Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XIZnhxg_uKb32_i_CTuFa-chidE.roa
File:                     XIZnhxg_uKb32_i_CTuFa-chidE.roa (raw, json)
Hash identifier:          niRQ3xUVrYZxUIn7jApm+e8TOU06Y6S32bwriAWZ8XQ=
Subject key identifier:   5C:86:67:87:18:3F:B8:A6:F7:DB:F8:BF:09:3B:85:6B:E7:21:89:D1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       AB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XIZnhxg_uKb32_i_CTuFa-chidE.roa
Signing time:             Fri 22 Jul 2022 08:26:21 +0000
ROA not before:           Fri 22 Jul 2022 08:26:21 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.87.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:26:21 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=5C866787183FB8A6F7DBF8BF093B856BE72189D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6e:1d:42:bb:1d:a7:f6:ba:71:f4:70:35:48:
                    d6:71:99:8e:37:63:ca:80:7a:41:33:03:d6:5f:6c:
                    ed:c5:e1:92:6c:9a:ee:3c:11:f5:3e:22:7b:ca:3b:
                    42:ee:65:ad:82:16:08:45:30:42:39:f7:27:29:b3:
                    ae:0d:07:fd:46:31:b4:93:42:37:34:5b:1c:0d:a3:
                    96:6d:cc:a2:b9:53:0b:60:5b:e2:43:fb:91:a7:f9:
                    34:67:28:b9:1d:4f:da:5e:e0:40:1b:59:ab:6d:b8:
                    37:74:fa:b6:91:e4:a4:2a:03:b9:c9:7e:8b:63:50:
                    39:52:59:97:8b:fd:03:51:35:7e:89:06:67:24:f9:
                    82:0d:ab:15:ef:98:2c:7d:f2:7e:4d:22:cd:76:98:
                    9e:24:28:ec:22:b1:da:32:52:8c:e0:a4:9c:f3:2e:
                    6f:3b:f2:bb:65:b6:62:40:4f:2d:62:9a:b5:05:5c:
                    60:af:e2:b5:f6:38:6d:9a:ea:ee:f8:74:ed:8b:cc:
                    c0:37:c5:e6:6e:27:c3:0d:6e:45:24:30:d9:eb:99:
                    5c:f1:a4:e3:e0:6a:0b:82:d5:a9:75:2d:b5:60:8f:
                    45:33:99:36:18:a2:e5:7e:ee:23:97:87:8b:ad:65:
                    41:1c:45:29:c2:ab:57:8c:a6:9a:cd:50:1e:67:9d:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:86:67:87:18:3F:B8:A6:F7:DB:F8:BF:09:3B:85:6B:E7:21:89:D1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XIZnhxg_uKb32_i_CTuFa-chidE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:91:cb:8f:99:01:ae:55:7c:7e:3a:6a:77:f2:c0:c2:fa:7c:
         6e:aa:a9:a5:b8:17:2f:42:8f:93:32:c8:07:1b:ad:5b:ae:de:
         5d:46:79:fd:04:06:7c:e9:7c:aa:1d:93:e8:42:9e:91:d3:aa:
         d4:6e:f2:01:94:e5:d0:16:fc:cd:23:90:83:15:c8:89:bf:cf:
         85:fa:8b:0e:c7:df:c4:9b:d4:bf:8b:80:28:70:c5:e7:58:02:
         7b:c0:fa:3a:69:f4:cb:a6:a9:0a:ca:9d:65:44:ed:ec:8e:0c:
         54:7d:4f:c9:e1:eb:9d:1a:75:33:11:fc:a8:fd:80:a5:6b:bd:
         2d:f4:29:2b:05:4b:82:93:ca:d3:77:c0:fa:cf:c0:31:8f:89:
         68:5a:35:30:08:77:2d:c8:07:f3:d7:8c:95:19:f6:8c:ab:2c:
         b0:b5:77:51:bc:f6:f9:ec:1e:76:06:79:96:aa:78:1b:cf:b5:
         95:dd:b8:31:2c:0b:d3:cb:4e:6d:97:4d:48:1d:0e:dd:d9:06:
         2d:0e:0f:df:85:d2:49:ba:c3:5f:f1:b2:f5:d4:b3:15:e1:f2:
         0b:12:cb:43:78:37:b5:9e:3a:46:58:3e:23:f7:c9:69:d3:c9:
         66:67:65:24:6d:5e:d5:78:d2:25:73:39:46:de:8f:1f:4c:ee:
         1a:6d:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org