Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-xpNEgzvHDJQim3_GKBPkp7s6Rg.roa
File:                     -xpNEgzvHDJQim3_GKBPkp7s6Rg.roa (raw, json)
Hash identifier:          2Rzphi/Ncc7YrmI016wcM95u1ER19V51/LE9+NSqN/E=
Subject key identifier:   FB:1A:4D:12:0C:EF:1C:32:50:8A:6D:FF:18:A0:4F:92:9E:EC:E9:18
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       52
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-xpNEgzvHDJQim3_GKBPkp7s6Rg.roa
Signing time:             Fri 22 Jul 2022 02:06:18 +0000
ROA not before:           Fri 22 Jul 2022 02:06:18 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.211.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:06:18 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=FB1A4D120CEF1C32508A6DFF18A04F929EECE918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:55:4f:9b:3b:64:db:20:c5:41:98:1c:a2:
                    68:32:c8:34:fc:21:11:d1:fd:cd:be:ea:cd:bf:af:
                    1b:36:1f:06:32:6e:ac:0d:9c:49:f0:0e:96:ff:bf:
                    08:27:93:d3:c9:b6:48:dd:45:5f:42:12:90:fd:a6:
                    65:8e:cd:d9:0a:ef:9d:61:7a:40:de:c8:d4:d1:3d:
                    71:f3:7c:d2:66:41:88:7c:f7:0e:d4:85:9b:3e:f0:
                    ed:8d:5c:01:a4:7c:37:66:e1:a8:7f:b5:83:ca:94:
                    f0:f1:fe:50:ca:79:23:6d:24:c5:72:b6:da:3f:b8:
                    b3:0d:de:a7:2a:6c:32:17:52:37:ef:78:b1:76:a6:
                    f1:e6:b2:71:ef:70:0d:37:ed:2f:95:a4:0e:b9:2c:
                    36:8c:f3:35:88:91:03:01:45:4e:82:e2:d8:6c:f7:
                    16:36:b8:64:dd:94:53:26:d8:e1:f7:d9:57:58:ba:
                    71:a1:f2:28:c3:50:98:79:67:f9:28:fd:5a:f9:1b:
                    78:43:94:d0:5a:7d:8e:d6:24:87:0c:30:90:f8:66:
                    62:dd:62:13:f2:46:7f:e5:0a:a0:2f:11:da:c7:7c:
                    57:f5:e5:9f:19:d0:90:c4:77:04:0a:a9:1e:02:47:
                    8d:67:e1:a6:32:b0:3c:98:09:eb:68:97:fa:8b:47:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1A:4D:12:0C:EF:1C:32:50:8A:6D:FF:18:A0:4F:92:9E:EC:E9:18
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-xpNEgzvHDJQim3_GKBPkp7s6Rg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:42:5b:7f:c7:6b:a7:3c:4a:64:81:b6:ea:75:21:0d:6f:64:
         9d:90:06:18:1d:cf:e7:2f:52:0c:86:cd:3b:ca:4f:ae:0a:e9:
         ea:d5:0f:28:08:f0:30:66:a2:7e:1c:dd:f9:1c:2a:12:5e:d1:
         6a:cb:ad:6a:a7:d3:7f:3d:f1:84:37:b7:ae:92:95:bd:15:a8:
         b8:ea:93:dd:75:01:06:bb:45:7b:fd:2d:50:e2:a3:78:f5:80:
         94:01:47:c3:8e:11:f6:e9:f1:b6:0a:c4:3f:7e:99:b1:f7:db:
         8f:a6:fd:92:88:af:da:75:18:0f:08:e6:09:ee:98:f3:c7:36:
         e5:10:2b:cc:ee:5a:f6:67:d4:46:ba:1e:77:60:61:9a:3e:66:
         8e:fc:ae:7c:da:fd:70:f4:d7:e4:20:a6:39:53:55:2d:e4:51:
         10:d4:2b:a9:c5:67:aa:ba:c3:b6:06:5d:ef:a6:26:dc:d2:6f:
         87:5b:c3:28:e4:d8:d7:cb:48:de:f6:6f:5c:a1:10:31:00:42:
         19:2c:58:1a:95:55:bd:12:43:e4:79:6d:83:35:bc:d4:55:46:
         55:ff:54:be:7d:ef:e8:7c:37:77:6e:45:42:68:fb:2a:32:27:
         33:72:2b:c0:78:dd:53:10:e3:4f:d6:1a:27:ec:50:49:51:92:
         c4:b7:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org