Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/D7Wl5H4TTE7z0btXm2DjRw7R6N4.roa
File:                     D7Wl5H4TTE7z0btXm2DjRw7R6N4.roa (raw, json)
Hash identifier:          DkWV7KORvn2m+5VZa2VdW56ar3vYFYC+f9F+EsPyxoU=
Subject key identifier:   0F:B5:A5:E4:7E:13:4C:4E:F3:D1:BB:57:9B:60:E3:47:0E:D1:E8:DE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       6C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D7Wl5H4TTE7z0btXm2DjRw7R6N4.roa
Signing time:             Fri 22 Jul 2022 04:35:27 +0000
ROA not before:           Fri 22 Jul 2022 04:35:27 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:35:27 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=0FB5A5E47E134C4EF3D1BB579B60E3470ED1E8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:bf:0c:24:68:c8:4d:e5:08:8e:24:ab:cf:
                    46:03:89:67:b1:65:7e:aa:34:23:ae:45:fb:07:f9:
                    cb:c9:f3:24:93:17:b9:bb:df:37:0c:bd:0d:d2:3d:
                    9e:d6:96:b4:b9:45:2c:bd:3a:88:73:ca:ee:72:d9:
                    e7:4a:f7:a8:2e:2d:2d:9a:1a:f0:71:cc:18:a6:dd:
                    55:8d:a0:35:36:2d:c0:97:c9:d2:93:0a:e5:0f:ec:
                    5d:b8:f3:c6:fe:01:b7:42:ea:2c:19:e0:fd:f1:95:
                    e7:76:23:2f:d3:07:0e:53:e2:03:f0:d4:dd:b0:1e:
                    3b:97:89:63:99:5f:81:95:15:37:76:e7:37:d5:40:
                    09:10:9c:84:75:20:d3:af:13:e9:fc:74:2a:a8:bf:
                    60:75:1f:1e:8d:73:e1:09:52:94:ee:8c:30:aa:fd:
                    1b:24:f2:ec:fc:5b:32:9d:f2:db:ab:33:62:37:72:
                    61:55:40:f7:9b:7e:09:cb:d1:df:c3:e8:06:4c:53:
                    a4:9f:b1:a5:09:bd:18:d6:92:ea:08:bd:13:ac:62:
                    55:a5:e5:f0:7b:f0:a5:36:26:63:4f:91:92:d4:38:
                    da:7b:b3:56:f2:b4:64:b7:30:43:dc:e1:ad:62:b9:
                    d0:7f:db:a6:68:11:04:f9:62:6a:6a:e5:67:1e:b8:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:A5:E4:7E:13:4C:4E:F3:D1:BB:57:9B:60:E3:47:0E:D1:E8:DE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D7Wl5H4TTE7z0btXm2DjRw7R6N4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:b7:9d:83:59:f4:3b:02:d0:11:e6:1e:f4:a8:89:63:5c:
         a4:05:94:3a:cd:39:e3:76:61:9f:15:26:8d:4f:2c:5d:12:08:
         87:9c:bb:dc:ac:cc:05:9f:17:eb:22:1a:14:df:fa:46:df:95:
         33:b2:1d:07:52:d0:46:9a:ec:5a:87:95:38:86:7b:99:b2:a5:
         6c:d1:10:9a:36:28:1e:2d:40:8d:86:52:63:29:9d:cb:1e:ff:
         f3:f5:af:5c:f2:1d:d6:ac:5e:ba:21:e0:05:81:24:9d:a7:fe:
         1b:82:bc:c3:ad:17:65:d0:72:56:01:28:2a:44:8c:78:0b:ec:
         b2:5b:a2:ff:f0:be:9e:01:6b:fb:6e:55:df:25:30:54:c7:66:
         b1:4a:f4:43:a8:0b:47:09:f6:f3:eb:c5:a4:27:b6:bf:cf:16:
         d9:1c:df:6f:d1:fd:e9:a3:9a:25:7f:d3:92:c7:11:bd:b4:d4:
         12:43:0b:c3:1b:e3:4b:62:12:d0:45:d1:11:21:c7:7d:cf:f2:
         81:3e:e3:1b:bc:23:c0:99:f5:84:97:ae:ec:cd:a9:cf:ee:91:
         90:69:a1:f8:2b:eb:59:0e:06:ea:14:67:88:37:75:00:c8:d4:
         80:16:ac:d0:8c:5c:11:5b:bc:d0:c8:23:6b:cf:14:75:1f:69:
         78:97:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org