Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lYBD5PkqKvQIfG0mxYoqp0hLEJA.roa
File:                     lYBD5PkqKvQIfG0mxYoqp0hLEJA.roa (raw, json)
Hash identifier:          MjXrT1eBr+ZZVqNXNR4iW83egUmqjb5lag5LXUErO1s=
Subject key identifier:   95:80:43:E4:F9:2A:2A:F4:08:7C:6D:26:C5:8A:2A:A7:48:4B:10:90
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       50
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lYBD5PkqKvQIfG0mxYoqp0hLEJA.roa
Signing time:             Fri 22 Jul 2022 02:04:16 +0000
ROA not before:           Fri 22 Jul 2022 02:04:16 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.157.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:04:16 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=958043E4F92A2AF4087C6D26C58A2AA7484B1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:78:21:e8:fa:90:49:8b:72:d7:c1:34:5c:
                    93:c0:11:b4:85:c1:5d:2d:66:a3:30:b8:65:a4:86:
                    aa:2b:d2:d1:22:ea:a3:04:ea:6e:ca:a9:68:c4:15:
                    a7:b5:19:c9:09:5f:b1:b0:65:6c:4c:ae:2e:bc:6e:
                    d2:97:45:32:7d:7d:41:21:3b:d8:17:27:05:c9:b4:
                    c6:88:0e:87:f9:b7:c2:ab:00:83:c8:62:2c:c2:a8:
                    5a:42:b9:eb:df:d6:e9:de:4c:45:4d:f6:53:bb:63:
                    a0:86:f4:55:84:8c:94:a9:79:e5:b4:58:3b:a4:61:
                    67:06:e2:0c:81:7e:62:e8:ae:7f:c6:70:9a:91:4d:
                    b1:57:ff:6c:62:5f:c8:24:1b:92:43:b0:84:07:31:
                    1d:7a:49:d3:e0:10:1e:16:02:3f:b4:7e:cf:ea:03:
                    be:35:66:65:8b:1a:33:e8:63:2b:23:0c:ec:46:66:
                    c8:35:07:0c:7f:eb:07:f1:a8:58:1a:50:b2:7f:ad:
                    03:58:e3:07:68:30:b2:af:42:6b:bb:20:68:7c:e9:
                    03:d4:2a:92:59:99:58:7e:d1:ee:8d:33:d6:1b:e8:
                    e8:6d:d8:7a:e5:7c:2b:3b:ac:b2:45:f7:49:42:21:
                    7d:0c:bd:2d:46:df:c2:51:ac:4a:c8:22:6d:ac:dd:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:80:43:E4:F9:2A:2A:F4:08:7C:6D:26:C5:8A:2A:A7:48:4B:10:90
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lYBD5PkqKvQIfG0mxYoqp0hLEJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:4a:c8:9c:14:74:b1:b4:fc:cc:0c:3b:da:b6:0c:bf:c7:
         30:87:11:ba:db:ce:8e:0c:66:55:bc:ff:93:0b:f8:6a:32:08:
         3e:64:4c:aa:06:7e:8c:e6:1c:c1:99:6a:fb:83:eb:ee:58:ee:
         0a:94:5e:bd:84:1a:ac:7e:48:1c:dc:91:b4:98:f8:6d:7e:cb:
         05:86:91:f8:46:a7:17:c8:4d:47:51:85:20:4e:c3:94:06:e6:
         a4:a7:fb:47:4b:9e:4d:42:d3:0a:77:25:6b:0a:0d:87:4a:db:
         39:36:43:57:75:d8:03:cf:cd:5b:1b:6b:3c:d8:fa:85:42:ad:
         f1:2b:09:33:0d:03:a8:3a:57:1e:45:f4:0a:ee:ac:87:f2:76:
         b2:c2:30:ae:eb:64:74:b1:18:fd:0e:5e:d2:46:b7:cb:7e:ef:
         9b:00:5e:1e:b3:ba:bf:d1:f0:f6:da:f6:af:ed:c6:a8:4e:2d:
         55:3f:4e:5d:d2:91:75:ac:7a:69:64:84:3a:c8:fb:cc:37:7c:
         34:b3:67:b5:69:58:d3:d0:c9:86:7a:ae:6f:39:d9:9d:b0:36:
         e4:ed:67:0d:b6:32:7d:07:cf:4a:8c:1b:02:2c:7e:7c:91:d0:
         d0:0a:42:28:55:3d:ef:d9:d7:ba:00:23:83:ea:61:c3:e1:ef:
         bf:aa:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org