Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DMOPDZaZ0HHareJSiES8oQq8Mcg.roa
File:                     DMOPDZaZ0HHareJSiES8oQq8Mcg.roa (raw, json)
Hash identifier:          J2yS09go33iuYXBwCsF5hpxiew4dmoiYTVF6UXOmJ5U=
Subject key identifier:   0C:C3:8F:0D:96:99:D0:71:DA:AD:E2:52:88:44:BC:A1:0A:BC:31:C8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       A5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DMOPDZaZ0HHareJSiES8oQq8Mcg.roa
Signing time:             Fri 22 Jul 2022 08:09:47 +0000
ROA not before:           Fri 22 Jul 2022 08:09:47 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        175.28.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:09:47 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=0CC38F0D9699D071DAADE2528844BCA10ABC31C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:86:32:fa:b5:bf:82:73:4a:ba:0f:6a:7e:
                    cb:5c:46:18:af:a1:8c:0f:a9:05:f2:2b:d8:c1:f4:
                    7f:39:5c:f4:1f:2e:98:6f:7a:45:75:44:d4:2a:ad:
                    dc:18:7a:b6:b8:02:e2:16:ec:3b:59:8f:87:57:77:
                    3b:9c:fa:56:e9:6a:01:2d:1d:21:3b:06:56:7e:24:
                    2f:bb:55:83:91:e8:c6:31:22:da:20:7f:01:c4:32:
                    71:b0:df:d9:eb:9d:ae:50:dd:2f:62:f6:44:c8:de:
                    bb:b5:40:0b:f3:b2:80:2d:bd:c8:86:ee:dd:24:6a:
                    5d:1e:b9:6d:fc:20:cb:a5:bb:b5:b0:cc:df:fd:9b:
                    22:ae:42:e6:2d:95:9c:a4:a0:45:08:f0:08:84:67:
                    2c:06:dc:23:af:a6:61:94:93:e9:93:ad:31:25:5c:
                    f0:e1:7e:68:f1:51:97:c0:ca:64:aa:f9:a4:ca:8b:
                    2a:8d:1d:c2:51:06:5c:32:bf:7b:b3:09:77:66:fa:
                    1e:9e:34:aa:c7:05:5d:73:c0:d7:e2:ea:4e:35:51:
                    03:b8:de:be:2a:8e:f5:d2:eb:f5:19:26:4f:48:09:
                    34:e3:c6:25:ff:21:b5:be:82:38:9e:15:61:f4:b9:
                    2e:a1:d6:54:bb:dc:26:43:ae:5b:a5:e1:58:e9:fb:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:8F:0D:96:99:D0:71:DA:AD:E2:52:88:44:BC:A1:0A:BC:31:C8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DMOPDZaZ0HHareJSiES8oQq8Mcg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:7a:67:61:20:f9:2c:08:c9:41:ca:60:a5:ef:25:9e:f7:
         b5:ae:fc:09:d0:93:cd:d3:23:d6:65:84:b4:b5:ea:9a:0c:2f:
         8d:e8:fd:fb:3d:61:91:42:1f:18:79:df:cc:3a:1a:30:d2:52:
         80:e9:02:9e:fd:3c:e4:7b:00:d4:8f:a4:4c:4d:57:cf:73:c6:
         b6:34:47:b5:0b:f3:04:b2:81:dd:36:29:28:b2:f3:86:03:3d:
         1f:4f:b3:43:50:25:35:f7:3a:f9:ed:cc:d7:93:64:3f:54:20:
         99:1d:e6:37:e9:a2:3f:1d:e0:1d:2e:c6:f4:a7:cd:03:c8:78:
         fe:c7:b3:08:a6:1e:00:ea:a1:7b:05:8d:ab:48:20:2f:fa:9c:
         2b:ce:e8:a1:34:ca:09:bb:20:ba:06:7c:3e:a1:13:0d:d7:54:
         7a:cc:48:ba:e2:1a:4c:99:c9:4b:96:9c:81:04:99:28:a9:d2:
         72:73:bf:02:31:58:89:59:ce:e1:c1:a5:ea:83:14:5b:a2:c3:
         ef:0f:07:ac:3f:e6:65:a5:79:90:db:b0:27:2e:1e:c5:3e:22:
         d8:d9:3b:7a:f9:71:31:c0:e1:42:c5:71:58:7d:e2:ba:16:b3:
         8b:14:ce:83:ef:18:aa:4c:47:c7:7a:c0:f5:2e:1a:de:97:ea:
         4c:2e:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:04 2024 by rpki-client on console-ams.rpki-client.org