Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/U2LtKjtaWLVaky_gaO2dMkiUt-s.roa
File:                     U2LtKjtaWLVaky_gaO2dMkiUt-s.roa (raw, json)
Hash identifier:          RadqeZQollxYJJqiI44n02hxQSj/KvFvh2YI/WQzr6g=
Subject key identifier:   53:62:ED:2A:3B:5A:58:B5:5A:93:2F:E0:68:ED:9D:32:48:94:B7:EB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       38
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/U2LtKjtaWLVaky_gaO2dMkiUt-s.roa
Signing time:             Fri 22 Jul 2022 00:50:26 +0000
ROA not before:           Fri 22 Jul 2022 00:50:26 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        110.3.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:50:26 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=5362ED2A3B5A58B55A932FE068ED9D324894B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:29:f3:a3:ab:83:5d:b9:94:99:a8:bd:63:
                    cf:f5:98:d9:59:9a:5b:a8:60:bb:86:f7:6e:78:29:
                    13:f7:63:07:48:95:92:dd:81:83:bf:1f:54:78:a1:
                    13:51:41:4b:53:17:d1:f3:15:63:40:30:ea:c0:bb:
                    a1:98:2e:9b:1b:c1:d0:98:0c:10:b4:8e:dc:6c:51:
                    72:5a:e9:67:17:dc:d1:d7:39:f7:c8:ed:6b:97:ae:
                    5e:61:f0:11:25:4e:b1:b5:5a:6a:ef:7d:7c:87:93:
                    4a:0c:46:1a:75:98:ce:0b:34:5f:b4:33:db:12:4b:
                    cb:9c:ed:32:a9:b5:2a:4e:48:f5:3f:56:a2:4a:ab:
                    0f:48:be:a8:0f:c9:8b:46:dd:60:d1:01:89:2f:2a:
                    e5:6c:b9:a5:d7:6f:37:0d:4f:18:b4:b1:f8:38:4a:
                    2b:c6:77:80:46:5a:03:1a:c9:c0:76:46:35:4c:9f:
                    37:67:c3:c6:53:51:5a:cf:e3:51:c2:c9:f6:dd:09:
                    68:69:84:72:b7:7b:53:c2:4c:91:7b:91:24:e0:2d:
                    95:8b:9d:53:32:54:32:f5:2e:03:8e:2d:0f:5d:48:
                    c5:88:f0:54:42:c9:fd:28:71:92:08:24:88:66:d8:
                    d9:67:b1:ed:58:ed:d5:f4:41:54:e0:82:90:6c:9a:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:62:ED:2A:3B:5A:58:B5:5A:93:2F:E0:68:ED:9D:32:48:94:B7:EB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/U2LtKjtaWLVaky_gaO2dMkiUt-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:95:2e:ae:40:54:6a:13:b8:e4:72:25:c5:ee:44:49:ad:
         f4:2c:23:62:68:6f:25:21:88:8b:44:f1:8c:a4:ab:d4:c5:02:
         24:02:bb:a5:d0:21:24:b2:8e:a5:a4:ec:12:f3:d4:be:7f:cf:
         06:91:66:d8:56:d6:cf:8f:28:55:5f:f7:a2:fe:fe:64:86:27:
         b2:9c:81:07:13:45:4e:9f:74:a9:3f:c8:e6:fa:b6:b1:2a:4d:
         e6:60:a6:e3:ee:4f:b5:06:7d:70:0b:89:b6:b3:9a:0e:22:1c:
         2e:9b:70:38:be:a3:ef:64:84:45:16:e0:9b:5e:2d:21:89:30:
         5b:72:5d:e9:8f:03:80:54:d1:01:e1:22:28:3e:66:32:33:d3:
         86:13:a1:aa:b8:b3:94:94:b5:51:89:06:19:e0:fa:6f:11:89:
         0f:62:3f:6b:9c:1d:09:03:d6:7c:e0:fd:52:40:44:e4:fb:af:
         e2:2a:31:5f:26:b0:fc:c9:7f:d0:c3:d9:61:86:a9:9c:ac:74:
         51:fc:07:a6:a2:76:44:fd:e8:03:d8:cd:32:97:bf:fd:b6:16:
         62:48:c7:41:83:30:71:2e:b2:6f:76:ea:c6:75:79:6b:7b:9b:
         85:16:b4:93:cb:c6:07:5c:e4:e6:44:2f:b0:a1:7b:d1:d1:e5:
         c8:cd:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org