Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SyT2aJ5Pr9Q8WyNdcxDiZePwkwE.roa
File:                     SyT2aJ5Pr9Q8WyNdcxDiZePwkwE.roa (raw, json)
Hash identifier:          pH7wmsLi1/jH3KbUBJM7yY1z/6OuFiknuS37iNrY2ns=
Subject key identifier:   4B:24:F6:68:9E:4F:AF:D4:3C:5B:23:5D:73:10:E2:65:E3:F0:93:01
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       9F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SyT2aJ5Pr9Q8WyNdcxDiZePwkwE.roa
Signing time:             Fri 22 Jul 2022 06:37:46 +0000
ROA not before:           Fri 22 Jul 2022 06:37:46 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        119.150.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:37:46 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=4B24F6689E4FAFD43C5B235D7310E265E3F09301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:3e:50:bd:7b:ec:8f:10:92:66:a4:e8:13:
                    73:da:78:bc:0e:be:57:d0:a1:0c:11:15:09:dc:e3:
                    bd:09:4d:80:0a:34:e0:5e:92:ce:44:ca:79:f0:74:
                    a7:32:d5:73:a5:7c:e4:0c:f9:0a:10:f8:46:62:95:
                    9a:96:0a:60:74:6b:1e:d7:ad:49:2d:b5:5c:94:92:
                    d7:2a:95:be:f2:5b:af:87:14:fd:c1:ce:78:3b:25:
                    35:ff:36:5e:6c:50:d8:2f:c7:8c:f9:83:d0:0f:02:
                    c2:70:ed:1e:74:65:44:49:e1:8f:f1:0b:27:7b:6b:
                    31:e4:b8:5e:8c:18:58:ae:5f:34:1d:eb:dc:9f:67:
                    70:e0:1a:4a:4a:98:95:fc:10:63:f9:b5:3f:b7:e8:
                    2b:e6:ca:f3:17:15:d3:77:50:f5:af:ab:8f:60:2c:
                    ca:e4:d9:78:6c:f4:25:60:52:c4:1c:b2:30:12:a4:
                    48:5a:43:90:e7:ab:bf:81:5a:64:ea:bf:6e:36:75:
                    61:72:f0:8a:f5:6a:46:5d:3b:82:af:18:91:17:f8:
                    2e:b5:06:e2:c3:bf:75:93:ca:c9:c5:1d:fe:3b:92:
                    0e:30:99:04:8e:6c:c1:bf:f9:a7:d3:71:33:62:06:
                    22:23:1a:10:ae:d9:45:0b:f2:2d:66:7b:53:5f:42:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:24:F6:68:9E:4F:AF:D4:3C:5B:23:5D:73:10:E2:65:E3:F0:93:01
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SyT2aJ5Pr9Q8WyNdcxDiZePwkwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:4c:4e:61:a2:ce:61:c3:23:df:fb:bb:b4:90:11:a6:49:
         21:ab:0d:9c:ac:bf:05:70:c5:12:ad:79:94:43:d5:9c:00:53:
         3b:83:80:42:f8:33:91:a0:0a:71:2b:1a:99:aa:a5:36:ee:8b:
         af:44:47:a8:45:a4:78:85:fa:48:f0:68:b2:0f:86:5c:bc:d7:
         9d:f6:ec:77:0c:3a:21:bf:2c:61:5f:bf:97:58:de:93:3e:8e:
         d0:3f:21:35:9f:d7:ef:d5:e6:e7:c5:de:9a:f2:e3:33:0c:67:
         1e:eb:b9:b7:31:db:5b:69:3c:d7:95:88:ce:0c:58:56:95:9d:
         e6:8c:4e:3c:d2:9d:0a:1f:8e:47:f6:37:f1:33:7f:fa:38:f6:
         d3:e9:6c:fe:21:ee:23:01:35:2b:f0:99:31:34:3f:29:c6:aa:
         59:08:d7:f2:1e:14:47:6e:e3:5f:41:c5:6e:52:03:d0:30:a7:
         d9:1f:fe:23:29:a1:19:71:74:db:04:24:64:cd:01:06:5d:7d:
         85:1a:ed:f2:52:1d:ca:c3:90:65:74:a0:25:39:d9:90:83:5b:
         14:8a:c9:5b:3c:ad:0a:67:e7:e8:2b:60:54:31:0a:68:7a:94:
         bf:be:88:1d:a8:cb:93:be:08:1a:c3:f3:72:63:d6:fa:c8:75:
         a7:97:03:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org