Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5s4fZfRc8OT4xKK2uPSZ7MPCvvs.roa
File:                     5s4fZfRc8OT4xKK2uPSZ7MPCvvs.roa (raw, json)
Hash identifier:          JS7ae72j4aFPaUGiTOOMp+1L1LYh+mJ7GdtCF0JJsQA=
Subject key identifier:   E6:CE:1F:65:F4:5C:F0:E4:F8:C4:A2:B6:B8:F4:99:EC:C3:C2:BE:FB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5s4fZfRc8OT4xKK2uPSZ7MPCvvs.roa
Signing time:             Thu 28 Jul 2022 05:47:48 +0000
ROA not before:           Thu 28 Jul 2022 05:47:48 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        182.236.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:47:48 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=E6CE1F65F45CF0E4F8C4A2B6B8F499ECC3C2BEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:01:84:09:84:79:94:d9:34:87:41:af:4d:
                    3a:bc:85:8f:63:df:cf:e5:ea:e9:09:be:8d:ca:d9:
                    d6:0b:8f:5b:d8:6b:37:82:fe:b5:85:43:2a:c2:27:
                    6d:f9:c6:b1:b1:f5:2b:69:be:77:9d:13:fb:84:83:
                    95:33:80:80:93:51:fe:5a:75:2b:9f:02:13:b7:da:
                    a6:e7:cc:a4:45:fa:25:be:d4:b5:70:23:2c:8d:50:
                    bc:95:bc:15:a9:38:f4:a7:b8:e4:5d:39:07:50:9e:
                    3a:87:85:3c:fa:10:4b:48:ec:c9:04:db:eb:d9:2b:
                    79:0e:46:e4:e5:64:94:69:4d:4e:62:1f:23:2d:ab:
                    3f:9d:c3:64:c9:75:19:9e:a0:c4:6a:30:75:1e:1a:
                    ff:51:3d:4d:ef:a6:e4:66:8d:e6:ea:c3:fe:22:47:
                    76:73:85:3f:ac:a0:7b:bf:43:d8:8e:f4:3e:29:e6:
                    0a:51:f6:94:81:f4:b7:d2:9a:8b:12:0d:8f:11:35:
                    d7:2a:93:32:9a:ec:bf:89:0f:56:5e:97:61:ba:7d:
                    45:a3:0b:5a:9e:9a:8b:98:90:cf:71:f6:a6:8d:e4:
                    69:71:7d:37:45:c5:ec:a5:4b:db:f4:b7:84:10:cd:
                    98:bc:ad:32:d4:e7:22:46:76:11:fe:41:9c:fd:e6:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CE:1F:65:F4:5C:F0:E4:F8:C4:A2:B6:B8:F4:99:EC:C3:C2:BE:FB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5s4fZfRc8OT4xKK2uPSZ7MPCvvs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:53:34:26:97:e6:ca:69:fb:35:7f:5e:d9:bb:3b:a7:63:
         84:53:f6:9e:d4:4e:71:0a:98:55:44:49:6f:43:ba:cd:c4:01:
         39:14:bd:fa:a6:31:f7:59:51:ae:57:dc:04:c2:32:51:d5:ed:
         72:41:15:a0:d8:22:82:b7:a5:89:cd:42:30:18:1a:ee:69:ae:
         f9:cf:7e:87:83:6e:76:18:63:e0:2a:3a:89:93:0c:d5:f3:e4:
         0f:11:ef:f6:31:e0:1a:a8:14:24:0a:f6:88:f9:6c:83:3f:06:
         25:e7:88:3a:31:3f:1f:71:7a:89:88:9e:ac:8d:5a:9d:e5:f8:
         ca:cf:84:a1:35:52:7a:a0:88:36:67:34:dd:e4:4d:57:ac:03:
         0c:99:7d:4f:5a:77:78:93:ab:ef:46:55:51:cd:10:9f:b6:6c:
         88:3b:52:cf:33:93:93:d0:9b:a0:a9:12:0c:e0:74:e8:14:48:
         38:96:c7:6f:ec:05:29:14:27:78:7c:e8:56:61:88:b4:e9:31:
         1f:32:7b:6e:b5:52:66:06:e0:2f:45:4d:07:02:0d:05:54:6b:
         c9:6b:00:96:e1:46:33:98:8b:2a:73:0e:a5:8c:3b:b7:ee:be:
         68:bb:af:39:79:ed:da:93:e4:d5:e9:fc:5e:30:c1:07:07:9b:
         dc:fb:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org