Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/g5tzVBu_wgiScnGT9KBfCX1-zxc.roa
File:                     g5tzVBu_wgiScnGT9KBfCX1-zxc.roa (raw, json)
Hash identifier:          tfgKoEdCImWWAjfaF3/vaQyxyyrHwEcG1rqlrtEqaZk=
Subject key identifier:   83:9B:73:54:1B:BF:C2:08:92:72:71:93:F4:A0:5F:09:7D:7E:CF:17
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       67
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/g5tzVBu_wgiScnGT9KBfCX1-zxc.roa
Signing time:             Fri 22 Jul 2022 04:26:59 +0000
ROA not before:           Fri 22 Jul 2022 04:26:59 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        49.243.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:26:59 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=839B73541BBFC20892727193F4A05F097D7ECF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:c2:84:c4:84:07:fe:6d:d8:74:24:94:c7:
                    dc:9a:f8:c4:d7:6d:40:d5:cd:08:af:1e:aa:fd:01:
                    24:d3:48:64:d8:b0:54:76:fd:eb:6b:a5:d7:81:38:
                    cf:e5:c4:a7:eb:46:73:91:76:8c:16:7e:fd:91:3c:
                    8a:b0:dc:a1:ac:46:73:6c:28:a4:e1:80:19:ac:29:
                    d4:68:c0:a4:33:4f:b5:81:a5:d2:bf:9a:e1:ff:83:
                    91:3c:80:a3:17:84:92:ea:35:fa:0a:80:89:b7:f0:
                    d5:11:58:de:b2:4b:ee:1a:82:07:76:d5:83:31:e9:
                    49:7f:b7:7b:c8:f4:1e:80:e1:b6:63:62:d4:e0:14:
                    e0:f2:96:5b:6c:7f:75:fe:0f:8a:d2:45:2a:cd:27:
                    63:78:cd:47:a7:2b:b4:f9:8e:5c:f6:d0:e7:e8:1e:
                    aa:46:c6:ee:85:ff:32:08:c1:3e:2e:b4:2b:a8:6e:
                    f1:a7:93:fa:32:43:37:16:6f:4b:60:e3:a3:87:c1:
                    1e:60:af:f8:9b:fb:ce:4c:0d:76:25:61:71:a8:f2:
                    c6:36:b1:72:10:8e:9d:89:70:cd:07:97:40:47:66:
                    e2:20:a2:f1:72:d8:d5:0f:75:13:dc:1c:1b:cd:e1:
                    53:42:eb:67:3c:c4:29:45:fc:dd:06:62:61:d8:24:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9B:73:54:1B:BF:C2:08:92:72:71:93:F4:A0:5F:09:7D:7E:CF:17
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/g5tzVBu_wgiScnGT9KBfCX1-zxc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:b1:c1:3b:e4:85:9c:01:ce:f1:5d:5d:3b:9a:c7:cf:e1:
         85:8c:bf:31:04:73:47:c2:d2:05:88:0d:75:a9:54:05:f9:54:
         f0:a9:60:98:f9:94:2c:6c:b0:f6:b0:0b:ab:25:ec:19:0d:7d:
         59:5f:4e:02:85:f4:71:b5:6a:7b:b3:72:d7:91:19:ef:ff:6e:
         96:3d:de:a7:33:c4:44:9b:72:68:b6:7c:a7:1e:59:f6:2f:e7:
         1b:3a:aa:05:b2:de:e9:76:11:1e:de:b3:03:65:27:06:63:d0:
         ae:02:31:65:d3:6b:5e:b4:ff:85:12:09:20:e8:2e:93:f1:ca:
         d5:d6:77:3d:c1:22:08:63:3d:80:18:85:ec:a2:1e:a6:5c:a3:
         0d:14:09:cf:c3:de:84:b9:77:20:98:f4:b5:00:7b:23:8e:db:
         50:8d:71:1c:f5:d2:02:2a:38:fd:aa:af:c0:81:93:df:4c:1a:
         2a:c3:1b:63:ee:8f:3f:55:54:58:b3:6d:a1:34:bf:64:05:f2:
         64:08:60:05:af:75:d0:d2:4f:dc:26:a1:82:e2:c6:a8:79:cd:
         d8:87:52:0d:2e:7d:d5:06:d3:8d:b7:a9:27:d6:2f:0a:dd:10:
         c1:bc:6c:a0:1b:eb:31:11:8e:64:b8:2f:69:bb:e2:5f:31:5f:
         da:76:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org