Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/j4lcSYsKnMTeNeAjCeSzygU9uWM.roa
File:                     j4lcSYsKnMTeNeAjCeSzygU9uWM.roa (raw, json)
Hash identifier:          iIKTADJoquapkrCS6ZaOY0Cuxf73UPgdVkWHkSk7XJM=
Subject key identifier:   8F:89:5C:49:8B:0A:9C:C4:DE:35:E0:23:09:E4:B3:CA:05:3D:B9:63
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j4lcSYsKnMTeNeAjCeSzygU9uWM.roa
Signing time:             Mon 25 Jul 2022 00:09:39 +0000
ROA not before:           Mon 25 Jul 2022 00:09:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        202.75.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 25 00:09:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8F895C498B0A9CC4DE35E02309E4B3CA053DB963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:6e:c5:3a:c3:0e:b1:20:dd:ed:3c:9b:be:
                    8e:84:42:d9:fa:53:58:a9:f4:dd:fb:70:88:8f:d7:
                    52:f8:8a:62:af:4c:3e:f3:b1:bc:c4:96:e4:b0:59:
                    5e:5f:f9:45:72:e6:77:98:5f:27:72:9b:e5:01:40:
                    f0:53:2f:12:2f:9c:1e:9e:a4:3a:32:e6:13:d7:ee:
                    a9:22:19:7d:22:04:f7:e1:e3:f6:ae:9f:b2:ae:4c:
                    98:34:6d:6f:f2:66:36:0a:89:fc:ef:4e:6c:f1:6b:
                    ff:90:4f:2d:47:82:57:c8:c5:2d:2e:b5:55:a0:0b:
                    16:81:d4:96:bb:6a:e8:b5:b8:2c:ed:5a:c1:76:7d:
                    d0:77:94:78:fc:67:b7:3f:52:a8:a2:1f:09:da:ee:
                    65:1e:8f:a2:ff:1e:dc:bd:4e:0d:c6:dc:84:f1:47:
                    da:b1:53:19:50:48:c9:09:76:08:df:64:df:3d:dc:
                    8a:79:a8:d0:42:ce:70:ce:4c:a8:c2:e7:0a:41:44:
                    c4:f4:e0:ca:62:d3:90:21:0a:37:38:76:73:97:5f:
                    d1:0d:63:6e:a0:ff:31:6e:35:29:78:80:c8:39:89:
                    7e:a4:28:7f:eb:cc:e6:3f:0d:ff:ad:df:31:9a:70:
                    40:13:9f:23:5a:be:8d:9a:bb:09:6f:44:ed:b1:5a:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:89:5C:49:8B:0A:9C:C4:DE:35:E0:23:09:E4:B3:CA:05:3D:B9:63
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j4lcSYsKnMTeNeAjCeSzygU9uWM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:14:fa:c3:6c:15:10:5f:c0:55:71:f8:01:fc:99:21:32:
         17:76:5a:06:19:9d:28:8f:73:db:e5:e2:72:ec:1b:e2:88:fa:
         50:05:9a:77:ee:1f:f2:f2:e1:f1:b1:f0:fb:08:cf:be:bc:65:
         6c:30:84:a5:d7:1b:ee:a6:8a:73:46:e3:2a:b3:f2:7f:a5:98:
         f1:84:f4:ee:5b:62:d7:00:c3:55:ed:9b:59:9f:9a:b4:f9:90:
         99:96:6e:33:e8:74:fa:15:12:3e:52:10:46:7b:9c:52:46:df:
         65:70:3a:b8:ab:d7:28:47:99:24:97:a9:70:69:8e:8b:f4:9c:
         95:3c:07:19:d8:e0:b7:b4:3e:b3:79:09:9a:e2:b1:6c:58:e8:
         cc:c8:b2:98:3b:4b:22:c9:77:12:a0:4b:ba:01:ea:71:0d:ee:
         9f:ab:90:15:c3:7d:ca:43:66:20:62:d8:26:d7:77:4b:d3:b5:
         e4:4a:b2:fa:2f:54:5e:37:d6:52:ee:db:34:97:66:d9:d5:0b:
         94:62:2d:45:f3:e4:88:04:38:04:a4:4a:fc:94:c5:9d:78:4e:
         1e:39:27:74:b3:6e:7e:1e:9d:14:a1:df:c6:b3:9b:4c:d6:25:
         82:89:f9:99:e0:c5:24:59:0a:0c:64:28:97:14:33:6f:b7:21:
         b1:6f:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org