Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/n8WTwbE0NboiYwFMMNBPCQjM9FQ.roa
File:                     n8WTwbE0NboiYwFMMNBPCQjM9FQ.roa (raw, json)
Hash identifier:          TLpPnlhS/PQzSwlH5TiXLq9/DPbPGdoPzyLiycSXO5U=
Subject key identifier:   9F:C5:93:C1:B1:34:35:BA:22:63:01:4C:30:D0:4F:09:08:CC:F4:54
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       43
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/n8WTwbE0NboiYwFMMNBPCQjM9FQ.roa
Signing time:             Fri 22 Jul 2022 01:36:48 +0000
ROA not before:           Fri 22 Jul 2022 01:36:48 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:36:48 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=9FC593C1B13435BA2263014C30D04F0908CCF454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:74:48:96:8d:41:4f:a0:a3:a9:99:eb:ce:
                    74:63:0c:ff:0b:7c:76:22:92:a9:47:79:c4:4e:1b:
                    c1:00:86:9b:d4:11:db:70:8d:22:45:ad:ea:f8:d0:
                    a3:cc:be:67:f1:47:05:93:83:0b:0b:a6:c6:c2:19:
                    b4:0f:8f:45:be:8a:04:43:e4:5a:5c:d1:38:ad:e7:
                    c5:34:f3:73:75:44:70:2b:80:bf:96:6f:73:0e:4e:
                    0e:f3:95:a1:1d:4d:8f:d0:d6:85:b4:5c:14:6c:50:
                    c7:0c:bb:c7:16:48:d5:7c:fa:a4:ab:23:d6:f7:54:
                    5c:8a:95:50:7a:96:c4:92:6d:f1:bb:94:26:8e:fa:
                    df:f2:a4:70:21:22:d5:0e:b8:e0:ac:3a:58:0d:e0:
                    2a:67:e0:6d:3b:32:98:87:93:04:22:90:92:50:fc:
                    40:cb:e3:11:9f:1f:83:d1:e4:78:d5:3e:0e:71:13:
                    4a:1e:85:6f:d6:7a:e8:e9:36:f8:59:ef:a3:1a:36:
                    3e:e4:0b:ea:ec:e2:58:c1:c7:72:38:dd:f5:44:f3:
                    81:a6:af:f3:a3:ec:76:f4:df:f6:f1:59:18:d0:15:
                    b9:6c:f7:d4:a1:2e:21:27:f1:a9:30:e7:99:ef:cf:
                    3d:b3:8b:35:e3:c7:fa:40:84:f6:80:7c:a8:df:13:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:93:C1:B1:34:35:BA:22:63:01:4C:30:D0:4F:09:08:CC:F4:54
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/n8WTwbE0NboiYwFMMNBPCQjM9FQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:e3:9d:0d:61:09:24:3d:a7:e2:5b:a0:91:cd:4a:2a:1b:ee:
         d7:13:e3:ef:17:1d:33:0e:a6:3f:23:fc:46:3c:bb:2d:02:a8:
         e0:2b:9d:a0:1a:59:34:d9:b0:51:de:1d:64:bd:a0:a6:0c:21:
         8f:bf:5d:f9:8b:82:b6:47:27:bb:b2:ab:2a:c1:8e:79:ec:75:
         27:78:e0:9c:d6:ce:a8:fe:ee:65:d1:8b:35:b8:66:74:9e:6a:
         37:c4:a9:c1:f6:0d:fe:d6:86:23:cd:c6:c6:55:1d:47:bf:f2:
         b6:35:bc:d3:1f:9b:3f:93:2a:49:9c:10:d9:52:86:04:9b:ec:
         e5:9b:59:47:5f:47:86:85:62:67:38:66:88:50:d7:57:ca:e5:
         b0:50:cb:be:e1:21:f0:18:8c:17:83:24:93:21:b7:41:c5:8e:
         df:ea:db:94:f5:0d:40:76:bd:1d:02:9c:2e:86:df:16:d2:02:
         0e:48:39:9c:dc:a9:3f:ec:65:b1:67:e5:e0:33:39:e6:93:db:
         56:ec:b7:70:3d:8c:fe:3c:61:08:c5:1f:c2:4d:d4:bd:07:b6:
         d0:6d:4a:d8:60:05:e9:da:0a:76:77:a8:70:21:3c:23:a8:4b:
         76:ed:fd:55:3f:f4:61:87:c7:b7:14:1f:47:88:98:46:2b:b2:
         98:0e:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org