Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/braB0hvvYPWgtAMpbrSjAngBN3I.roa
File:                     braB0hvvYPWgtAMpbrSjAngBN3I.roa (raw, json)
Hash identifier:          XuBcxNiagQzbLfNuQ39KwYTQ09aQ4dRNCj+q45mSboU=
Subject key identifier:   6E:B6:81:D2:1B:EF:60:F5:A0:B4:03:29:6E:B4:A3:02:78:01:37:72
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       69
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/braB0hvvYPWgtAMpbrSjAngBN3I.roa
Signing time:             Fri 22 Jul 2022 04:28:55 +0000
ROA not before:           Fri 22 Jul 2022 04:28:55 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:28:55 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=6EB681D21BEF60F5A0B403296EB4A30278013772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:ac:ff:36:64:d2:18:d7:38:be:8b:28:66:
                    08:40:f0:fc:cb:8a:86:a4:3d:1b:80:93:11:ce:14:
                    b2:0f:9f:63:48:4c:37:83:d3:fe:9a:ef:7b:fc:5a:
                    9b:24:a4:d9:5b:04:5f:91:20:73:73:f2:c9:d1:59:
                    61:ca:18:1f:82:05:7f:d4:8c:25:13:4d:4d:42:b4:
                    53:1c:32:83:e8:c8:69:66:c5:d6:cd:ce:1e:dd:9f:
                    7a:08:3b:2a:e2:5d:85:95:a0:f2:9e:b4:c1:3d:c1:
                    14:1d:64:58:40:d0:6f:4c:5f:4b:67:16:00:14:cf:
                    d0:1a:07:75:64:89:25:24:7d:83:21:8a:01:4a:11:
                    d8:15:8c:a3:eb:b9:75:68:3c:2e:74:bd:00:4f:c3:
                    5e:8f:74:34:ec:10:66:55:85:7a:3e:70:98:30:d3:
                    b5:de:47:13:45:ce:03:7b:45:d0:ff:dc:a1:91:6b:
                    29:f0:70:7c:b1:c9:e8:13:15:fe:b1:1a:3c:62:a8:
                    4e:21:49:16:b9:92:a5:21:2d:90:3e:bf:fe:4d:97:
                    3e:93:62:9e:f0:51:fa:79:45:77:28:86:e9:56:95:
                    03:4f:3a:26:71:e3:1b:06:ec:0f:d8:1a:1f:f3:92:
                    3b:34:d8:69:cc:23:ac:44:42:74:23:24:a8:7b:ac:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B6:81:D2:1B:EF:60:F5:A0:B4:03:29:6E:B4:A3:02:78:01:37:72
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/braB0hvvYPWgtAMpbrSjAngBN3I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:0e:a6:8c:ed:f3:4e:60:63:f9:2b:a2:5c:d0:ec:d4:06:
         7b:2c:1b:f1:d1:16:57:eb:b3:42:60:49:1a:80:55:d0:76:35:
         1c:f7:53:5d:c1:70:ad:da:19:e9:a4:ae:c5:a6:e8:30:64:59:
         0f:43:cc:1e:ff:e0:c0:72:de:e7:f1:1b:58:26:8a:98:1e:f5:
         27:59:5a:45:ab:b7:9c:0f:39:d6:dc:29:90:1e:ed:47:ec:73:
         be:cf:a2:11:46:66:eb:bf:c7:56:ea:4e:7a:c5:d5:3d:37:46:
         e3:85:e3:e7:c9:62:09:ca:1e:eb:75:66:f4:c3:77:af:45:8c:
         e6:7a:fd:ac:9d:79:89:32:ae:b5:a3:ab:29:17:c9:f8:d8:63:
         ac:01:23:4c:6a:16:9f:d8:b7:da:85:37:bd:d2:ce:05:23:74:
         0f:36:cb:04:08:42:f6:53:01:79:a0:32:ec:42:d8:79:61:b9:
         1b:5c:1e:60:99:4b:b9:60:12:47:c9:20:83:62:b2:f3:0f:60:
         23:8f:48:85:6f:ef:96:73:f6:57:32:5b:3e:dc:73:da:7d:f8:
         04:86:d5:de:a1:63:f1:45:2b:a7:f3:64:b4:c1:fd:06:dd:56:
         a5:e2:09:e0:82:e0:2e:70:40:92:c0:3a:93:ec:28:02:65:89:
         41:cb:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org