Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VEPBxK3CjPk4O5m8-4cl_uuHADE.roa
File:                     VEPBxK3CjPk4O5m8-4cl_uuHADE.roa (raw, json)
Hash identifier:          4IVB6lej53+gwESRdQZEDcOQ6cLmLpO0QHSu1RqvsFo=
Subject key identifier:   54:43:C1:C4:AD:C2:8C:F9:38:3B:99:BC:FB:87:25:FE:EB:87:00:31
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       4D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VEPBxK3CjPk4O5m8-4cl_uuHADE.roa
Signing time:             Fri 22 Jul 2022 01:58:22 +0000
ROA not before:           Fri 22 Jul 2022 01:58:22 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:58:22 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=5443C1C4ADC28CF9383B99BCFB8725FEEB870031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:03:d3:39:01:ff:98:2c:36:2b:4f:94:1a:
                    90:a4:97:9c:58:2b:5c:0d:a8:6d:23:54:1d:da:69:
                    31:e1:7d:14:e9:92:79:98:77:2c:35:d5:cf:55:b6:
                    ba:4f:01:98:2e:bf:56:b6:ee:70:ac:05:4e:c0:c9:
                    09:d3:02:e5:24:d7:ac:c5:90:6f:e0:ea:3e:9f:fe:
                    53:8a:60:ad:40:6b:d4:64:ac:29:91:de:ce:20:c7:
                    87:37:cf:f7:e4:6c:b6:9e:64:23:dd:bf:65:6b:c1:
                    ac:e5:22:24:19:38:4e:50:43:06:5a:e2:49:4d:6c:
                    1f:c6:ee:e8:eb:13:40:02:83:e6:5a:ab:54:87:05:
                    c8:7e:2d:82:81:44:46:51:dc:65:fe:e0:04:66:4b:
                    8c:52:5a:b0:72:84:6a:80:9f:36:e7:8f:2a:12:fd:
                    d1:d2:8e:b9:09:e6:3e:15:2e:dd:89:85:f3:af:82:
                    8d:7b:38:a7:88:b3:54:cf:cd:f4:fb:e0:81:54:f4:
                    25:e6:04:38:05:e5:b6:ec:39:35:58:5f:f5:f4:7c:
                    a7:80:e2:8b:f3:13:eb:27:62:2f:e8:97:1c:bf:ae:
                    b0:42:65:81:c1:26:fe:9d:a3:ae:4d:be:d1:88:04:
                    8a:3d:02:53:18:bb:b0:3f:f3:e6:4d:ec:02:ed:64:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:43:C1:C4:AD:C2:8C:F9:38:3B:99:BC:FB:87:25:FE:EB:87:00:31
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VEPBxK3CjPk4O5m8-4cl_uuHADE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:70:06:94:29:90:a3:49:04:dd:3a:53:92:d9:1e:c0:fc:c1:
         18:ff:a5:9a:2a:21:d7:cd:1a:27:33:51:01:6e:6b:33:8c:ca:
         65:87:f8:0d:87:a6:14:b8:7d:79:ed:98:7f:de:c5:03:33:da:
         66:86:b3:1b:e7:f5:6e:e3:e3:c0:4a:03:11:20:67:6b:0a:09:
         24:6c:8c:48:20:f3:9d:89:10:77:d8:3d:4c:eb:56:88:f6:5e:
         b5:8b:ea:d2:60:a6:aa:22:ed:41:7d:ca:f3:eb:df:83:ea:33:
         e3:55:76:b0:8d:74:9b:f3:f2:e7:92:d2:2d:11:ea:84:22:17:
         01:39:15:58:24:11:b9:ba:04:23:70:be:a9:7f:fe:e4:96:4a:
         38:92:a5:d0:7a:23:3d:10:5a:fc:e5:f9:77:07:35:e8:f9:cf:
         b2:58:40:9a:25:e3:f6:6a:8d:c2:0d:6a:67:7d:ea:84:e5:42:
         b8:2d:3a:a6:22:e1:15:37:69:92:1e:19:e5:69:72:af:fb:22:
         f5:a4:b0:e9:40:75:47:b3:2c:ad:d1:db:41:6b:e7:f2:41:e2:
         0c:91:4f:7c:1b:e0:30:2e:3e:70:00:f4:03:ea:89:74:2d:93:
         97:4b:52:34:b3:95:56:f7:2d:4e:54:c3:da:da:42:10:5c:d4:
         df:5c:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org