Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/H2QbBw3X09hmEXJ1zWeofG5mAgc.roa
File:                     H2QbBw3X09hmEXJ1zWeofG5mAgc.roa (raw, json)
Hash identifier:          LbSKvACb4BapvdJoOSXGqvfe6xaIk34Fjly0CSTS7i0=
Subject key identifier:   1F:64:1B:07:0D:D7:D3:D8:66:11:72:75:CD:67:A8:7C:6E:66:02:07
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       BA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/H2QbBw3X09hmEXJ1zWeofG5mAgc.roa
Signing time:             Tue 26 Jul 2022 05:03:12 +0000
ROA not before:           Tue 26 Jul 2022 05:03:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        219.99.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 05:03:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=1F641B070DD7D3D866117275CD67A87C6E660207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8d:3e:5a:08:fc:40:9a:1f:7c:7b:45:33:d1:
                    31:07:aa:c5:f1:2a:9f:43:33:74:bd:67:1c:e4:d6:
                    ee:8e:ec:9f:02:da:56:ce:22:16:b3:99:31:c7:82:
                    a7:0f:c7:6c:9d:23:8f:0d:c5:86:0c:09:3d:04:0c:
                    08:f8:b5:a1:91:13:bc:fe:70:7d:40:a9:89:36:80:
                    69:41:25:cf:a9:cd:d3:96:b0:a0:f9:e7:34:e9:39:
                    ed:0a:05:c1:01:d0:ff:c9:e9:20:96:2c:e3:ec:6d:
                    3f:6a:4f:ae:f6:4b:d4:96:98:0c:b1:ee:e3:de:67:
                    17:5b:b7:03:f3:2e:a9:ba:e4:ee:13:cc:0e:3e:0c:
                    08:b6:ab:e2:90:e1:af:0d:16:5c:f9:35:4a:18:78:
                    b0:30:47:8e:f7:d6:49:84:aa:9a:7e:86:73:2a:4c:
                    85:f9:db:df:c4:eb:f1:ed:68:5b:a8:61:1a:ec:61:
                    1c:f4:bd:51:cc:40:56:dc:7c:1e:61:16:0d:9d:0b:
                    12:8a:e9:d7:e8:22:1b:4a:72:0f:84:02:cb:11:39:
                    25:00:28:98:0d:44:78:70:19:a0:aa:ea:68:f2:61:
                    df:fa:b2:42:f9:0f:cf:73:bf:15:b5:7f:d5:c2:db:
                    87:fe:0b:a6:da:f2:5d:43:6a:b4:f5:21:b3:0e:e4:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:1B:07:0D:D7:D3:D8:66:11:72:75:CD:67:A8:7C:6E:66:02:07
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/H2QbBw3X09hmEXJ1zWeofG5mAgc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.99.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:ee:fd:38:bf:94:c1:0d:5c:15:bc:b6:b1:3b:d3:10:77:
         b0:09:29:bd:b3:a8:99:19:e3:d3:21:27:96:65:53:da:9b:b1:
         ed:1a:66:88:78:45:8e:98:4b:14:65:e1:c0:a3:e3:ae:c1:70:
         8c:da:93:3e:75:31:59:3e:22:8b:5d:4e:15:9e:6c:1c:5d:80:
         b9:bc:6a:87:ed:76:1b:3f:8e:e0:ba:1f:be:27:7c:14:f1:5a:
         fb:9b:d1:e0:dc:09:df:84:46:65:45:73:81:e8:04:4f:84:43:
         c9:b9:57:b7:9d:dc:9f:3a:da:47:a1:e6:48:b1:a9:2e:a1:ca:
         1d:f3:c8:d0:5c:2c:e1:16:82:b2:87:15:47:90:11:77:16:fa:
         4a:7d:94:42:8c:b9:d1:f4:9b:22:46:15:ae:0e:bc:8c:ea:ca:
         3d:0d:c3:1a:f5:eb:02:91:c1:94:25:16:ad:e8:42:de:e2:6a:
         72:64:ed:67:7e:35:d0:28:05:5a:36:cc:11:d2:e7:2f:7b:f8:
         a1:49:e3:2d:63:07:6e:15:d2:ca:c1:54:3e:d0:fd:84:5d:da:
         1a:af:ed:22:78:dd:71:6c:06:e7:df:52:c6:20:4a:77:d3:c4:
         94:2e:2c:97:70:a2:40:34:49:d1:91:9f:e3:16:3d:15:de:6f:
         cc:12:c5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org