Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/We_62v6RyZhEACcmiP5aI6Jn8bg.roa
File:                     We_62v6RyZhEACcmiP5aI6Jn8bg.roa (raw, json)
Hash identifier:          G4ta1ZZh35ick3dlDUBf6uIrgYx4Qq7iT9s4CM/hPjA=
Subject key identifier:   59:EF:FA:DA:FE:91:C9:98:44:00:27:26:88:FE:5A:23:A2:67:F1:B8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       2C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/We_62v6RyZhEACcmiP5aI6Jn8bg.roa
Signing time:             Fri 22 Jul 2022 00:18:16 +0000
ROA not before:           Fri 22 Jul 2022 00:18:16 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:18:16 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=59EFFADAFE91C9984400272688FE5A23A267F1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:8e:1f:ed:31:d2:5c:e8:9c:a5:20:32:1c:
                    0c:9c:37:a5:92:b8:05:e5:9d:0f:74:a5:4e:2b:9b:
                    a2:68:2d:5b:40:aa:d5:2d:3f:00:3f:3e:28:d1:f3:
                    56:cb:67:96:07:4c:b4:9b:29:d2:bc:58:ba:2d:9c:
                    42:b5:20:b1:16:96:43:7f:30:08:bd:ea:00:ad:c5:
                    05:ee:b0:73:94:69:6e:23:ce:14:66:71:b8:8f:93:
                    4f:21:61:a9:3d:99:9f:52:f2:8d:ea:e6:23:41:4c:
                    3b:87:60:74:37:54:d6:93:5d:ca:63:f0:c5:31:00:
                    9e:41:e5:a9:5c:bc:83:f4:aa:e9:f2:1c:f3:b5:b0:
                    b4:a1:8e:ce:41:ee:09:ba:79:45:54:5f:2b:d3:93:
                    46:65:c4:60:c8:ef:2b:27:e7:b7:e0:17:9b:bb:84:
                    41:fc:4f:7a:29:b0:1f:86:30:1f:3b:4b:d6:59:66:
                    4f:a3:8d:37:a0:bb:dc:27:f0:91:ed:8a:a9:1b:07:
                    7d:d8:7e:66:dc:24:ec:43:b5:8a:92:21:9d:8f:68:
                    8f:fb:36:5e:5d:75:63:30:da:21:6a:3a:26:61:df:
                    16:f0:3b:23:04:74:65:7a:23:10:60:3c:cf:0e:91:
                    18:fe:72:36:40:6a:53:6c:33:38:6d:d7:6d:c2:48:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:FA:DA:FE:91:C9:98:44:00:27:26:88:FE:5A:23:A2:67:F1:B8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/We_62v6RyZhEACcmiP5aI6Jn8bg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:30:92:7b:8f:6e:62:68:5b:4b:da:11:4f:49:be:fd:94:c5:
         92:1d:c0:ff:c8:d0:29:96:72:ba:e0:4b:b6:96:f7:7b:68:94:
         52:69:90:d2:9c:e4:4e:ab:b0:92:5f:90:7f:87:37:87:52:5e:
         93:e1:fb:13:b3:86:d9:a9:de:82:3d:66:38:05:2b:cf:d2:1e:
         25:cb:b0:e8:14:82:f7:e1:a6:62:72:43:2b:22:22:d9:2d:16:
         e2:74:17:d4:29:34:6d:7b:35:54:07:a0:3e:77:68:7b:2e:d7:
         c2:da:4e:5a:5b:1e:a8:a2:ef:38:82:d2:e6:49:d8:15:a7:37:
         19:28:ee:8b:69:bf:5e:9d:75:2e:3f:4a:5f:8f:0c:7d:22:7d:
         a7:ec:3c:80:96:49:07:0d:d9:6a:6f:52:15:8c:6a:42:83:7a:
         90:af:ff:87:2b:e6:7a:68:ef:04:16:bc:e3:6a:41:e4:b3:db:
         26:a3:e3:e2:74:8a:b7:ad:76:15:c3:56:4a:df:ed:57:b4:a5:
         89:fe:a7:11:68:06:f9:91:3e:83:08:19:e4:51:6f:a1:cf:0f:
         35:74:eb:f6:30:3c:be:76:21:d8:1a:d1:c7:82:3e:3f:a3:94:
         87:7a:f5:ed:93:11:26:2e:c0:bc:8f:6d:dd:b2:3b:b3:95:f5:
         5f:39:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org