Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/f7h_q1ZGDvIVHM1K4tm0iJIRU6k.roa
File:                     f7h_q1ZGDvIVHM1K4tm0iJIRU6k.roa (raw, json)
Hash identifier:          TFYIGCdH9BsO1JjZxc2kB2NcK0iMQZjKzZgLjrCOheE=
Subject key identifier:   7F:B8:7F:AB:56:46:0E:F2:15:1C:CD:4A:E2:D9:B4:88:92:11:53:A9
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       91
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/f7h_q1ZGDvIVHM1K4tm0iJIRU6k.roa
Signing time:             Mon 01 Aug 2022 01:28:27 +0000
ROA not before:           Mon 01 Aug 2022 01:28:27 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9607
IP address blocks:        124.147.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:28:27 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=7FB87FAB56460EF2151CCD4AE2D9B488921153A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:45:2f:68:8c:5c:40:da:8c:74:e1:52:2d:
                    26:82:15:2b:5f:04:8d:6c:6d:4f:86:30:1f:e3:30:
                    18:24:ac:da:e7:dd:3a:ea:8d:8d:46:6b:03:b4:e3:
                    84:cb:45:29:69:3f:e7:df:a1:3d:59:d0:73:04:7a:
                    4a:db:d8:92:14:a3:b1:2c:88:c7:7a:f3:b5:6a:45:
                    f2:cd:68:66:01:9c:c2:a4:46:15:46:8d:86:60:10:
                    40:a7:d5:be:fb:1d:85:92:54:a8:51:79:76:4c:b9:
                    b6:1a:bd:b1:55:bc:d9:9b:ac:71:1d:c4:5c:50:fa:
                    d5:90:95:de:f4:0a:7c:31:ec:55:d9:20:b5:e5:40:
                    16:e0:3c:c4:44:87:85:a3:b6:6b:bb:e7:50:d4:c4:
                    bc:9c:55:b8:73:a2:46:99:56:54:e2:b2:81:d7:f6:
                    9c:38:3c:0f:14:0a:09:ee:0b:76:49:0f:3f:9c:85:
                    ad:62:16:23:17:95:8b:25:9d:35:6c:78:36:4d:fa:
                    df:62:93:2b:f9:d1:19:06:04:a3:3f:a1:54:20:62:
                    d6:62:0f:67:f2:c6:73:54:1e:63:6d:60:f5:f5:04:
                    72:f8:d6:ee:56:ee:e3:1c:80:7d:30:25:c8:07:3e:
                    be:87:81:c8:f5:5b:6c:93:e7:83:01:6a:99:9c:ae:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:7F:AB:56:46:0E:F2:15:1C:CD:4A:E2:D9:B4:88:92:11:53:A9
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/f7h_q1ZGDvIVHM1K4tm0iJIRU6k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:0d:a3:ae:61:b6:9c:62:0c:fa:23:87:9a:95:bf:a3:c8:
         29:fd:3b:9f:f4:0e:12:2e:f7:a3:4d:92:0f:02:b4:07:cc:83:
         1a:09:72:53:50:44:17:d9:b3:e3:cd:ad:f2:05:ba:3f:8e:d1:
         d2:8e:78:96:b3:a1:79:35:e2:46:78:e0:46:ff:e3:82:48:24:
         dc:28:14:42:ca:62:2b:b0:3c:3c:bc:82:5c:24:4d:3c:0a:16:
         11:3e:86:e4:b0:8e:c0:57:5b:a0:97:67:c8:28:2f:20:16:78:
         cc:71:bc:a7:89:12:6e:7b:81:6c:4a:46:46:4e:b1:b1:ca:8e:
         21:c6:85:74:a4:c6:0e:18:b1:5b:e2:c1:92:fa:fd:43:9d:5f:
         43:fb:b6:ed:f9:46:16:e8:ae:cd:56:a9:48:f3:7b:d7:82:29:
         97:22:1f:3d:04:ba:cf:c2:be:e0:ee:07:d6:93:35:94:a2:0e:
         06:35:c8:99:9a:f0:2a:99:20:7b:06:0d:da:d2:ae:8c:ff:f9:
         25:f0:ff:26:51:5d:7f:9e:2b:0a:fb:8f:cd:9a:cf:f3:40:8f:
         a9:0d:83:ac:00:86:cc:24:a2:b5:f5:d5:89:ce:fe:ff:cf:f9:
         e7:45:27:85:fc:15:d9:ee:5f:7a:bf:2b:1b:82:56:9f:22:bf:
         74:06:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org