Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XFG0vnDRP50wDEt3OsH32emaqH0.roa
File:                     XFG0vnDRP50wDEt3OsH32emaqH0.roa (raw, json)
Hash identifier:          EgHRNCdBEptkUcymh1zsB39Ac6QWEQ05x9SkcXyDqMo=
Subject key identifier:   5C:51:B4:BE:70:D1:3F:9D:30:0C:4B:77:3A:C1:F7:D9:E9:9A:A8:7D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       F5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XFG0vnDRP50wDEt3OsH32emaqH0.roa
Signing time:             Wed 24 Aug 2022 07:38:11 +0000
ROA not before:           Wed 24 Aug 2022 07:38:11 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     10013
IP address blocks:        124.255.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug 24 07:38:11 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=5C51B4BE70D13F9D300C4B773AC1F7D9E99AA87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:95:73:24:ee:e5:e9:fa:33:93:fd:b9:40:
                    7f:1a:9d:3e:a1:34:d8:c5:94:39:c1:f1:d9:3d:4c:
                    e1:2e:33:f8:02:58:ff:61:f0:82:2f:71:90:cc:8d:
                    30:ce:2d:fc:53:c0:57:82:0a:a5:d4:8a:16:84:ca:
                    8a:77:40:07:a4:bc:f3:d3:03:3a:a2:64:3c:00:c4:
                    d3:0e:94:0d:4b:30:1c:bc:2d:f3:4a:17:e7:3a:a9:
                    e5:3c:b4:6f:7b:00:97:a4:2f:e9:32:23:a5:bb:82:
                    14:6b:80:d6:69:ae:47:a8:b2:93:a1:b5:dd:ab:20:
                    e4:0d:ec:c3:a7:db:b7:13:d0:c3:5d:1a:9b:10:3d:
                    71:88:2d:80:de:87:7d:b0:ef:fa:b4:98:4c:ce:53:
                    51:4a:58:f2:8e:40:1a:6b:cc:b1:3d:99:7a:cb:1b:
                    11:61:72:0f:39:8f:a3:60:5f:b7:b8:9f:c1:c4:ff:
                    72:0c:e3:05:98:02:00:bf:e7:15:a5:70:e5:bd:3b:
                    e1:75:fa:a2:d5:e5:38:7a:4c:44:ba:f2:92:98:3a:
                    23:ec:64:66:1c:24:fd:42:26:9d:3a:3b:6e:ef:fe:
                    0c:b1:fe:1e:3f:76:7e:69:4f:74:a5:00:17:3a:d5:
                    28:71:f3:72:b4:62:3d:22:b9:e9:38:f3:d6:a0:75:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:51:B4:BE:70:D1:3F:9D:30:0C:4B:77:3A:C1:F7:D9:E9:9A:A8:7D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XFG0vnDRP50wDEt3OsH32emaqH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:02:05:21:a6:a0:09:87:ac:74:7a:e9:a9:e0:e0:89:25:
         05:d6:0f:27:fc:78:46:7b:c6:03:a3:a5:eb:31:60:fb:86:9d:
         16:9b:69:65:2c:84:ab:a0:74:97:3b:ce:ac:20:71:df:b6:d6:
         10:b2:1b:ae:e0:1c:e2:f6:31:d8:8f:92:9b:05:f6:66:9f:3f:
         e8:1f:53:d3:4b:a0:95:10:de:ef:3f:8f:23:9a:d7:af:37:83:
         1a:a4:42:9c:0e:d0:5d:fa:dc:26:4e:9b:31:7d:b6:ae:a3:c4:
         7b:9d:9c:8e:20:f2:bc:5b:17:0a:8b:60:9d:02:2d:83:e8:2f:
         78:02:94:c5:6e:5f:4a:34:77:d7:f6:79:aa:16:66:98:a5:81:
         17:2f:32:21:f8:6d:82:a0:c4:af:27:3a:57:98:a3:7f:33:3e:
         8a:7d:2a:3f:b9:e4:0f:c2:fc:6d:cd:9c:e1:e6:7d:d5:43:dd:
         b9:01:31:a2:c2:6e:83:b3:25:f0:a1:c4:0e:77:28:e2:87:49:
         c9:bb:c3:1b:14:95:51:b4:da:72:9d:20:76:da:01:e6:96:6d:
         3d:3c:e5:7d:97:d7:c6:e6:c3:40:6b:c8:f2:2e:2b:1b:81:95:
         dd:ab:5f:e9:1f:35:6d:a2:d8:d2:44:94:e2:89:2d:ed:f0:c2:
         4e:90:37:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org