Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/s3libyYe4hGyXHjd9DPBgSh3hUA.roa
File:                     s3libyYe4hGyXHjd9DPBgSh3hUA.roa (raw, json)
Hash identifier:          1pJrmkSAME+FuXVUJg25TbTh1voBrnk0TMcUE8r3+G0=
Subject key identifier:   B3:79:62:6F:26:1E:E2:11:B2:5C:78:DD:F4:33:C1:81:28:77:85:40
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       98
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/s3libyYe4hGyXHjd9DPBgSh3hUA.roa
Signing time:             Thu 01 Sep 2022 01:28:11 +0000
ROA not before:           Thu 01 Sep 2022 01:28:11 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     55898
IP address blocks:        211.14.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:11 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=B379626F261EE211B25C78DDF433C18128778540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:58:b5:cb:0f:d7:a6:01:c7:87:ea:a5:50:
                    bd:cb:58:3c:da:4c:9f:1c:03:a4:b4:db:eb:86:b3:
                    46:a7:5f:55:ec:a6:b9:3d:c3:dc:1d:8e:48:f5:5e:
                    b5:b6:ec:bc:54:fb:dd:16:b6:bc:ea:cb:df:35:a1:
                    51:ec:b3:8c:7f:d6:fb:0d:78:bb:2a:09:68:7f:f8:
                    02:62:2d:d2:f1:2e:b1:65:e8:db:e3:a3:16:f3:ea:
                    86:c2:ba:37:50:07:6b:db:ba:39:16:80:c8:75:17:
                    7c:c7:26:7e:7c:40:04:1c:d8:38:12:a7:ba:8d:12:
                    d5:0a:eb:08:75:81:2c:a3:1a:c3:ea:cb:0b:f8:46:
                    d7:17:e3:79:7b:b8:58:a7:b9:eb:ef:63:60:bb:4e:
                    79:13:5f:7c:a9:65:eb:20:f0:24:97:ac:c5:f4:25:
                    dc:de:fc:93:cf:21:d0:79:c9:75:b8:e9:84:4e:ef:
                    b6:d9:a0:6a:5b:54:2f:e6:79:ae:9b:7b:42:24:11:
                    95:46:6a:00:bf:8f:ce:72:33:7e:c2:a9:71:d1:1c:
                    b2:d4:60:e1:68:3b:49:cb:34:6c:25:da:2a:3e:38:
                    a1:dc:76:a2:98:be:ee:c2:b2:0f:e9:de:09:7a:46:
                    db:a0:74:0b:d6:cc:40:ed:41:30:72:57:6e:97:f6:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:62:6F:26:1E:E2:11:B2:5C:78:DD:F4:33:C1:81:28:77:85:40
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/s3libyYe4hGyXHjd9DPBgSh3hUA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:23:8f:24:43:91:a9:a7:17:d4:4b:ed:34:19:bf:65:82:ff:
         f1:d0:f2:3b:1d:98:41:9e:8e:b6:ba:5f:49:91:69:8d:88:89:
         e2:3a:ce:ab:fd:18:68:b3:21:58:7c:1d:d7:f7:03:11:30:bd:
         df:b2:3e:ce:7f:85:9e:0f:21:38:f8:4f:fa:2b:85:19:89:d1:
         e5:b4:55:3d:f7:74:4a:83:18:43:34:e2:53:3d:ee:ea:0d:9f:
         d4:33:7c:d0:c4:8b:eb:4b:a5:a4:7d:54:39:0d:1e:6b:56:da:
         b9:11:81:27:73:e7:2f:9b:04:6e:f2:2b:f0:0c:cd:7a:34:5a:
         8b:d5:3c:51:2b:de:fd:d8:68:ad:9a:b7:c5:29:13:4d:c9:4a:
         35:30:7f:ae:ad:bf:8b:a8:ab:92:b7:b5:24:e9:27:47:26:16:
         68:a5:ed:62:41:5b:f7:f8:f9:c6:e9:a3:7c:58:47:a8:14:09:
         09:91:87:ff:7c:66:25:a9:b9:81:fe:27:64:a1:1e:5e:cd:5a:
         b7:ca:bf:d5:ac:e0:dd:12:82:95:03:95:a1:38:3b:4a:0f:11:
         99:90:33:74:d1:8d:55:b3:4b:90:da:14:21:6d:51:77:5a:fd:
         26:dc:91:05:ed:b8:a7:99:0a:10:18:a4:3c:5f:a8:70:cb:47:
         52:20:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org