Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oA5WwWYC_JBzVMxMK2j9wXYVt2Y.roa
File:                     oA5WwWYC_JBzVMxMK2j9wXYVt2Y.roa (raw, json)
Hash identifier:          OkYZswyB6xrCEa84AjpVoE7Q3lZIXIJSTsaYxhIHhAM=
Subject key identifier:   A0:0E:56:C1:66:02:FC:90:73:54:CC:4C:2B:68:FD:C1:76:15:B7:66
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       C8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oA5WwWYC_JBzVMxMK2j9wXYVt2Y.roa
Signing time:             Thu 28 Jul 2022 05:15:12 +0000
ROA not before:           Thu 28 Jul 2022 05:15:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        123.50.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:15:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=A00E56C16602FC907354CC4C2B68FDC17615B766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:45:cd:c4:05:0c:80:33:72:b4:61:93:d5:
                    6e:34:92:c9:b3:8f:b4:b4:31:01:22:80:44:5d:a8:
                    2d:cd:ea:57:aa:b7:94:40:ad:3f:0d:80:40:f2:a5:
                    03:88:c4:dd:3e:46:fd:c4:86:e6:20:ef:e5:77:03:
                    94:96:a7:04:c0:6a:2c:c4:95:79:d5:7f:27:47:bf:
                    af:78:84:c1:6d:2e:37:70:5a:b3:66:15:4c:bc:07:
                    bc:3d:d4:fd:49:d2:14:e5:c5:3c:c5:c5:92:23:15:
                    76:6b:0d:21:db:c3:3c:64:ae:1b:ed:ae:34:61:6e:
                    4e:6f:92:46:38:21:f6:1d:26:f7:f5:75:f3:01:fa:
                    5e:2b:bd:4d:76:09:61:29:09:81:91:68:42:93:79:
                    b4:36:3c:9a:4d:12:e0:49:e7:0d:9c:98:fb:e4:96:
                    27:4a:85:cf:81:8f:b4:7e:3d:bc:06:20:7c:df:e0:
                    9a:04:8b:b3:f7:c5:c9:f1:3b:5b:32:83:e1:60:ef:
                    30:c2:ce:64:05:7b:b8:2d:85:86:41:57:00:9c:24:
                    8b:71:4d:fe:92:fe:3f:7b:a2:6d:e5:4e:cb:7c:89:
                    09:c5:25:e0:72:0d:dc:78:ed:23:0f:78:53:76:ca:
                    4c:1d:b4:4c:f0:24:a3:db:1d:7f:86:e2:f6:62:d1:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:56:C1:66:02:FC:90:73:54:CC:4C:2B:68:FD:C1:76:15:B7:66
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oA5WwWYC_JBzVMxMK2j9wXYVt2Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:49:1b:e9:43:fd:aa:1b:e9:dc:ca:70:6d:da:4e:04:f5:
         65:21:b6:7c:0d:53:d8:f0:45:35:d2:5f:8b:3f:09:bf:32:4a:
         d7:51:c0:b7:1d:17:95:df:e2:27:dd:af:bd:39:e8:95:5b:c0:
         96:ea:b5:7b:1f:17:5e:ca:06:04:6a:32:fd:95:52:44:f1:cd:
         e0:b5:08:42:4a:44:1f:d3:80:55:9c:31:5a:b1:9e:c3:91:6f:
         4a:c5:34:10:c9:bb:d5:75:e8:64:4d:29:6b:b4:0c:0c:41:10:
         c2:c3:38:ca:9d:5b:93:3f:45:2b:79:cc:3d:3c:d5:8f:9f:fd:
         f2:7f:8b:6d:4e:57:da:4c:5b:a5:20:6f:3a:58:19:b3:47:f3:
         99:d5:56:49:91:12:3c:8a:5a:96:b8:65:30:8d:d3:29:d3:55:
         9f:22:3a:cd:f3:41:55:9d:69:8d:56:f9:53:dc:bb:79:fd:f1:
         0e:7e:e7:b7:74:45:c4:07:2b:9f:3d:d9:ae:8f:06:ad:4f:c6:
         c0:e6:6c:6e:a2:73:a3:a0:ad:df:cc:10:52:16:a3:e4:5b:15:
         3b:55:b7:cb:6b:f3:90:60:70:6f:64:5e:72:90:79:59:a2:6b:
         8a:17:16:61:9f:47:c7:f9:df:50:66:55:a8:b8:3e:e8:0f:5f:
         75:ea:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org