Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/qdEvGLaxED0VPGC8RMsLAc2VRyo.roa
File:                     qdEvGLaxED0VPGC8RMsLAc2VRyo.roa (raw, json)
Hash identifier:          JUbJNmDw63XD8rIqzIbKVrkj9oUH9ACdc65T6QU/o+o=
Subject key identifier:   A9:D1:2F:18:B6:B1:10:3D:15:3C:60:BC:44:CB:0B:01:CD:95:47:2A
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       93
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/qdEvGLaxED0VPGC8RMsLAc2VRyo.roa
Signing time:             Mon 01 Aug 2022 01:28:27 +0000
ROA not before:           Mon 01 Aug 2022 01:28:27 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9607
IP address blocks:        124.147.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:28:27 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=A9D12F18B6B1103D153C60BC44CB0B01CD95472A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:9a:ba:b3:65:ca:30:a2:40:4c:66:80:cf:
                    75:2a:d9:e2:45:81:01:d8:4e:65:73:72:d7:15:7a:
                    c2:d6:7d:da:0c:c1:cc:b4:c2:72:56:b7:ca:f0:99:
                    7e:01:96:fa:36:88:0b:e2:aa:53:b3:a1:5f:eb:d6:
                    98:65:72:ed:f6:32:d7:09:54:83:a1:e0:28:ac:a9:
                    c6:8a:ea:50:0f:5a:81:38:1e:fa:83:e2:1a:32:a6:
                    70:d7:66:84:59:13:12:57:11:ea:28:37:42:39:5e:
                    f0:a4:cb:b9:7c:24:d6:3e:4e:39:15:99:56:d4:62:
                    70:98:71:e9:74:29:b7:7b:6e:c0:9b:3d:88:35:a3:
                    f6:66:fa:f7:83:a3:25:a7:5e:14:e2:7c:9a:e6:40:
                    1f:f9:74:04:6f:53:5c:f1:84:e2:db:72:7d:d2:21:
                    8e:1e:f0:a7:cd:93:e4:69:db:99:10:68:5e:eb:a9:
                    0e:a7:a3:97:3a:2b:df:34:4f:28:5c:19:95:0b:a7:
                    eb:c4:10:0e:59:ec:97:9e:84:d1:50:70:58:24:af:
                    3c:bf:b3:44:2e:93:3b:bd:88:d1:fd:06:08:52:25:
                    28:9c:d2:b5:47:51:52:2f:f1:dc:19:ef:c2:42:9d:
                    71:1e:0a:e9:e7:84:13:b8:fe:00:9b:09:03:04:d5:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D1:2F:18:B6:B1:10:3D:15:3C:60:BC:44:CB:0B:01:CD:95:47:2A
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/qdEvGLaxED0VPGC8RMsLAc2VRyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:85:7d:b2:f2:5e:b2:6b:da:32:29:45:7b:06:7f:aa:29:
         9d:1e:40:0e:3b:2e:ed:f6:72:07:89:99:1c:6a:de:45:b7:7c:
         bd:51:96:6c:e4:5a:66:c0:86:5b:62:7e:aa:7e:01:b3:ba:3e:
         a3:25:73:5a:02:92:0e:b3:85:4f:1a:f1:a8:24:d9:9f:c8:78:
         36:98:80:c9:c4:ae:4a:aa:d4:6a:3f:24:d2:86:80:8e:5c:4c:
         a2:4a:01:07:9a:e1:fb:fc:44:13:3f:39:73:e0:d6:86:ff:a5:
         be:6e:94:51:fc:12:a4:18:80:b0:72:79:85:ea:b3:3f:ce:56:
         6d:a6:f4:6c:68:73:1b:c8:4c:17:ed:bf:90:24:9b:a7:37:af:
         a3:bb:86:62:ee:d5:25:c8:b1:82:eb:af:6e:36:81:be:b1:de:
         d4:45:66:dc:b8:8e:85:df:60:94:04:63:2b:4f:40:ef:42:cd:
         51:32:63:ac:5a:63:79:a8:d9:a5:4d:26:86:f5:ef:8c:26:04:
         2b:79:03:fa:dd:dd:66:72:e5:f0:b2:3c:cf:ee:0b:4e:1e:21:
         64:bb:7d:d1:3c:74:49:1c:8f:45:3d:16:fe:86:e3:d9:6e:39:
         e7:01:a6:0b:aa:06:1a:f8:02:62:d7:34:70:32:f7:e0:0b:86:
         8c:7f:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org