Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HgEHpB5mdpGoV8zMWGU1e8Jm0g4.roa
File:                     HgEHpB5mdpGoV8zMWGU1e8Jm0g4.roa (raw, json)
Hash identifier:          NGykzci0nE4jZvoDz3q40C17X87qzbfWOFqN0GriF84=
Subject key identifier:   1E:01:07:A4:1E:66:76:91:A8:57:CC:CC:58:65:35:7B:C2:66:D2:0E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       4E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HgEHpB5mdpGoV8zMWGU1e8Jm0g4.roa
Signing time:             Fri 22 Jul 2022 02:00:24 +0000
ROA not before:           Fri 22 Jul 2022 02:00:24 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        43.244.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:00:24 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=1E0107A41E667691A857CCCC5865357BC266D20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:a3:c8:79:ec:5b:4b:08:94:6e:d7:49:21:
                    af:3e:f5:88:39:79:97:0c:87:f0:9c:79:18:22:bc:
                    4d:13:17:d6:56:6e:b3:13:c8:04:ea:87:dc:b1:20:
                    f1:d5:44:38:83:ad:a9:08:f0:cd:f1:3c:95:25:ec:
                    28:be:36:df:9f:99:02:52:58:bd:03:75:b7:d7:77:
                    42:85:2c:84:89:a3:2a:6c:63:cd:02:72:7e:a7:aa:
                    c7:55:c1:25:d0:09:ad:21:75:e9:db:96:47:81:31:
                    7b:19:89:de:4d:34:14:38:4d:b0:f8:08:f4:65:ea:
                    ac:2c:f1:e0:3e:71:4d:cf:43:f4:2d:5e:4c:d5:cb:
                    ae:cb:10:c4:09:49:4a:9b:e8:ea:55:cd:4e:09:47:
                    bf:53:74:ff:94:d1:10:da:22:c7:ee:70:df:f1:15:
                    a8:89:26:6c:80:cf:2b:7d:7e:fa:6a:5a:aa:f8:ba:
                    eb:99:c2:91:b1:23:25:98:a0:fe:48:c3:96:77:c3:
                    33:df:a0:ae:e6:7f:69:19:11:a3:a0:7d:4e:58:7d:
                    9d:8f:f5:65:37:d3:6f:2a:8f:0a:e7:b4:31:a4:74:
                    50:3d:ea:6a:e9:4d:0b:c0:79:8f:ec:b0:1a:9a:18:
                    e4:3c:1f:6f:a2:01:f7:cc:58:07:6f:2b:2a:33:23:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:01:07:A4:1E:66:76:91:A8:57:CC:CC:58:65:35:7B:C2:66:D2:0E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HgEHpB5mdpGoV8zMWGU1e8Jm0g4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:f8:03:45:14:38:1f:0b:d3:4d:b6:90:13:ac:a3:a1:d6:
         68:84:5c:e1:af:ee:d8:10:3f:ec:66:80:eb:cb:45:de:c9:de:
         63:ff:60:56:4f:55:57:16:ab:cb:9b:ac:76:fd:95:8f:73:88:
         aa:70:80:b8:1d:db:d9:e5:4b:19:16:5f:5f:16:b2:28:91:78:
         4f:55:d3:d9:84:b8:18:3d:6f:c2:e7:8d:1e:66:01:27:1a:63:
         f0:6f:b5:f1:7a:a7:44:03:b4:3d:c0:08:a5:0e:e4:e8:a0:13:
         97:2e:a0:2c:84:d9:82:c9:45:dd:56:ce:8d:43:1e:e6:f4:88:
         4a:e1:d1:76:41:54:20:cd:41:15:0d:14:81:48:8c:df:0f:37:
         99:7c:1a:99:24:0d:07:38:0c:78:2f:88:d1:69:5d:8c:56:9c:
         ed:e1:b2:6e:8a:99:b0:9c:36:22:54:8a:95:27:01:e0:43:66:
         2a:af:3c:69:d1:3c:5d:e7:26:c7:ae:bb:b1:5a:f9:93:00:12:
         0f:f6:df:8a:7f:d2:92:61:82:0d:4d:f2:14:4b:b3:1c:1e:a2:
         08:49:68:2c:85:b6:d3:ec:23:2d:87:c8:6a:97:e2:f0:e7:df:
         18:4e:85:91:d7:25:48:50:02:3f:6d:65:49:dc:78:85:2f:65:
         7b:5c:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org