Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/76VvDD8Y7xhdO3bpviE3nKm_FcE.roa
File:                     76VvDD8Y7xhdO3bpviE3nKm_FcE.roa (raw, json)
Hash identifier:          fTUvOBm24CmcdxNOGFkkkI/aVahnzqsaOtYuXnk2dzA=
Subject key identifier:   EF:A5:6F:0C:3F:18:EF:18:5D:3B:76:E9:BE:21:37:9C:A9:BF:15:C1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       24
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/76VvDD8Y7xhdO3bpviE3nKm_FcE.roa
Signing time:             Fri 22 Jul 2022 00:08:02 +0000
ROA not before:           Fri 22 Jul 2022 00:08:02 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:08:02 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=EFA56F0C3F18EF185D3B76E9BE21379CA9BF15C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:b0:b0:92:7a:29:5b:22:90:d7:05:30:9f:
                    7f:4b:15:ea:5d:a3:62:b4:0b:e4:c5:36:d0:c9:3e:
                    46:43:84:25:23:5c:2c:39:f4:4f:2d:4f:a4:d2:4a:
                    3b:ff:fb:88:a1:db:29:62:26:84:e2:53:54:4a:1e:
                    80:45:c4:43:fa:ad:65:af:87:91:33:df:60:35:09:
                    b0:6f:57:b5:6d:59:80:20:f2:90:d3:f0:04:ba:d9:
                    3f:6b:3a:21:97:0c:bf:06:ae:bb:81:8e:23:d3:05:
                    2c:74:02:d3:9f:8f:d8:b9:6a:28:76:f4:50:16:a9:
                    a2:1e:fe:86:a9:a7:fc:d2:16:84:39:07:67:e2:ed:
                    e2:65:2f:fc:28:75:53:9d:82:00:c6:b5:6c:19:8a:
                    dc:af:3b:d8:59:b2:b5:84:63:58:19:2d:f8:a9:dc:
                    2e:79:e1:a1:2f:bc:55:88:0b:ad:b9:8b:9a:0b:41:
                    c8:2a:8c:68:17:f0:3c:73:57:3b:6e:2b:69:20:7a:
                    e8:a7:4b:27:b9:7c:83:60:ab:19:f7:e6:3e:94:6f:
                    b1:d8:8c:01:98:44:8f:20:2a:e2:44:f0:87:2b:82:
                    80:b2:6a:cf:b5:97:d8:8c:bb:fa:b9:b8:14:d3:d4:
                    78:e8:c0:55:ab:fb:87:e6:1c:23:2f:ce:14:cd:c3:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:6F:0C:3F:18:EF:18:5D:3B:76:E9:BE:21:37:9C:A9:BF:15:C1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/76VvDD8Y7xhdO3bpviE3nKm_FcE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:87:ff:24:c9:c0:66:6c:31:85:cc:bc:a0:a9:0a:24:91:
         d2:d9:ae:dc:9a:70:3b:34:85:10:ac:f9:35:48:1c:fb:58:6e:
         4a:ad:9e:98:84:64:8f:1c:9a:43:35:99:09:57:7e:e9:ea:ec:
         8c:96:06:54:8a:42:99:d5:1a:fc:ea:82:65:0a:ab:39:0b:9f:
         dd:0d:6b:23:45:e6:ba:67:50:dd:6a:2d:e8:86:4d:c7:05:72:
         94:16:91:c1:5c:e3:ba:38:60:4e:ba:15:c8:ea:10:9e:c4:2f:
         ef:45:42:d4:56:eb:e9:40:80:65:96:2b:d5:b9:0b:81:9e:cd:
         bb:77:6b:f2:97:73:7f:88:bd:dc:58:c3:6a:73:a0:7b:7a:3a:
         cc:a3:12:4e:de:ab:a9:9f:12:8a:cf:e1:73:77:ad:54:d7:49:
         af:be:85:01:56:8a:72:8d:2d:4f:3c:0a:77:fe:9e:f2:48:79:
         89:80:06:26:e4:5b:54:d4:96:b2:db:65:96:56:b2:4c:0f:d8:
         9b:25:ec:1d:4a:90:2c:89:0a:22:af:c1:f0:cf:5d:2f:1c:6e:
         90:e5:92:e1:3a:8e:66:17:77:9d:fb:5d:3b:5c:41:b7:62:31:
         ad:6a:da:0b:b1:00:99:ac:e9:71:6d:ce:d1:3f:32:19:73:46:
         57:8c:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org