Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9LEzQFRUBqlZ2FTlBo_rs-rVzbU.roa
File:                     9LEzQFRUBqlZ2FTlBo_rs-rVzbU.roa (raw, json)
Hash identifier:          zF2l4UcytUESL7Th8G6q5NaO73H/T/sdg2x5xeSLQJE=
Subject key identifier:   F4:B1:33:40:54:54:06:A9:59:D8:54:E5:06:8F:EB:B3:EA:D5:CD:B5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       10
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9LEzQFRUBqlZ2FTlBo_rs-rVzbU.roa
Signing time:             Thu 21 Jul 2022 07:45:39 +0000
ROA not before:           Thu 21 Jul 2022 07:45:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.132.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:45:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=F4B13340545406A959D854E5068FEBB3EAD5CDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:fa:50:b5:b0:31:0f:9b:d1:e2:60:22:b0:
                    a0:c9:5d:98:f4:b2:43:50:74:6f:60:50:bf:64:5e:
                    be:6c:7d:ba:ca:5a:b2:7e:50:3c:1c:a6:de:4c:c4:
                    58:01:bd:fd:9b:1a:fb:a2:e1:88:95:ff:b4:7e:1f:
                    7d:1d:aa:c7:e7:c4:6d:07:53:0e:40:cb:e2:7d:84:
                    a7:f5:3d:c4:2b:af:7f:45:43:7c:18:8a:cc:f1:c3:
                    f0:3f:47:87:54:ec:55:24:ce:54:22:5d:50:9b:77:
                    7c:af:68:de:09:89:ae:63:ec:b6:a5:1d:30:f3:f6:
                    2d:e7:56:a6:f9:a9:dd:d8:90:31:4a:71:72:67:f4:
                    d6:fc:0a:12:94:6d:cc:47:e6:00:f0:6d:a3:46:c7:
                    79:91:58:55:9f:42:fe:32:d7:4d:27:05:b1:c1:41:
                    d1:bf:33:0c:e5:9a:a5:8e:f8:e3:24:4c:1e:65:78:
                    71:6a:5e:bd:41:5c:99:ef:b2:28:c9:7e:06:00:04:
                    4b:05:19:82:5d:47:fd:b1:c4:dc:ac:bd:92:c2:d7:
                    e1:ee:b3:e7:e3:6d:e7:c0:8a:34:65:b7:3e:de:46:
                    bb:e5:a4:54:dd:ff:8d:cd:69:ba:c1:f4:f9:9c:76:
                    6a:6f:59:63:34:d8:f2:cb:aa:d1:e8:e2:f6:4d:19:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:33:40:54:54:06:A9:59:D8:54:E5:06:8F:EB:B3:EA:D5:CD:B5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9LEzQFRUBqlZ2FTlBo_rs-rVzbU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:17:c8:f9:53:66:b9:6b:47:da:19:9e:d9:35:ad:d3:80:8f:
         c9:f2:b9:ca:b6:03:07:2b:d1:b8:19:61:df:dd:92:8e:da:ed:
         05:19:37:17:59:df:d0:39:ab:39:a7:b4:c7:a4:05:96:c5:63:
         13:61:9b:ca:67:c4:f8:3d:76:37:32:1a:cd:3c:c0:cf:48:e7:
         05:09:77:fa:3f:f2:81:83:49:2e:38:5e:fd:5c:04:62:8f:e1:
         5e:e3:0e:3f:e2:5d:47:e1:93:36:22:bb:8d:aa:8f:68:3f:19:
         af:03:8a:13:73:39:1a:b4:b9:55:22:43:cb:44:f4:1f:ae:92:
         6d:43:1b:4f:95:c2:3c:21:19:39:af:b3:e2:b0:f7:b6:f0:64:
         92:c8:c2:ac:50:b1:a5:d9:fd:ab:4c:4b:c8:ae:12:c0:25:94:
         77:8b:a6:c9:0c:7d:1c:49:cf:f7:f6:51:cc:19:3a:12:0f:9d:
         d6:ab:7a:7f:b5:db:b7:bc:e0:24:84:11:d8:15:af:93:1c:e0:
         5f:d7:8f:96:79:9d:c2:7c:94:b0:4b:56:af:64:74:a1:d0:d1:
         61:51:a8:57:64:eb:f5:ca:61:84:36:f7:25:bb:cf:9b:7d:34:
         23:bc:1e:84:76:53:0c:a8:6a:32:4e:10:36:94:48:42:74:c7:
         42:a2:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org