Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/FbAFWerXXRMVnum53eMzAgWolr8.roa
File:                     FbAFWerXXRMVnum53eMzAgWolr8.roa (raw, json)
Hash identifier:          WsngXt8Wc7kuHNJF5L4NpuucPiYLg9waEqPixugcgIk=
Subject key identifier:   15:B0:05:59:EA:D7:5D:13:15:9E:E9:B9:DD:E3:33:02:05:A8:96:BF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       EA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/FbAFWerXXRMVnum53eMzAgWolr8.roa
Signing time:             Thu 28 Jul 2022 05:59:42 +0000
ROA not before:           Thu 28 Jul 2022 05:59:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.159.136.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:59:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=15B00559EAD75D13159EE9B9DDE3330205A896BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:24:a1:40:b0:c5:1c:c2:c2:c0:8e:79:df:
                    29:e0:a9:91:44:d2:2e:ce:f3:f9:09:e2:f1:22:be:
                    77:ff:69:8a:2b:7c:64:b4:74:61:53:0d:6e:fc:22:
                    ea:ff:78:7e:02:96:9c:e9:2c:0d:c1:4d:61:6b:14:
                    f7:35:9b:0a:54:99:04:cb:d9:40:d2:b9:f0:7d:67:
                    26:1c:a3:3a:ad:59:f4:4f:fe:80:ee:8f:55:6e:dd:
                    e7:13:72:a5:ef:4d:a7:ac:47:1c:93:e7:38:dd:6a:
                    11:1e:67:45:88:42:49:18:64:5e:11:0f:f6:63:98:
                    c2:f0:b9:1d:6b:87:fe:42:8d:b7:03:05:0d:a6:44:
                    3f:6e:62:53:d4:88:d1:d9:ac:70:0a:18:6d:a8:a1:
                    ed:bf:52:e4:75:23:da:be:4a:cf:49:6c:ae:0d:00:
                    79:ec:8a:6f:ea:d6:f4:7d:48:52:66:01:e4:1e:bf:
                    09:ee:51:25:fe:00:72:ba:48:28:07:8d:a4:b8:3f:
                    66:54:fd:bb:8f:c9:65:cc:85:cc:3d:c6:01:ca:bb:
                    cb:9b:34:ca:d3:7a:3b:a5:eb:7b:3a:3a:ee:79:4a:
                    74:45:96:6f:9f:7e:a1:c8:b8:83:61:17:07:b1:45:
                    a7:9c:30:af:ca:cc:eb:10:01:fe:bd:77:4b:3c:40:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:05:59:EA:D7:5D:13:15:9E:E9:B9:DD:E3:33:02:05:A8:96:BF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/FbAFWerXXRMVnum53eMzAgWolr8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:8f:77:cf:13:40:7a:48:37:30:51:0b:6d:2e:6a:d4:16:
         09:d9:87:b4:5e:ed:f5:44:c3:4f:8c:cb:21:51:8b:bc:e4:c9:
         6c:d7:e7:70:cb:b5:13:72:3a:8b:df:c5:7a:16:fa:8d:97:18:
         71:24:9c:36:1f:e0:0d:6b:7d:61:e7:f6:af:fa:55:46:6a:a4:
         35:b1:c6:bb:20:93:9b:59:1d:af:be:87:64:09:ed:de:92:29:
         9f:3e:5f:09:39:d1:20:29:1f:e0:df:e3:f4:de:4e:e4:cc:3a:
         b9:1f:fc:85:9e:74:c6:4c:c9:00:43:74:41:2a:c9:d8:60:55:
         d7:de:41:ba:b4:99:56:06:cf:18:5b:d2:5e:62:49:1e:eb:c3:
         d3:ba:e0:2f:2f:8c:3f:97:ab:af:15:d8:0b:7b:52:f1:0f:ac:
         38:9f:73:f1:37:64:aa:5f:44:9a:08:11:c4:43:45:39:6a:fe:
         68:09:4d:ea:75:30:2c:44:91:96:12:b8:4e:5c:03:3e:16:4b:
         6f:68:13:8e:3a:09:27:79:ef:d6:03:44:f8:e5:d8:e1:19:d8:
         78:6f:1e:61:31:8a:29:63:47:10:fc:e4:98:66:20:2a:4e:56:
         d8:06:0e:0e:d9:d2:71:04:33:d7:3c:38:b4:04:09:1a:51:68:
         9c:e5:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org