Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GSBSTgh4NFZv718K43mjiT6H3Q4.roa
File:                     GSBSTgh4NFZv718K43mjiT6H3Q4.roa (raw, json)
Hash identifier:          xABUOZcBazuWO2TrTrNC/+AxdAHRPclSOMKvGvL77Xg=
Subject key identifier:   19:20:52:4E:08:78:34:56:6F:EF:5F:0A:E3:79:A3:89:3E:87:DD:0E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       BC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GSBSTgh4NFZv718K43mjiT6H3Q4.roa
Signing time:             Tue 26 Jul 2022 05:06:41 +0000
ROA not before:           Tue 26 Jul 2022 05:06:41 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        175.103.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 05:06:41 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=1920524E087834566FEF5F0AE379A3893E87DD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:87:a9:19:df:a9:91:d8:9f:b5:14:61:bb:
                    db:34:fa:78:e9:96:05:e7:9f:6d:06:12:ae:ce:55:
                    50:4a:8e:89:58:73:73:c1:65:ac:d4:89:6b:2b:c0:
                    5e:6f:fc:b1:a9:b8:1a:86:a7:f3:c9:da:41:29:f2:
                    e5:49:68:f0:e0:5f:0b:cc:92:75:f6:63:ad:b0:be:
                    cc:ad:6e:7b:14:2a:39:df:35:f7:f6:88:1e:c7:64:
                    f8:36:01:43:0b:04:d3:03:0e:b6:56:8d:12:72:cd:
                    9a:fc:db:c1:5f:23:fa:47:fe:de:9d:2c:42:60:76:
                    ca:0f:1e:dd:c8:95:b6:5d:0e:0e:86:7e:50:c2:0b:
                    6b:71:7e:45:ad:c1:75:ce:54:05:65:39:c8:15:45:
                    d6:98:d5:ec:41:84:f4:44:94:46:a8:bd:97:69:11:
                    75:f0:c8:90:98:11:81:03:b0:5d:b9:9a:f7:b7:13:
                    a1:b7:fa:be:ec:4d:3a:ea:4b:d3:ab:29:70:5b:7e:
                    17:7e:9b:ac:59:30:55:b1:8a:ce:7a:12:6a:fa:1a:
                    1d:e0:30:43:e2:fd:3d:7f:79:6b:30:d3:ff:af:06:
                    f7:30:f5:76:a3:f4:35:b2:83:49:51:c0:ec:0d:77:
                    16:c7:6c:e1:96:0e:07:62:8c:9c:b6:f4:30:44:0d:
                    7f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:52:4E:08:78:34:56:6F:EF:5F:0A:E3:79:A3:89:3E:87:DD:0E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GSBSTgh4NFZv718K43mjiT6H3Q4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:78:51:39:f6:d9:a5:bf:5c:1b:2d:fb:8f:37:cd:e0:62:91:
         f4:e7:23:7f:58:df:19:fa:6b:c7:bf:32:1e:f9:c4:52:fe:a2:
         ce:4a:d5:3d:ac:76:07:bd:e7:75:d5:b9:28:39:07:1e:ae:dd:
         bd:e1:b8:77:07:70:a5:6c:b0:3c:f5:03:f3:c5:cf:40:d4:62:
         93:3b:bd:e2:50:13:0c:eb:1a:bf:31:c7:59:fb:7c:57:cd:a6:
         05:45:d3:75:d1:76:7f:f8:fa:63:db:3d:b2:b8:7b:f4:c3:98:
         7c:9b:c0:29:96:16:46:5d:ab:00:10:21:7d:28:67:82:19:68:
         e2:7f:b3:1a:32:6c:c0:47:36:d5:66:2f:70:1e:9e:96:14:75:
         3b:bf:71:5e:96:9e:53:a6:2a:f3:a7:a2:24:55:58:77:5c:7a:
         59:f2:a3:0f:85:50:70:e6:c5:3e:0f:bb:a2:16:c8:60:61:29:
         2d:53:e1:12:83:a8:e9:82:bc:bb:2f:06:15:b4:1d:eb:c4:8f:
         bd:70:4f:3e:c8:9f:62:87:01:89:9a:1a:09:bf:71:e6:a0:20:
         fa:8b:02:8a:5c:19:43:2f:76:e0:4b:39:21:75:f3:0c:0a:be:
         21:84:b6:55:32:9e:d0:0f:50:4e:06:9d:4e:4d:05:71:a5:8a:
         2e:2b:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org