Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/YYZF5fofH-hP9rJ4TKteC6u3DLg.roa
File:                     YYZF5fofH-hP9rJ4TKteC6u3DLg.roa (raw, json)
Hash identifier:          Iupx0lNqj614GtjcTSAWMMWo9Z5rHZeJ5wUSvWNBKZk=
Subject key identifier:   61:86:45:E5:FA:1F:1F:E8:4F:F6:B2:78:4C:AB:5E:0B:AB:B7:0C:B8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       44
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YYZF5fofH-hP9rJ4TKteC6u3DLg.roa
Signing time:             Fri 22 Jul 2022 01:42:40 +0000
ROA not before:           Fri 22 Jul 2022 01:42:40 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.215.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:42:40 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=618645E5FA1F1FE84FF6B2784CAB5E0BABB70CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:b2:69:58:86:ec:e6:e5:01:e9:40:f1:fe:
                    22:42:c8:b6:cb:60:87:a0:f7:cd:1d:d3:e2:9c:1e:
                    4d:1d:83:8c:03:f6:02:8b:d6:a3:45:23:1b:d7:25:
                    7f:42:bb:e6:98:2e:fe:a9:8f:f7:44:00:26:e3:2d:
                    a2:a9:a7:95:49:c3:db:0b:cc:79:84:ea:72:84:aa:
                    d7:b6:ef:ef:27:43:5d:55:47:3b:59:5b:a6:53:48:
                    f7:b0:a0:9b:b2:25:af:71:73:8f:58:4a:45:69:0f:
                    cf:83:c3:58:9c:74:f0:c6:99:94:9a:00:53:d2:39:
                    75:48:47:d5:69:cd:23:4c:38:1c:4e:b0:2c:8c:d5:
                    ad:d4:21:67:1a:86:a0:3f:dc:09:f8:49:2b:e1:e4:
                    56:f3:b7:77:eb:fd:b6:5f:4d:77:8a:e9:4a:5f:56:
                    fb:0c:12:d0:7b:7c:b9:dc:64:7f:f5:c0:53:54:60:
                    3f:d3:99:8e:e5:2e:21:b3:9f:99:dc:c2:8e:15:5c:
                    66:a1:59:12:07:84:74:9e:df:21:20:5e:80:39:9b:
                    ae:6c:6b:cf:33:fe:17:73:1c:4c:7b:a9:1b:e1:5f:
                    4e:d0:34:7b:ce:fa:ae:be:89:04:b1:3b:3c:01:a3:
                    5c:8e:6c:e6:f1:b1:2a:93:7e:b4:59:a9:06:3c:1b:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:45:E5:FA:1F:1F:E8:4F:F6:B2:78:4C:AB:5E:0B:AB:B7:0C:B8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/YYZF5fofH-hP9rJ4TKteC6u3DLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:a2:11:55:09:9f:fc:64:36:fe:8d:15:ae:c7:4e:7e:5d:
         1b:3f:a3:15:88:33:83:95:58:5e:cb:a8:a1:7e:01:bf:d3:cd:
         b0:1d:4f:7c:a7:d6:41:6b:61:e0:31:5d:f1:f9:45:17:2b:3c:
         ef:c6:c4:cc:4c:13:35:9e:fd:ab:34:8e:71:7a:fb:a4:dc:9b:
         36:85:29:e1:5a:dd:77:26:3f:d8:26:f0:73:04:fe:2c:fe:30:
         f7:bb:44:b2:d8:ba:98:fe:1a:28:84:80:4c:dc:51:d4:a9:65:
         d7:54:1c:7b:4e:41:73:5d:54:36:3d:c4:69:37:a1:38:2d:90:
         36:a1:38:21:d4:9c:e3:ca:e1:46:a0:77:cf:11:4c:ed:fb:f6:
         4c:8b:c3:28:c8:8d:c9:df:23:6e:40:3c:a8:ed:98:5a:56:ae:
         af:4e:38:6f:34:7b:02:bc:d0:6f:24:3c:51:b6:5c:e0:70:81:
         7c:12:9b:b4:b6:b5:e4:68:21:d9:ee:32:17:30:57:b1:50:92:
         81:67:39:42:e4:60:92:e6:99:38:a1:5b:d3:64:c8:b4:c7:64:
         84:df:16:0f:74:0a:cf:92:3c:40:1f:79:21:fb:bd:bd:f4:ec:
         23:6c:0e:5e:3e:81:f3:76:2f:a2:35:5a:c0:c6:dc:2f:b0:c8:
         8a:c9:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org