Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UbVNh7VsoUvx6cVdvCzwpk0USAQ.roa
File:                     UbVNh7VsoUvx6cVdvCzwpk0USAQ.roa (raw, json)
Hash identifier:          eQvat+y+5AxTYUk8RWYOBRYa2oSXospfWnw3eJaupR0=
Subject key identifier:   51:B5:4D:87:B5:6C:A1:4B:F1:E9:C5:5D:BC:2C:F0:A6:4D:14:48:04
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       C5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UbVNh7VsoUvx6cVdvCzwpk0USAQ.roa
Signing time:             Thu 28 Jul 2022 05:13:22 +0000
ROA not before:           Thu 28 Jul 2022 05:13:22 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        122.145.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:13:22 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=51B54D87B56CA14BF1E9C55DBC2CF0A64D144804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:8d:8b:09:9f:6e:9d:a8:78:c4:90:b6:9e:
                    50:81:a7:87:97:a1:c3:82:a9:c1:6e:37:5a:9c:df:
                    27:fe:00:80:cf:cb:52:e9:8e:cd:aa:98:c4:45:15:
                    11:d0:b1:f2:0a:43:bd:d8:35:58:ff:dc:a5:6f:eb:
                    9b:01:a3:b7:cd:60:b9:92:d9:50:2d:da:5f:5d:1e:
                    e8:41:de:9f:ed:45:4e:68:77:6f:4b:50:80:e7:bd:
                    51:67:ed:c6:0e:d7:be:f8:39:34:88:89:86:ff:4f:
                    60:52:c9:0f:5b:8d:7b:22:80:18:2f:02:6f:b0:5f:
                    a5:be:f7:6a:24:81:ac:87:59:c1:b6:ae:66:33:26:
                    fe:0e:76:74:25:1d:5a:91:d8:f7:19:7f:9a:8d:ff:
                    73:7b:08:f6:27:cb:12:b9:2a:70:1c:80:17:65:c3:
                    c7:ed:f6:62:af:11:a5:3b:d9:ac:76:3b:14:f7:f9:
                    8b:cc:87:5c:62:bb:4c:d3:78:a5:72:0b:a2:20:9f:
                    49:02:2c:18:73:cc:04:67:64:c8:8f:99:fa:6c:45:
                    3e:67:95:07:28:f8:41:61:d4:75:c1:93:a8:3e:89:
                    94:e0:ed:ab:a9:15:d5:a0:ff:80:c1:2e:00:88:a5:
                    7c:85:b1:9d:db:3f:1d:73:75:d2:a8:23:1c:20:19:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:4D:87:B5:6C:A1:4B:F1:E9:C5:5D:BC:2C:F0:A6:4D:14:48:04
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UbVNh7VsoUvx6cVdvCzwpk0USAQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:b6:9f:56:0d:85:18:ce:65:8d:ac:d3:2e:ed:9d:3a:ec:
         48:de:bd:31:90:f2:0f:fa:4d:7c:5b:8d:a7:d2:11:bc:da:3f:
         fd:34:9e:62:ab:73:45:97:89:6f:12:a5:11:13:3d:5a:f8:ac:
         2d:00:00:c6:19:27:e4:08:9c:ca:f1:8d:c3:51:33:46:51:88:
         89:5f:21:f6:1f:3d:dd:37:6f:bc:4e:3e:96:71:2d:ec:3b:a5:
         fe:6e:67:a6:b0:f4:2a:b5:e2:70:09:f0:2e:7c:c2:4f:34:f5:
         bb:6a:7e:f5:56:19:f8:d2:cf:47:88:fe:cb:36:8c:ae:13:76:
         bf:a4:96:30:9d:89:b0:27:3c:67:a4:9f:19:7f:b9:e2:75:c5:
         a5:5b:cb:38:fb:ac:82:d1:bc:41:41:8e:65:66:c9:a1:6a:85:
         2a:ef:47:a2:43:01:12:ba:4b:d0:20:1a:97:9d:75:3c:0a:2e:
         4a:5f:11:11:82:ec:b8:3b:02:33:66:91:a3:af:29:40:0c:1b:
         b4:a7:87:07:4d:c2:7e:6c:f0:1f:80:aa:6b:01:ab:21:32:16:
         f6:9c:54:a2:f0:66:17:63:5e:53:cd:31:9d:85:b4:62:18:d7:
         98:82:db:7a:f1:33:0e:ff:13:fb:36:29:c0:51:9f:d0:2a:bf:
         9f:b0:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org