Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NEbI2H41jCZCthtgbS9B_HTBaYs.roa
File:                     NEbI2H41jCZCthtgbS9B_HTBaYs.roa (raw, json)
Hash identifier:          1ZpOpZyU+QGjJr0kfnw3CLS1wBBzGnEaXV5y3eIqKRo=
Subject key identifier:   34:46:C8:D8:7E:35:8C:26:42:B6:1B:60:6D:2F:41:FC:74:C1:69:8B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       92
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NEbI2H41jCZCthtgbS9B_HTBaYs.roa
Signing time:             Fri 22 Jul 2022 06:29:28 +0000
ROA not before:           Fri 22 Jul 2022 06:29:28 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        110.74.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:29:28 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3446C8D87E358C2642B61B606D2F41FC74C1698B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c5:e5:d3:ba:fc:a7:76:0d:d0:8e:ce:7d:96:
                    ec:1e:9e:d9:34:7b:3a:44:fb:56:d1:a4:b8:f6:06:
                    c2:b4:84:0f:17:0f:42:7e:f5:80:5b:a3:91:0f:23:
                    0b:6f:de:9e:0c:eb:2c:7a:84:6e:bc:18:4c:9c:04:
                    e8:ad:de:f8:b7:05:b1:90:7b:2f:9a:b9:cc:bb:ee:
                    bf:7e:83:d8:73:6d:bb:ac:00:23:ed:96:58:6b:01:
                    61:d1:b1:0c:9a:6d:1b:c2:90:7c:d3:43:b4:d8:c8:
                    79:e8:dc:a7:53:e2:b1:b5:a0:09:07:d6:a3:0a:08:
                    9d:d5:17:3e:ed:0b:36:9c:dc:34:2f:01:a9:21:3d:
                    4c:7f:dd:cd:48:64:4e:81:26:a9:64:3c:37:3b:0f:
                    7c:1b:d9:34:5d:d1:5c:d3:b9:62:56:75:11:11:c7:
                    c9:3c:ee:09:c8:12:27:7b:e9:ec:48:51:97:66:fb:
                    5a:43:c2:bc:f3:31:ac:2e:35:0f:a6:84:ba:0b:5a:
                    b2:7d:ec:19:c6:5e:ab:66:69:4e:4a:59:98:4f:fd:
                    22:e4:61:d7:4e:06:24:df:bb:e8:3d:ec:ba:8e:ea:
                    e8:7e:74:94:0e:5f:11:06:c1:b9:73:aa:91:cd:62:
                    0e:95:de:a3:b2:d6:fd:34:4f:7f:81:86:7e:67:38:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:C8:D8:7E:35:8C:26:42:B6:1B:60:6D:2F:41:FC:74:C1:69:8B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NEbI2H41jCZCthtgbS9B_HTBaYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:03:d4:d4:c2:19:a0:93:18:2f:3f:a7:6e:06:7f:af:a1:3a:
         44:13:63:bf:7a:5d:7d:c0:5f:38:ac:ef:48:84:4c:08:27:cf:
         f1:33:ec:ed:d1:bc:ad:5f:51:69:8e:14:be:4d:73:5b:64:bf:
         bb:68:fa:f1:30:28:f1:5a:0a:02:80:a0:ae:e2:04:f3:df:3b:
         1c:12:27:34:7c:46:e9:d0:1d:55:40:50:d1:0e:30:be:32:c1:
         41:bd:0a:a8:0c:92:31:82:b2:32:b4:ae:d8:47:f5:c2:e3:65:
         bd:ae:02:2b:5a:b9:95:da:16:62:46:bb:0b:a0:53:66:00:2a:
         fa:ae:22:96:fc:f7:b5:5a:f7:8d:af:f2:1a:17:c1:73:3e:87:
         a9:79:e8:19:e0:6c:b1:72:d7:d1:8e:27:2e:44:1e:0b:bf:f7:
         30:1a:1e:d6:c8:64:c9:51:75:e1:2d:9a:1a:65:92:25:72:01:
         fe:5d:c7:7e:a2:28:09:ad:88:55:b8:26:31:2a:ed:ee:61:d7:
         c9:09:bf:4c:ea:35:e8:5e:4a:4d:ea:10:31:0f:57:8a:72:bb:
         d9:21:15:4a:dc:1d:f4:96:71:45:b0:75:95:8b:89:74:8e:0e:
         76:31:a0:6b:68:bd:b2:51:1d:71:0d:b1:2b:24:a3:8e:4c:45:
         ff:3e:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org