Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pMTEZeSIUK9aTw0ekC1dYuEDg64.roa
File:                     pMTEZeSIUK9aTw0ekC1dYuEDg64.roa (raw, json)
Hash identifier:          mWQiCVgth5NceaK6Np/0iM4PMTLaU45LAXoLzb0I44Q=
Subject key identifier:   A4:C4:C4:65:E4:88:50:AF:5A:4F:0D:1E:90:2D:5D:62:E1:03:83:AE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       59
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pMTEZeSIUK9aTw0ekC1dYuEDg64.roa
Signing time:             Fri 22 Jul 2022 03:54:56 +0000
ROA not before:           Fri 22 Jul 2022 03:54:56 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.134.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 03:54:56 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=A4C4C465E48850AF5A4F0D1E902D5D62E10383AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:36:a0:41:e4:aa:0e:91:75:50:3c:a7:d6:
                    8d:a3:91:73:a6:02:eb:21:c9:0a:39:cb:04:e4:0c:
                    59:bb:58:9b:78:be:27:cd:30:b7:d1:be:7e:cd:7d:
                    00:cd:fd:6f:a0:ec:d4:01:9d:a0:13:e1:71:27:19:
                    73:23:ef:ab:7b:cb:af:7e:e4:4c:a1:19:de:4f:1e:
                    2f:3d:94:77:8a:63:0d:41:3e:a9:ea:02:74:88:95:
                    c0:f4:9e:9f:15:b9:a1:db:96:23:a4:89:bc:0a:76:
                    1f:6a:b0:ea:a7:ac:d4:1d:32:dc:f8:b0:2a:32:aa:
                    cd:89:a0:33:65:30:a8:4d:67:58:08:8e:15:ff:74:
                    8c:c4:e5:7e:1f:15:bd:b2:1e:c0:91:28:2c:e4:67:
                    4d:48:8f:b4:2e:91:c9:16:a5:75:53:92:f1:2a:a6:
                    ad:65:bc:15:f6:97:62:1b:20:1a:a1:f8:74:a3:61:
                    c0:51:66:72:9c:df:32:13:16:c9:b7:31:b2:31:2f:
                    0a:2f:6c:4b:ac:2e:fc:71:e5:d5:5b:ff:8b:fe:60:
                    50:91:52:cd:b3:99:1f:70:e1:2e:a7:b1:38:de:4e:
                    3c:db:66:b0:ce:ca:ec:8f:52:f6:83:36:c4:c8:21:
                    ed:ce:b2:5c:98:89:f6:e8:6c:1b:f3:d7:d8:c1:9e:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C4:C4:65:E4:88:50:AF:5A:4F:0D:1E:90:2D:5D:62:E1:03:83:AE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pMTEZeSIUK9aTw0ekC1dYuEDg64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:21:c0:08:92:da:28:a9:55:f2:30:2d:17:41:c2:73:ea:
         de:f4:4d:08:14:01:47:83:e8:f2:df:fe:9e:ca:b7:0d:29:6e:
         f9:25:d7:09:56:8c:9c:19:8a:6d:9e:4f:d3:59:87:ff:22:60:
         d1:bf:23:f1:6e:54:b1:ef:d8:43:bf:d8:a5:57:8f:16:20:6a:
         c3:be:35:6d:56:ca:e8:ed:51:f4:53:6c:3b:ed:f7:96:ce:f8:
         8c:a2:17:21:f3:27:85:aa:8d:c5:49:5f:29:3e:5c:ba:ce:21:
         ae:de:5b:c0:63:a6:bf:1f:8d:e6:b0:a6:df:4a:41:d7:1d:c6:
         20:8f:af:17:66:e0:d0:03:ad:2a:49:31:89:9f:2c:fb:c3:a3:
         94:3f:61:34:6c:f1:d8:e6:3b:eb:c9:49:10:90:ab:83:12:22:
         2e:e6:4f:cb:47:a8:99:65:63:3f:12:c4:41:94:e8:a2:32:0c:
         90:b0:71:eb:f1:de:95:26:17:26:26:c9:6e:52:94:1d:b5:fb:
         83:9e:21:05:a4:c2:93:59:a5:32:b3:87:78:09:2d:f6:a2:66:
         3a:69:14:83:cf:77:37:79:fb:93:13:1f:69:b4:13:3d:41:6b:
         f0:04:79:2a:d3:0a:4a:37:98:bc:f0:48:9c:39:13:23:0b:b6:
         0e:e3:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org