Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFmtrLxrsR-_v_gIRN3XAJOrnaw.roa
File:                     SFmtrLxrsR-_v_gIRN3XAJOrnaw.roa (raw, json)
Hash identifier:          Ev82ZVCptEROgvxh1WH3dutsbzQp29eyuzU9TSGqoZ8=
Subject key identifier:   48:59:AD:AC:BC:6B:B1:1F:BF:BF:F8:08:44:DD:D7:00:93:AB:9D:AC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       56
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFmtrLxrsR-_v_gIRN3XAJOrnaw.roa
Signing time:             Fri 22 Jul 2022 02:24:21 +0000
ROA not before:           Fri 22 Jul 2022 02:24:21 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.170.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:24:21 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4859ADACBC6BB11FBFBFF80844DDD70093AB9DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:57:d4:2c:79:9a:e5:e3:27:8f:d6:4e:ef:
                    25:d4:bf:f8:55:03:32:25:f5:3f:38:e2:fc:de:50:
                    38:ea:60:96:31:00:14:f8:6d:b5:32:ad:0e:c5:b1:
                    3d:64:db:f6:2c:67:38:9e:38:50:8f:13:cc:91:cb:
                    d1:5f:54:d4:54:9c:9e:f9:e9:9b:bf:ee:3e:bc:c4:
                    ee:57:87:8e:76:28:4a:3d:6e:ae:a9:75:61:2d:09:
                    06:20:cd:eb:fa:1a:05:ac:9d:06:a6:d1:d4:41:fd:
                    31:ec:15:a1:20:9c:66:d5:6d:f8:2f:90:8f:00:83:
                    a6:1a:f7:7c:e4:38:8b:9e:f0:bc:53:c8:02:78:a3:
                    2c:d4:f4:94:18:fc:eb:36:8c:2e:93:db:df:a3:ee:
                    0f:85:18:8b:85:e9:35:1c:e8:43:74:9a:56:f4:54:
                    bc:f7:8a:c3:ef:09:b8:29:ab:fe:55:ba:ca:be:d0:
                    fd:04:9f:64:06:12:43:63:5f:86:28:20:a5:12:f2:
                    c7:96:77:1f:0e:e8:83:12:26:a6:fb:66:84:05:54:
                    1d:57:a8:0a:20:10:59:15:f0:36:d6:12:26:e2:77:
                    f7:d3:b1:b2:ee:de:e2:3f:3e:87:70:b4:4f:61:0b:
                    a5:1b:fd:a5:d7:d5:43:6e:20:71:b5:f8:bc:ad:f2:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:AD:AC:BC:6B:B1:1F:BF:BF:F8:08:44:DD:D7:00:93:AB:9D:AC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFmtrLxrsR-_v_gIRN3XAJOrnaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:67:08:25:09:d7:d8:21:be:2a:00:35:15:06:a8:3e:63:42:
         0a:a6:95:5d:23:9e:ea:37:8d:d9:c3:f8:c0:ba:f7:87:2d:4c:
         61:b1:68:a7:00:6c:c2:77:5b:29:26:4d:d5:a9:94:f3:29:ca:
         f8:aa:7b:09:01:14:fd:00:97:1c:66:c1:16:8e:78:72:ec:69:
         ec:a9:49:c3:3c:e0:b8:b6:07:bc:1e:b4:47:05:a7:14:fb:fb:
         69:7e:18:53:04:56:30:f5:3a:b7:90:2d:90:25:dc:7a:19:1b:
         8f:74:ea:5b:2d:32:0a:c5:7c:a6:8e:2e:8f:41:5d:b4:f7:75:
         a3:79:48:ab:76:a7:37:dd:42:06:20:3b:29:cc:3d:5b:bf:b7:
         ae:b9:94:ab:d8:fe:a4:e2:9a:c1:1e:cd:07:12:7b:4a:1d:ca:
         75:13:f7:a1:29:d5:12:ca:60:5f:30:ca:c3:1f:83:38:27:87:
         3c:b1:1c:d9:4c:9f:d4:c7:4c:f4:92:b0:5f:25:68:83:3f:1c:
         a8:bd:67:81:2f:53:48:fe:aa:a2:2c:78:a8:54:cb:1f:4d:14:
         3a:55:f9:60:6b:05:8a:fc:38:c0:79:67:40:53:48:35:c9:c7:
         81:31:44:3b:11:b9:3a:70:20:1e:0f:0b:3b:2a:c3:c0:4c:6f:
         3b:7a:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org