Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jLSxY1ujaY06TOlz9D-4P58vC3I.roa
File:                     jLSxY1ujaY06TOlz9D-4P58vC3I.roa (raw, json)
Hash identifier:          5afLBNiXIQd3ZfcE8cX+80shIDg1YCwUmToF4YB75EA=
Subject key identifier:   8C:B4:B1:63:5B:A3:69:8D:3A:4C:E9:73:F4:3F:B8:3F:9F:2F:0B:72
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       97
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jLSxY1ujaY06TOlz9D-4P58vC3I.roa
Signing time:             Fri 22 Jul 2022 06:33:39 +0000
ROA not before:           Fri 22 Jul 2022 06:33:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.234.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:33:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8CB4B1635BA3698D3A4CE973F43FB83F9F2F0B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:7f:70:aa:27:9f:0c:ca:a7:bb:de:03:fe:
                    15:67:45:14:2a:1a:9f:9e:05:c8:12:f0:56:d5:ec:
                    a5:07:2d:cd:a0:ca:de:2a:6a:eb:0b:77:d7:b5:8e:
                    9e:1d:98:31:73:e3:dc:c9:91:f1:f5:03:28:c1:75:
                    a1:e0:ca:2a:2f:df:c4:7a:ce:84:22:bd:a6:41:7f:
                    c4:ae:de:ef:53:08:a3:d4:11:f4:b9:e4:dd:14:41:
                    c2:54:7c:18:ef:3d:38:d8:38:5a:9e:f3:d6:ce:e7:
                    cc:21:9b:66:a2:72:d7:7c:05:cb:93:83:56:11:04:
                    5a:ef:86:c2:b6:0a:51:2e:4b:e2:a4:51:01:84:df:
                    0a:8b:d5:86:65:6e:7a:b5:c2:36:79:7f:d5:b1:aa:
                    73:18:13:0e:45:20:b7:9b:dc:8a:99:7c:2a:c9:da:
                    ee:ec:22:33:53:bd:bb:28:93:dd:58:c5:4f:a5:7c:
                    62:92:f9:8c:b2:f3:fa:88:2e:07:d1:54:d8:b5:17:
                    a3:0d:4d:ff:f4:a1:6f:8f:06:09:29:25:75:6c:06:
                    de:d3:91:af:c4:d5:68:e9:8d:81:b9:aa:85:ca:55:
                    3e:24:63:9a:ae:26:03:07:23:8f:b2:2f:b2:bf:b1:
                    f6:06:93:fd:72:47:81:f0:d5:d0:92:d5:83:9a:18:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:B1:63:5B:A3:69:8D:3A:4C:E9:73:F4:3F:B8:3F:9F:2F:0B:72
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jLSxY1ujaY06TOlz9D-4P58vC3I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:10:44:52:83:49:8f:6c:be:7a:29:4a:29:92:39:10:1e:c5:
         73:b3:b2:ea:d6:9b:3a:33:43:d9:14:ea:7e:d9:ad:5b:f5:03:
         d2:95:58:36:d5:5e:94:35:dc:33:2c:28:fa:94:9c:26:a7:22:
         ed:c8:b7:9e:0d:10:97:4a:3d:ee:d0:16:67:39:58:e6:b3:a0:
         8f:a2:28:0a:34:33:7c:76:77:b8:ec:e5:b4:28:6b:ba:ac:ca:
         bd:87:68:90:0f:14:07:95:8e:5b:e1:cd:99:5e:fe:8a:b4:87:
         1f:26:f5:40:55:ec:10:01:a8:33:a6:3a:18:b0:36:d3:d8:4d:
         fd:20:e6:28:96:c4:75:27:e4:01:7c:03:05:93:a7:d8:0a:62:
         f1:aa:db:a0:e7:db:73:05:05:ac:65:a0:ae:f9:3d:26:42:da:
         02:88:49:5d:ab:82:33:5b:e0:be:54:10:85:d5:3b:c6:b3:87:
         43:ec:0a:22:09:9e:db:3d:dc:11:9b:49:5e:69:41:54:12:2d:
         46:19:05:e3:d4:6b:5e:24:7b:df:e0:7a:e0:e7:3f:d8:35:79:
         db:f2:02:d5:e4:6e:42:59:fb:a8:a2:a2:33:fd:f0:3d:5f:01:
         c6:19:d2:77:fd:e6:72:39:28:9e:6f:47:34:d6:69:87:6a:b1:
         c0:7f:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org