Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/H1zb860vJUhs-rtrAZw6Nk2Xd7Q.roa
File:                     H1zb860vJUhs-rtrAZw6Nk2Xd7Q.roa (raw, json)
Hash identifier:          fB/da2zgiyi+sR9OyZiPMffrCrnheZIrzigJHkQNMiA=
Subject key identifier:   1F:5C:DB:F3:AD:2F:25:48:6C:FA:BB:6B:01:9C:3A:36:4D:97:77:B4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       61
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/H1zb860vJUhs-rtrAZw6Nk2Xd7Q.roa
Signing time:             Fri 22 Jul 2022 04:19:02 +0000
ROA not before:           Fri 22 Jul 2022 04:19:02 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.53.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:19:02 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=1F5CDBF3AD2F25486CFABB6B019C3A364D9777B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:aa:65:96:b5:f5:42:0e:1d:c1:c8:e3:27:
                    bc:94:2b:6a:51:dc:d9:d2:08:82:16:cd:17:48:dd:
                    d4:03:aa:8c:68:69:3a:96:50:be:98:ef:3a:14:d0:
                    4f:bf:71:7d:ac:6a:70:28:6c:86:fa:02:a4:31:87:
                    ce:e9:af:e7:81:14:be:6d:52:fa:58:8b:fb:c0:9b:
                    95:67:57:c4:70:29:19:8e:fd:e3:c0:1c:6d:ca:64:
                    ab:b1:ac:97:5f:61:7c:7d:be:6a:ac:77:e4:25:35:
                    fc:9d:ee:11:c3:15:6c:f3:57:e7:f9:4d:a4:48:9c:
                    4e:78:e7:83:a4:98:a0:be:78:27:0d:25:ef:75:dd:
                    fd:4a:23:c2:af:83:11:f2:0c:36:d8:3f:6b:9d:6c:
                    a0:c3:33:77:5b:98:57:38:64:2f:c8:93:57:a8:25:
                    89:b7:f8:9b:38:12:cd:09:b9:04:52:f0:af:cf:71:
                    13:f6:e1:42:2f:83:0e:16:1e:d2:9d:c3:88:c6:47:
                    9c:97:07:76:0f:16:aa:6f:6b:94:91:3c:87:16:8c:
                    6a:4a:8b:e0:3b:10:69:62:2a:97:e1:80:1a:55:4a:
                    74:e8:bf:8e:46:a9:89:d6:80:14:6e:82:56:f1:bf:
                    c0:82:52:4f:19:66:f0:5f:43:d1:8b:74:66:93:9e:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5C:DB:F3:AD:2F:25:48:6C:FA:BB:6B:01:9C:3A:36:4D:97:77:B4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/H1zb860vJUhs-rtrAZw6Nk2Xd7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:38:5e:e2:d6:1a:f8:4a:68:71:d0:a1:03:ef:91:f3:27:2c:
         e8:3a:fa:cd:ef:96:1e:40:dd:90:34:60:1b:30:bd:7a:aa:83:
         c5:4e:58:03:4f:c7:d8:79:2f:c0:be:1a:74:73:92:17:cc:be:
         4f:22:9b:d9:9e:ae:fc:de:54:fe:7d:69:28:1d:73:c6:21:6c:
         ab:0c:28:8f:12:c1:86:cc:e1:af:1f:de:ff:27:1b:1d:eb:f9:
         37:7f:08:9b:aa:22:d1:30:fc:97:df:a3:83:7f:94:b0:37:44:
         21:4a:74:9c:08:fd:be:f9:46:46:dc:98:b7:cb:95:6b:c7:de:
         d7:15:8b:52:94:51:ee:32:0e:b8:8a:c3:a3:c8:bb:db:ac:e1:
         0f:77:d6:cc:ef:a0:55:c3:50:4e:70:92:96:5e:44:ef:83:9c:
         ff:65:7a:e7:7a:96:18:32:88:d9:13:8e:97:b9:98:22:14:51:
         8f:df:61:f6:23:70:29:f7:03:f6:9e:91:5c:a5:2e:a7:33:74:
         35:f0:06:21:43:b1:1d:90:7c:8a:76:d5:2d:99:8b:28:f0:26:
         61:bc:ec:1c:a2:b8:aa:09:b1:13:2a:ae:ce:4a:0b:d7:2a:a6:
         4f:f6:df:ac:ea:db:d0:80:4a:eb:ee:0d:e2:1d:eb:46:f1:c5:
         5d:5b:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org