Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Inn7Hc-A1c_vdfUvu8N_up42Qmo.roa
File:                     Inn7Hc-A1c_vdfUvu8N_up42Qmo.roa (raw, json)
Hash identifier:          x12Cpk0DYMhNDzyTkRIf9xTaFYVqFHyKiwxgB5tsOKY=
Subject key identifier:   22:79:FB:1D:CF:80:D5:CF:EF:75:F5:2F:BB:C3:7F:BA:9E:36:42:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       DA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Inn7Hc-A1c_vdfUvu8N_up42Qmo.roa
Signing time:             Thu 28 Jul 2022 05:41:53 +0000
ROA not before:           Thu 28 Jul 2022 05:41:53 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        183.181.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:41:53 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=2279FB1DCF80D5CFEF75F52FBBC37FBA9E36426A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:f2:65:73:ba:0c:6f:fa:1b:3c:03:54:d8:
                    95:fa:78:d3:84:73:46:4f:d6:56:7f:7a:ac:94:c5:
                    67:b9:b6:d7:b3:ef:d1:c3:34:c6:8b:5d:47:40:7d:
                    d6:8e:16:7b:cf:87:7e:eb:51:a6:c7:d9:46:d8:dd:
                    3c:5d:70:8b:75:97:f6:f0:8e:4d:25:9b:c8:0a:ed:
                    26:58:a2:aa:ad:bd:c3:8a:cf:64:d0:9a:f3:9f:61:
                    d2:9c:35:55:27:6d:10:b1:8e:bd:48:a3:78:bd:87:
                    d0:8b:3e:b2:a5:27:bd:15:62:0b:0b:6d:e2:21:9e:
                    b9:bd:af:9d:e9:ea:cc:b7:25:97:f6:74:38:a5:90:
                    57:fa:9d:a1:6b:3a:c4:9e:bd:32:d1:5e:9e:8c:6e:
                    fc:d0:87:70:db:df:5c:32:89:81:48:7c:55:5d:5a:
                    54:97:91:1a:d5:c5:71:ad:4e:d1:cb:63:a6:74:48:
                    9e:03:74:b6:64:d3:90:93:ac:23:e9:32:ff:c0:0e:
                    67:82:f6:f2:1a:56:cb:b1:2c:e1:4d:c7:5e:9a:91:
                    91:19:28:89:ba:f5:cb:35:d5:e9:0e:df:ba:22:68:
                    ef:7a:20:35:f6:ac:52:a1:86:14:e7:c3:f0:19:b0:
                    b3:5e:01:95:b5:84:34:76:75:f6:e7:89:b9:2c:4f:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:79:FB:1D:CF:80:D5:CF:EF:75:F5:2F:BB:C3:7F:BA:9E:36:42:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Inn7Hc-A1c_vdfUvu8N_up42Qmo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:ea:35:a5:ea:f0:43:3b:90:91:5d:a2:aa:8b:f6:d0:55:
         92:7b:7f:0e:ec:5b:69:12:78:c4:a8:69:9c:b4:b5:ba:45:90:
         6d:05:af:e5:d4:71:61:9b:4e:3e:46:97:b6:68:0b:bc:8a:22:
         36:d5:ab:fe:2e:9e:12:03:79:1e:31:59:e7:e5:e0:47:c2:a4:
         3e:2c:9a:7f:3a:9e:22:06:bd:b8:1d:a5:bc:3b:18:d4:00:92:
         b6:02:9a:ea:28:cb:80:d9:6d:42:b9:a1:9f:67:a4:13:33:f6:
         ca:e0:6e:29:ce:2a:4c:41:f2:92:c9:05:a1:bc:a2:24:79:a9:
         9f:6e:84:74:4a:c5:c5:ed:2b:06:4e:99:b1:f0:ae:fd:64:1c:
         9e:7c:44:f7:57:b4:a9:b8:84:cf:0d:3c:4e:d3:71:a2:51:85:
         e9:10:37:de:7f:a4:69:a0:e8:35:aa:19:72:78:7a:bd:4e:e7:
         3c:82:0b:45:56:3b:9f:2a:6d:20:73:2a:6c:a6:48:50:ac:53:
         3f:bb:08:8e:05:9b:f3:b7:33:da:34:bf:06:8c:6b:a6:f0:d4:
         83:1e:72:e0:ab:89:c0:4f:25:ec:19:e6:01:cc:9b:ab:51:6e:
         49:7d:ac:1b:d7:03:08:d9:c9:54:ac:1f:68:a4:89:6f:5d:31:
         d4:3b:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org