Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8s_FOyBHJm-w31ydmDQIGKZSiDA.roa
File:                     8s_FOyBHJm-w31ydmDQIGKZSiDA.roa (raw, json)
Hash identifier:          HaZ8eqlrGLKuG0A2SW8MjsEDPuwR0gxfMcdWVR2cVI0=
Subject key identifier:   F2:CF:C5:3B:20:47:26:6F:B0:DF:5C:9D:98:34:08:18:A6:52:88:30
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       37
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8s_FOyBHJm-w31ydmDQIGKZSiDA.roa
Signing time:             Fri 22 Jul 2022 00:48:00 +0000
ROA not before:           Fri 22 Jul 2022 00:48:00 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        110.2.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:48:00 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=F2CFC53B2047266FB0DF5C9D98340818A6528830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:cf:50:73:9c:1d:03:fe:a4:99:85:e8:f0:
                    b1:21:90:db:06:05:d9:9a:26:42:4b:cf:b5:40:85:
                    92:eb:10:15:e5:67:4f:c3:d7:ce:13:80:7a:c8:c5:
                    c3:b9:b7:21:35:1d:84:b7:22:79:62:63:90:43:ff:
                    03:d6:7f:94:4a:39:eb:01:20:18:99:fb:8b:0f:2f:
                    16:70:62:ba:34:7f:f4:cf:dc:80:d2:b5:8a:2f:c1:
                    a4:7e:c9:8e:9d:43:33:48:38:2a:29:5b:53:ec:27:
                    6e:fa:b3:83:bc:ab:8a:73:f1:dd:4c:5d:59:e3:c4:
                    d5:4b:3d:62:82:6b:c0:aa:7f:56:52:4e:f4:66:f0:
                    5d:a6:cf:d0:cb:9b:64:17:29:a2:29:4e:41:ba:68:
                    c7:71:7e:e3:d2:24:a7:6c:35:37:fb:a8:84:97:bd:
                    2d:fc:b9:68:54:6a:88:14:7f:48:b1:d0:40:fa:4d:
                    f8:5c:6c:b7:58:32:9c:69:ac:c2:cd:37:b0:a1:b2:
                    09:b4:68:5d:96:77:bb:74:26:ce:b9:5e:94:4b:0a:
                    ab:84:6f:2f:dd:34:df:2c:c9:51:e4:97:ce:c5:d6:
                    7e:07:4f:e0:e5:27:52:61:a6:0a:f5:5f:39:f9:5b:
                    d6:fe:cf:f4:0f:07:0c:18:62:b1:65:9c:c5:73:50:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CF:C5:3B:20:47:26:6F:B0:DF:5C:9D:98:34:08:18:A6:52:88:30
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8s_FOyBHJm-w31ydmDQIGKZSiDA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:30:f3:05:18:1c:7c:47:a4:d6:64:7e:2c:21:02:24:78:74:
         54:5e:2c:df:33:a7:91:62:88:82:d9:3a:57:78:33:76:ab:f3:
         59:19:22:de:30:f3:5a:a9:e6:70:57:da:34:95:ff:27:a8:20:
         13:36:4e:f1:5e:4d:ca:1f:a1:45:6a:39:1b:15:ab:bd:b1:fa:
         26:68:3b:98:98:4d:4a:0b:71:2b:5e:41:5c:24:7f:28:67:44:
         bc:fd:b7:b9:db:e3:f5:02:a9:6f:bd:6e:e8:7f:1d:61:90:62:
         30:cf:0f:38:78:67:4d:f8:c0:e5:ff:7e:b0:bb:43:53:da:13:
         3a:4d:7c:a8:f3:c8:1d:06:3f:80:a3:67:1d:e7:53:c2:40:1a:
         6c:68:e5:ef:05:8f:8f:12:57:c5:ee:33:ef:c7:97:8c:7d:8a:
         8e:93:fc:35:c9:c7:19:14:05:04:02:8a:b0:3e:12:dc:7d:31:
         16:d0:b7:bf:f0:59:3e:d4:46:fd:26:98:fd:7a:50:f5:6d:96:
         eb:6b:3c:2a:f9:f7:90:9d:aa:c0:5f:50:33:f2:80:8a:66:33:
         62:cf:21:fb:97:e2:5d:49:4c:6d:af:42:be:01:1a:aa:18:74:
         15:37:58:db:ae:9e:42:70:81:32:4c:29:c9:7e:ca:ab:7d:0e:
         44:a6:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org