Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/e0RrsF9fIvg47iVTkUYrvpyC-aI.roa
File:                     e0RrsF9fIvg47iVTkUYrvpyC-aI.roa (raw, json)
Hash identifier:          nDKyE5GOzkMwoDiNLxlC74Hy/vLr054BJWV0BSLjtqM=
Subject key identifier:   7B:44:6B:B0:5F:5F:22:F8:38:EE:25:53:91:46:2B:BE:9C:82:F9:A2
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       92
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/e0RrsF9fIvg47iVTkUYrvpyC-aI.roa
Signing time:             Mon 01 Aug 2022 01:28:27 +0000
ROA not before:           Mon 01 Aug 2022 01:28:27 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9607
IP address blocks:        124.147.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:28:27 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=7B446BB05F5F22F838EE255391462BBE9C82F9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:82:fe:88:ba:14:7e:13:a0:68:b8:2f:2b:
                    42:a8:7a:84:ae:75:a6:c0:47:c5:5f:3b:e6:65:c5:
                    d7:8c:b0:a9:d8:d2:c9:ec:45:c8:81:c4:2b:6f:4a:
                    83:e2:1a:5a:c6:f7:ca:57:7e:e3:43:65:29:a4:fd:
                    72:20:65:f7:6e:f1:c1:19:d2:8d:67:99:48:c4:82:
                    b5:a0:79:81:c3:58:e9:c7:b6:d2:b6:6d:fb:38:e0:
                    6a:ca:76:ba:60:11:ef:75:50:0f:d4:6b:12:0a:f6:
                    2e:df:13:8f:56:44:4d:13:00:19:b7:52:00:21:e4:
                    0c:1a:13:8a:37:5e:d8:c5:15:e6:ed:50:17:1b:fa:
                    ad:ff:a7:e4:29:cb:18:3b:f5:71:63:5a:e2:8e:47:
                    2f:65:a0:cf:9d:de:78:1b:53:00:bc:8f:41:d9:27:
                    a8:da:06:d2:1a:9d:e9:77:c4:a2:e7:b0:a4:fa:fb:
                    f8:fd:7d:8a:83:34:c7:e0:89:f6:9e:49:9c:f0:dd:
                    97:b0:d2:77:7a:5a:e4:ce:6b:2e:37:67:1e:e9:04:
                    c4:56:e9:5a:45:f3:92:be:ce:1b:cc:91:10:d2:17:
                    87:f1:77:a8:5b:d4:66:61:e9:de:53:a7:7f:f9:35:
                    90:76:be:a2:24:d1:25:09:06:29:14:f5:37:f9:28:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:6B:B0:5F:5F:22:F8:38:EE:25:53:91:46:2B:BE:9C:82:F9:A2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/e0RrsF9fIvg47iVTkUYrvpyC-aI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:22:17:5e:e3:68:37:01:f7:5d:d7:05:8c:ee:c8:9f:01:84:
         a6:c8:a2:b3:e6:3f:56:9a:b3:56:6a:56:34:72:80:4f:58:69:
         dd:7c:d8:cf:78:6e:5a:ac:a3:53:f8:40:09:96:15:05:f7:83:
         7c:c2:4a:ea:a7:f2:36:70:45:b4:71:8c:b0:ce:77:51:d7:34:
         bf:20:85:27:17:69:b4:eb:10:9f:09:ed:da:14:d7:88:22:21:
         e7:dc:0d:41:42:f3:94:b2:90:bb:d8:0a:20:51:a1:71:84:9f:
         bc:15:42:ff:66:0a:c5:74:d8:39:2a:07:eb:fe:9f:67:cc:eb:
         7f:36:6a:b9:de:88:09:48:82:b5:f1:f5:29:8a:f4:e8:46:2d:
         7d:57:39:34:d9:8a:e6:9a:ac:77:94:59:40:d7:e6:ff:ac:05:
         ab:70:50:6e:17:a4:2c:8c:0a:0f:dc:3d:fc:2e:c7:4d:0a:12:
         08:39:53:9d:ac:f6:d9:15:ea:ac:83:dd:8d:2c:27:7d:d7:69:
         b8:39:23:2a:9c:eb:8e:d6:64:81:df:3b:5d:18:92:31:13:aa:
         b8:01:3e:7a:30:3c:2f:5f:e7:66:17:46:9f:f3:8b:a7:2e:aa:
         4a:7e:ea:3a:a0:e6:32:30:b4:c0:a4:e6:4b:71:f7:b2:1b:24:
         93:f3:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org