Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/E56MbA_G839hUXbDlKeMMZWlrz4.roa
File:                     E56MbA_G839hUXbDlKeMMZWlrz4.roa (raw, json)
Hash identifier:          ns2uS33t/C3WxF0tFFSF1Ouj7mW3IgZCjW91pBqYZQM=
Subject key identifier:   13:9E:8C:6C:0F:C6:F3:7F:61:51:76:C3:94:A7:8C:31:95:A5:AF:3E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       11
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E56MbA_G839hUXbDlKeMMZWlrz4.roa
Signing time:             Thu 21 Jul 2022 07:45:40 +0000
ROA not before:           Thu 21 Jul 2022 07:45:40 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.132.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:45:40 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=139E8C6C0FC6F37F615176C394A78C3195A5AF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:07:3b:ee:1f:fc:37:91:1c:13:1b:66:85:
                    68:51:7c:d2:82:c4:3f:8e:a0:ef:37:b4:26:11:f1:
                    2a:39:6c:69:65:9e:4b:f6:dc:0d:94:ef:49:cc:f1:
                    c3:eb:ad:d0:e2:45:e4:c8:54:89:e3:11:ce:69:b5:
                    91:fa:12:c8:35:2d:ae:9d:9b:8a:63:5f:df:70:87:
                    a7:24:f5:cb:9e:ac:b0:15:11:6a:cf:3c:46:f2:ef:
                    3a:06:ef:99:0d:dc:80:68:e2:e2:19:d4:5a:6a:a6:
                    9a:95:ea:25:29:9b:35:07:ed:3a:14:5e:bb:d9:4f:
                    3f:d1:fa:f0:6c:28:c3:53:b8:29:82:ba:16:01:60:
                    f3:e8:fd:df:f1:68:1a:ef:0c:2f:a9:31:bd:b6:e0:
                    69:96:99:61:0e:a7:fb:81:6e:27:21:d2:5e:8f:63:
                    c1:48:cd:b5:9f:30:0f:8e:c8:2d:f7:e2:d7:da:de:
                    07:61:a7:02:cb:48:bf:be:99:9e:99:12:c8:60:7c:
                    c6:16:b0:1f:71:7e:32:02:1b:a5:19:12:05:db:91:
                    f4:24:32:bb:51:bd:aa:57:ea:32:e1:c0:60:c0:c7:
                    5a:ca:ed:9a:08:ae:fd:d7:98:d7:3e:33:6c:a1:22:
                    08:33:0f:d0:65:58:72:9a:29:69:1a:99:b3:4c:91:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9E:8C:6C:0F:C6:F3:7F:61:51:76:C3:94:A7:8C:31:95:A5:AF:3E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E56MbA_G839hUXbDlKeMMZWlrz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:97:88:e6:d4:cb:d9:7b:7b:3a:14:cc:35:d5:59:6b:21:
         e5:00:67:53:54:1e:9c:bc:7e:2a:9b:02:76:4d:b0:a4:1e:a9:
         67:cd:33:71:c3:4a:cc:3a:35:32:27:fd:e8:2e:3b:7b:f6:85:
         bf:43:8e:30:71:45:cf:50:1a:a0:97:95:e0:e8:d8:9d:a4:c5:
         7d:d6:7b:7b:64:94:ac:ec:0a:1e:e5:8d:0b:5f:88:da:ce:81:
         cd:83:57:b0:a3:1d:0c:76:59:65:de:34:3e:8e:00:9a:63:86:
         e5:e2:8e:99:1b:aa:92:8e:3f:ff:a3:86:d2:41:cc:83:65:d7:
         8b:19:0b:c5:dc:83:73:8d:2a:bc:03:15:ed:bc:65:87:09:ae:
         a5:68:ea:5d:f5:4b:cb:8f:0d:71:df:b8:62:c6:0f:df:77:21:
         d4:cb:62:4a:7a:11:53:d6:b0:26:e3:a6:28:a7:97:f9:d0:04:
         0e:28:c0:72:64:f5:b0:e2:21:f8:f9:92:ae:fe:c9:39:d6:c4:
         d1:a2:bf:2e:4c:e8:08:66:9d:ef:45:99:cd:47:d2:4f:3c:be:
         64:cb:06:f4:52:d6:57:f8:af:f5:3f:61:94:d9:f8:f9:71:0d:
         f7:20:0e:26:4a:64:8a:6c:7b:b4:a2:19:b8:98:40:ac:f0:43:
         0f:5e:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:04 2024 by rpki-client on console-ams.rpki-client.org