Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/m3yBkMwYDyPH8gZFkwQa5pQLBZ4.roa
File:                     m3yBkMwYDyPH8gZFkwQa5pQLBZ4.roa (raw, json)
Hash identifier:          /H3xtnyzzn3dQeX4DHBWQN84vBW2FICj3e3DsLiiPtA=
Subject key identifier:   9B:7C:81:90:CC:18:0F:23:C7:F2:06:45:93:04:1A:E6:94:0B:05:9E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       8D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/m3yBkMwYDyPH8gZFkwQa5pQLBZ4.roa
Signing time:             Fri 22 Jul 2022 06:23:41 +0000
ROA not before:           Fri 22 Jul 2022 06:23:41 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        110.3.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:23:41 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=9B7C8190CC180F23C7F2064593041AE6940B059E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:09:22:4b:6d:84:a2:e1:5f:f6:4f:17:9b:
                    d6:8f:af:35:24:f4:f3:56:a9:61:3c:c1:02:5e:f1:
                    71:14:55:d6:01:eb:7b:6d:bd:71:e3:4c:0c:43:49:
                    35:9a:f4:4e:54:ab:a4:0c:d5:04:90:4d:93:4c:85:
                    fa:e5:a8:3d:57:13:11:9c:8b:72:51:e4:cf:21:f8:
                    0e:f2:fa:5c:66:5f:04:37:71:77:67:0d:31:8d:bf:
                    e5:ad:fc:78:b7:a6:7b:7a:5f:8a:b7:34:c0:9c:32:
                    26:24:d8:fe:8b:52:85:e9:de:04:b5:58:ea:8d:08:
                    ac:07:7e:8b:88:6b:37:a4:b9:8d:d8:53:db:fa:bf:
                    72:d7:33:21:1c:52:3d:aa:55:37:10:3f:91:e1:51:
                    0a:c9:7e:5a:f9:ed:49:dc:af:06:28:89:2b:2b:3d:
                    5c:66:e2:c3:c7:76:a8:ae:a0:51:a8:3c:52:83:7b:
                    59:dd:a3:7c:d0:01:3b:24:5c:36:36:4a:af:ea:c0:
                    03:36:c6:9c:98:07:8a:0a:ad:31:2d:98:9c:ac:2d:
                    dc:2a:b7:29:9b:e4:47:3b:d6:3d:2c:ab:f3:43:fb:
                    b7:db:98:1e:28:64:99:3b:81:f5:60:f1:c2:d7:08:
                    e7:54:f3:52:86:42:09:67:54:7b:49:01:fe:79:1b:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:81:90:CC:18:0F:23:C7:F2:06:45:93:04:1A:E6:94:0B:05:9E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/m3yBkMwYDyPH8gZFkwQa5pQLBZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:f6:88:3f:0c:89:b8:87:e3:aa:01:5b:7d:d0:6b:a9:5a:
         4c:28:49:84:58:91:05:e6:c1:c2:08:75:79:ed:9e:71:e7:a3:
         44:89:9a:42:74:87:d9:43:be:8d:ce:76:e8:0e:b5:80:76:cc:
         93:41:81:63:6f:b6:42:28:45:69:5e:c5:24:77:f2:50:cc:b9:
         f5:ed:91:68:25:07:cd:95:d5:26:5d:a4:2d:74:d3:f3:7c:c2:
         9a:7e:a8:52:51:ca:17:f4:ef:36:0e:9a:c7:df:a4:36:17:29:
         66:37:07:b6:ec:8a:e0:e8:49:91:b6:c8:1b:a6:d1:63:55:7d:
         b3:e7:22:2b:0e:52:b6:a3:b6:1b:6c:ba:c2:46:84:7d:62:82:
         24:2e:00:e9:58:69:91:16:4f:b0:cc:eb:fb:03:74:55:7e:a6:
         a3:8e:ae:d5:10:a2:59:db:02:30:b2:00:31:6a:8a:89:e5:f8:
         a9:bb:00:35:05:43:78:2c:40:c4:a8:15:3e:95:48:6c:c2:08:
         a7:c6:2a:e4:50:58:9e:31:00:7d:ee:a9:aa:98:3b:74:4b:3b:
         ec:df:3a:c3:d8:f9:3a:62:8b:72:dd:4a:4c:f5:be:ba:40:e3:
         b0:90:45:21:3a:82:36:2c:92:d0:d1:e0:7b:4e:8c:02:16:1e:
         7c:14:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org