3:ce:b8:37:a8:e9:e7:9c:f1:ed:4f:9b:60:ff:02:1e:
         3d:eb:56:0f:4a:7f:95:b8:75:17:33:73:5d:f2:bb:ea:d4:44:
         d0:96:20:b7:b7:15:f0:d7:d6:b4:e1:51:20:5f:83:3e:93:da:
         f8:8e:20:cb:9b:51:5d:75:9a:ba:77:1a:8a:fe:bb:90:a0:6c:
         1b:d2:c1:dd:d7:9c:b1:0f:39:29:f6:95:74:55:09:a2:fb:3d:
         4e:ee:a1:ad:24:47:6a:c4:49:ea:84:d1:72:13:28:cd:88:05:
         a8:21:c2:d1:ef:a5:19:d7:15:2e:49:2a:3c:f3:44:b1:4c:1f:
         a4:4c:0e:79:03:7c:54:dc:d0:00:a8:e4:0f:bb:96:5d:ba:a9:
         df:e4:fd:65:34:20:e9:1a:77:5a:1f:18:e6:e0:6d:db:26:a8:
         9e:50:5f:19:52:b1:5c:03:0f:72:0d:f2:76:70:3c:92:c2:50:
         c0:bb:22:3a:3d:3f:f6:08:af:ad:07:3d:6a:ac:e0:49:36:80:
         62:36:44:16:0d:6a:0c:e4:96:15:26:33:54:f7:b3:28:a7:8f:
         6c:30:e0:19:cb:36:10:f0:44:26:49:dc:fd:d9:bd:a7:47:c2:
         91:13:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org