Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CmbfqvLXKjLzYv6rdFrAdohzozo.roa
File:                     CmbfqvLXKjLzYv6rdFrAdohzozo.roa (raw, json)
Hash identifier:          3GTXCmR3MwqJG5rbJ1pP49I/X8p6UMgOBzIidkroU5I=
Subject key identifier:   0A:66:DF:AA:F2:D7:2A:32:F3:62:FE:AB:74:5A:C0:76:88:73:A3:3A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       1D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CmbfqvLXKjLzYv6rdFrAdohzozo.roa
Signing time:             Thu 21 Jul 2022 08:41:42 +0000
ROA not before:           Thu 21 Jul 2022 08:41:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        119.150.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 08:41:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=0A66DFAAF2D72A32F362FEAB745AC0768873A33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:08:23:50:df:15:35:58:5c:0e:ed:6f:e6:
                    2e:57:31:3e:9f:58:3c:76:d2:7b:2b:15:31:55:d0:
                    24:be:95:10:a3:0a:0e:65:46:47:4d:a0:09:38:54:
                    ad:2b:dd:15:be:92:a1:44:4a:23:f1:57:f0:70:58:
                    ef:e6:d1:38:8b:29:67:0e:3b:8d:d3:2a:3e:ac:90:
                    bc:fd:75:71:95:d3:a2:4d:98:35:52:03:07:61:bf:
                    1b:b7:b0:e8:f6:9a:a0:5d:08:c2:97:7d:a2:6d:a4:
                    47:58:a3:5a:1b:7e:1a:81:8d:2f:80:61:7d:1e:77:
                    d1:78:b8:a2:2b:94:6b:fb:df:af:22:eb:c9:e4:cc:
                    c2:ee:0d:85:68:9b:54:80:d1:b4:1e:2b:d7:54:7c:
                    57:43:e3:20:58:63:2a:d6:82:5d:ee:84:fa:94:69:
                    a5:a9:58:42:e6:8d:55:7a:d3:26:df:ac:60:d3:43:
                    99:45:4b:82:05:d8:05:66:f3:89:1e:da:de:d6:25:
                    e5:5d:f4:0e:3e:87:b4:e8:90:19:18:7c:a7:98:22:
                    b7:54:2a:2e:8e:74:ee:61:3e:27:36:d1:74:17:95:
                    6c:02:eb:ea:48:a4:ae:05:d0:55:e5:63:54:22:90:
                    01:a7:28:a3:a2:81:8d:3c:64:50:56:cf:7a:2b:44:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:DF:AA:F2:D7:2A:32:F3:62:FE:AB:74:5A:C0:76:88:73:A3:3A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CmbfqvLXKjLzYv6rdFrAdohzozo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:80:ca:3c:88:e9:98:23:50:08:39:16:37:9d:f0:d7:8d:d9:
         ae:c8:88:bd:64:41:fd:c2:a0:0c:52:4b:d0:03:78:17:c9:4a:
         7f:64:a3:f8:28:f8:07:4d:80:78:23:7d:2c:2b:43:c0:2c:65:
         bc:1b:06:74:9e:fe:13:1c:dd:14:a6:50:a4:fc:23:4f:d6:ec:
         08:2e:7e:37:0b:f6:d1:e1:51:09:f0:50:5f:6f:08:c6:41:12:
         fa:76:b1:56:42:43:a2:9b:45:9d:03:66:3f:f5:d1:e6:a1:e1:
         c5:85:c9:a9:2e:37:cc:dd:2f:92:d2:50:92:90:45:f6:d5:c7:
         dc:9d:42:c4:1f:c0:69:0a:a9:ed:b5:81:39:19:87:a3:60:c8:
         b5:53:da:25:08:9a:5a:54:59:19:77:22:a7:62:45:3e:0b:e6:
         f2:4c:5a:a0:d2:c1:5c:a6:3a:6c:f3:af:ab:7d:6f:3f:b0:f8:
         99:13:da:e9:73:a9:1d:c5:9f:0f:0b:fe:09:3a:7f:25:6f:47:
         b7:38:5b:2f:fe:f0:c4:b2:60:b5:00:86:69:a4:fe:61:2b:1d:
         61:26:04:fe:08:ab:51:5a:0c:2b:ac:d2:7b:8f:10:1a:59:6c:
         7f:5f:b9:48:03:f6:d3:51:da:74:62:f6:e4:86:24:99:22:07:
         37:7e:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:04 2024 by rpki-client on console-ams.rpki-client.org