Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oTabVuBvrqS046aWt871chXI4rQ.roa
File:                     oTabVuBvrqS046aWt871chXI4rQ.roa (raw, json)
Hash identifier:          2aMukSAue4cfNiASjJUgGtzxTsbckwxWaSg6BCYUWsA=
Subject key identifier:   A1:36:9B:56:E0:6F:AE:A4:B4:E3:A6:96:B7:CE:F5:72:15:C8:E2:B4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       31
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oTabVuBvrqS046aWt871chXI4rQ.roa
Signing time:             Fri 22 Jul 2022 00:22:09 +0000
ROA not before:           Fri 22 Jul 2022 00:22:09 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.54.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:22:09 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=A1369B56E06FAEA4B4E3A696B7CEF57215C8E2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:9a:7d:70:5c:35:d3:87:be:74:e2:74:16:
                    a0:b2:b6:86:df:58:a9:4c:2d:80:d4:9a:0f:58:12:
                    81:d3:46:15:be:ad:03:c3:1f:63:90:16:fc:80:25:
                    6f:7f:4f:1a:a3:a7:cc:56:17:09:91:1f:b8:cc:ea:
                    37:76:88:66:37:62:1c:24:6a:75:27:26:1c:00:91:
                    67:90:0f:0c:ae:d0:83:06:43:7f:6f:9a:2a:8f:27:
                    fb:04:07:ce:9b:c5:ae:58:8a:8d:0e:77:a3:25:42:
                    79:57:ba:a6:4c:bf:e9:4c:6d:8f:15:94:4e:c6:5e:
                    dd:e2:af:50:06:d6:f7:7c:1a:0a:95:e7:0c:a5:64:
                    95:6e:7e:59:dd:d0:13:80:ef:f8:6d:0e:2f:f7:71:
                    ce:48:c9:7e:0b:a2:c5:82:9b:dd:8e:44:17:60:ac:
                    04:64:82:26:27:1f:9d:03:b5:2c:9f:6d:fa:c4:5b:
                    59:9e:ee:60:c0:e2:a8:63:77:99:cc:3a:f7:60:e0:
                    21:0a:0a:99:f3:11:b0:98:54:ae:c9:d4:b1:d3:29:
                    b1:99:34:c5:1c:c9:58:e6:1a:86:f1:dc:6f:e7:dc:
                    10:04:b1:b5:e1:6b:17:54:2c:a7:0d:6c:e8:53:2c:
                    7d:62:d1:c2:0a:3a:48:c4:12:b4:e8:ad:26:c7:09:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:9B:56:E0:6F:AE:A4:B4:E3:A6:96:B7:CE:F5:72:15:C8:E2:B4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oTabVuBvrqS046aWt871chXI4rQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:32:f5:04:ce:77:d0:d0:05:09:13:84:8f:fb:88:92:dc:21:
         c2:cf:e7:81:a7:1b:8a:fb:f5:b4:bc:15:ea:2b:bc:53:ec:64:
         fe:51:e5:18:b4:0e:f0:e3:2d:74:df:9a:56:4a:62:9f:d1:12:
         7b:ff:73:b7:fe:6f:3c:5f:06:84:da:ee:29:f2:a0:70:1c:4d:
         cd:f6:85:c0:63:f3:ef:01:dd:87:33:77:c9:24:ff:5c:25:93:
         51:ca:12:f8:88:f8:58:93:c5:56:fb:12:56:10:98:1d:5f:0a:
         3e:9a:73:e5:19:76:9d:35:5e:e3:a9:78:bf:38:29:f3:50:f0:
         b4:76:da:49:64:cc:43:b8:7c:27:8a:18:99:d4:71:cd:31:84:
         7e:25:24:59:4e:86:5e:f2:31:76:02:6d:a5:c7:c4:44:7b:15:
         87:e2:dd:95:05:9f:00:a9:f3:7b:1f:bf:c3:d8:4c:0b:80:e9:
         f1:0c:d7:d0:ae:b6:fe:c0:f1:26:4b:e0:93:9b:4a:2c:14:7a:
         28:c1:0d:14:9c:4e:4b:b1:a5:b6:9e:b9:f3:8c:b1:9f:1c:75:
         d8:33:ed:e3:74:99:20:04:c4:68:35:09:bc:a7:dd:7c:c8:5f:
         c4:18:54:3f:22:48:0e:72:aa:36:14:70:21:51:df:eb:b2:6e:
         e8:cc:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org