Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFAqYrRrYVKcbU_TlFdEaREMpaY.roa
File:                     SFAqYrRrYVKcbU_TlFdEaREMpaY.roa (raw, json)
Hash identifier:          ddlbF0tHSt59jTMRxLoyzBVYaa/G/lmAGFgpzTjX7+Y=
Subject key identifier:   48:50:2A:62:B4:6B:61:52:9C:6D:4F:D3:94:57:44:69:11:0C:A5:A6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0107
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFAqYrRrYVKcbU_TlFdEaREMpaY.roa
Signing time:             Wed 30 Nov 2022 02:51:07 +0000
ROA not before:           Wed 30 Nov 2022 02:51:07 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     10013
IP address blocks:        124.255.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Nov 30 02:51:07 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=48502A62B46B61529C6D4FD394574469110CA5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0e:f7:dd:60:4c:01:2d:22:1e:6b:2d:8c:6e:
                    9e:7c:5d:1a:fd:48:47:e4:06:4e:89:a4:6d:eb:43:
                    8b:eb:bf:34:30:d5:78:65:81:b8:b9:7c:2b:72:59:
                    ff:32:3e:67:fe:c5:f8:11:81:26:39:6e:4f:32:d5:
                    ed:54:7c:56:53:f4:3a:87:c1:ad:c4:ee:88:5c:44:
                    6a:00:37:a5:be:3c:9b:1e:1b:4c:1e:9c:f8:dd:0f:
                    1c:bb:ea:98:0e:10:c1:66:5f:73:55:3b:70:30:14:
                    34:d6:2d:84:93:97:9e:4d:db:31:b6:02:47:2b:6e:
                    84:cf:e1:41:44:58:7b:97:38:a9:cf:c1:a4:57:53:
                    f5:ed:ef:64:52:ae:56:50:bd:b7:f7:98:b5:2e:13:
                    d7:3d:40:09:96:21:b8:5e:06:98:2c:b1:95:8c:3d:
                    5c:d1:fd:94:f3:4f:dd:f2:e6:8b:0a:1d:35:14:fd:
                    ad:d6:f0:cf:9b:6b:53:bc:5c:6e:0d:d1:05:62:c9:
                    0a:7c:d7:32:33:af:b7:c4:6b:28:1d:e8:fc:c5:6c:
                    1d:78:e0:0f:98:78:ff:31:52:a1:b7:8b:79:65:54:
                    86:38:09:37:bd:a4:87:9b:2b:82:e4:97:54:22:a0:
                    6c:d1:da:0b:c5:46:bc:ca:01:ea:84:3e:4c:2c:8e:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:50:2A:62:B4:6B:61:52:9C:6D:4F:D3:94:57:44:69:11:0C:A5:A6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFAqYrRrYVKcbU_TlFdEaREMpaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:43:9f:a1:ce:46:3c:b9:87:5b:92:93:c3:57:ab:28:3f:2f:
         25:aa:e4:64:e0:a9:25:97:31:e7:76:1c:ca:ce:cd:50:ee:a6:
         13:30:46:10:50:95:54:29:b1:76:0d:bc:59:25:30:1a:18:ba:
         14:d8:e7:b5:df:d4:eb:c6:11:8f:92:10:92:41:dc:1c:19:c9:
         62:05:89:de:85:77:ed:c1:1c:a8:9e:8d:c5:20:a3:c8:69:0e:
         fb:e3:d7:b8:8d:63:e7:4e:5f:ad:62:2c:52:e3:01:d9:f6:0c:
         07:36:5c:c6:1d:3c:5d:8f:75:9c:b1:b6:27:e5:13:1a:ad:13:
         ba:c6:4e:b8:be:90:55:51:0f:d0:76:9d:08:36:9b:bc:25:dd:
         a3:24:7e:e7:21:1e:aa:68:eb:d2:b3:49:f0:83:0b:9f:bd:49:
         a2:f6:b1:21:09:6f:f0:2a:16:1f:d4:c2:f3:a1:90:8d:da:3f:
         d8:68:09:63:40:7f:5d:ea:24:83:87:ad:cb:d4:a1:c6:e2:6b:
         c2:eb:7b:02:d4:11:93:b7:12:d9:9d:2b:c6:c2:2a:c1:85:8f:
         5c:76:ee:08:d0:4b:d4:a5:21:20:a8:f1:4d:58:c5:0c:3d:c7:
         2e:8a:43:ca:ab:fa:72:88:ac:6e:13:7a:7c:66:d5:e6:81:9a:
         f7:39:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org