Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ok26A4qIYYutxjElvZDAck5WRPY.roa
File:                     Ok26A4qIYYutxjElvZDAck5WRPY.roa (raw, json)
Hash identifier:          UPzwhyNm+vZhkHWz27BtbP65VGuK18sK7wD/G73eodM=
Subject key identifier:   3A:4D:BA:03:8A:88:61:8B:AD:C6:31:25:BD:90:C0:72:4E:56:44:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       88
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ok26A4qIYYutxjElvZDAck5WRPY.roa
Signing time:             Fri 22 Jul 2022 06:21:23 +0000
ROA not before:           Fri 22 Jul 2022 06:21:23 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.87.16.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:21:23 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3A4DBA038A88618BADC63125BD90C0724E5644F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:f3:1a:44:fd:71:22:a5:19:86:bb:2d:a8:
                    c5:75:a4:80:d7:08:b8:8f:0e:60:5e:84:71:96:75:
                    0a:6d:b5:94:2d:36:34:f1:e5:65:4f:b7:4f:61:06:
                    bf:70:eb:e0:30:49:a2:f2:06:09:f2:90:74:61:50:
                    28:5a:18:99:ea:79:9d:5a:33:06:14:58:91:b5:cf:
                    f8:53:eb:54:ba:45:64:79:ad:6d:53:b2:57:95:c5:
                    b2:d2:2d:58:f4:c3:cd:44:aa:48:85:cc:9b:4a:b1:
                    3e:8d:c0:8a:6c:3e:3f:c4:15:a2:f5:3b:76:5e:c1:
                    52:00:91:1a:a3:a2:57:2b:16:9e:a7:54:e9:ed:b1:
                    00:28:c1:8f:32:bc:aa:9f:bd:61:01:66:f6:18:86:
                    68:42:96:25:eb:86:a0:d1:0c:24:00:78:7b:f5:e6:
                    58:ad:38:ed:c7:bc:8b:dc:94:ac:40:4a:aa:b2:8a:
                    73:01:e9:dc:8b:9d:39:ca:4b:09:c1:a9:62:c9:9d:
                    33:80:09:4a:e7:af:10:ba:11:28:74:a8:de:f5:97:
                    bb:1c:39:32:9b:de:e7:c4:04:97:fa:9d:a7:87:ea:
                    61:22:b6:4d:20:87:d0:7b:14:c2:fa:ab:49:4d:dc:
                    36:35:f2:ea:87:7a:a1:a9:a3:ef:dd:0a:14:f7:83:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4D:BA:03:8A:88:61:8B:AD:C6:31:25:BD:90:C0:72:4E:56:44:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Ok26A4qIYYutxjElvZDAck5WRPY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:13:5a:10:8a:6d:91:fd:62:10:27:72:eb:3b:b1:7d:83:
         2d:52:ea:26:50:97:9f:c3:b9:63:6e:0a:f1:d9:c8:4e:09:88:
         08:1c:75:53:9c:4f:df:cd:f7:8c:99:94:16:00:82:2c:67:1c:
         11:08:ec:ff:76:6b:87:c5:07:17:cd:a5:01:d0:94:a5:f4:46:
         5e:d5:b7:c4:49:f5:f6:a8:81:38:4f:42:f6:a0:59:91:cb:9e:
         e9:f0:76:07:07:07:c1:53:70:f6:29:d8:1d:d0:ac:b2:18:26:
         d8:24:ff:12:ea:37:ab:68:0b:bf:08:62:6f:51:67:f6:fd:1d:
         81:a8:42:28:58:7f:a8:14:69:05:f1:39:c4:51:34:e7:ab:92:
         7f:4a:37:a8:46:e4:bc:03:d1:23:ea:9d:7b:18:0f:5d:2a:37:
         c3:4d:cb:d8:f2:11:df:2e:e8:fb:f3:de:eb:d3:64:b2:ab:03:
         44:8a:ec:c2:b8:3e:3b:66:c6:2f:c4:e0:cf:97:7e:21:e4:7e:
         28:47:62:30:61:f4:36:f3:46:73:e8:ae:92:f0:08:b3:25:da:
         ab:4a:5b:04:c3:e1:dd:24:f0:fd:d4:46:eb:ac:3f:9d:c6:65:
         9a:9e:08:79:59:f3:fd:63:03:8f:7e:97:60:56:13:a3:a2:f7:
         db:f7:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org