Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/s8Y0ZSQlO5__h6Q0hiEwiXv6cQQ.roa
File:                     s8Y0ZSQlO5__h6Q0hiEwiXv6cQQ.roa (raw, json)
Hash identifier:          imBViMDn3ZoFTLJnI3V0LeVOrmW8O8NwxwT7W5v+BbU=
Subject key identifier:   B3:C6:34:65:24:25:3B:9F:FF:87:A4:34:86:21:30:89:7B:FA:71:04
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       F9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/s8Y0ZSQlO5__h6Q0hiEwiXv6cQQ.roa
Signing time:             Wed 24 Aug 2022 07:52:27 +0000
ROA not before:           Wed 24 Aug 2022 07:52:27 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug 24 07:52:27 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=B3C6346524253B9FFF87A434862130897BFA7104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:ee:ee:c5:6e:50:51:35:a6:d2:0d:c1:71:
                    e2:13:11:a0:ff:b7:3b:e5:0a:0a:cb:40:3e:3f:bc:
                    56:11:dc:6e:26:e4:3f:34:3a:07:58:d8:5d:45:5c:
                    23:31:f9:37:cb:58:94:99:be:79:20:e7:a9:da:a4:
                    4f:09:5d:5c:7e:ed:ad:c6:8c:63:8d:3c:59:be:87:
                    e7:2f:63:c9:81:00:45:74:dd:af:27:55:15:87:28:
                    71:73:70:98:27:cf:24:76:43:b3:1a:96:52:7d:27:
                    be:6b:9b:25:5a:0e:e6:26:d0:f4:26:46:c2:17:10:
                    eb:7f:15:1d:21:91:d4:67:ca:3b:1b:e7:b1:d2:f2:
                    c8:da:4a:f2:33:52:d5:3c:c3:1f:eb:2b:c4:b1:91:
                    b2:0b:b7:01:e3:eb:86:9b:93:8a:3c:ef:89:6a:c8:
                    ca:37:23:c8:ad:c7:0e:5d:e8:e3:af:84:e7:61:e0:
                    19:83:a9:e2:33:9f:37:ba:df:9a:e9:51:60:18:0b:
                    eb:02:30:45:5d:3f:ee:d3:36:66:36:3c:ee:e6:0b:
                    f5:69:e6:71:00:66:9b:77:2c:8e:b4:ae:78:97:09:
                    c9:67:0c:20:9e:b0:68:68:a2:a7:46:96:46:a9:01:
                    cd:32:6b:d0:22:58:89:11:ad:8b:fa:d6:a0:2c:1a:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:34:65:24:25:3B:9F:FF:87:A4:34:86:21:30:89:7B:FA:71:04
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/s8Y0ZSQlO5__h6Q0hiEwiXv6cQQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:51:96:78:71:f1:f9:aa:4d:e2:21:9c:cd:4a:40:7e:14:fa:
         e3:58:00:5f:95:8f:38:e8:76:07:02:23:83:2e:76:fa:77:0c:
         a5:a5:32:66:ad:50:a7:d4:ff:6f:1d:66:59:52:96:68:a7:f2:
         30:5d:9d:65:58:55:20:42:59:b4:a1:cf:9c:1c:12:00:d5:c4:
         72:e9:2b:08:ab:d4:97:da:64:47:8a:44:7c:31:d4:24:68:9c:
         5b:29:06:33:3d:7f:d2:35:ac:28:92:ac:f9:ed:23:14:21:ad:
         c0:ed:66:9a:5e:96:78:27:9a:e5:04:61:0e:c8:7e:12:d8:cc:
         7f:99:2f:5f:d4:8a:aa:28:7b:b7:b8:05:51:81:a6:45:b3:a7:
         7d:aa:31:f2:8d:61:9c:b9:53:62:d0:81:3e:1b:62:4f:3f:93:
         44:04:d6:b7:d6:d7:ea:db:18:68:7b:cb:e7:cc:ca:0a:d5:fa:
         7f:10:0b:70:14:46:4f:dd:29:0b:fb:0e:95:46:db:a7:e8:51:
         bb:c6:3b:4f:b7:c5:89:ce:c0:8d:0f:5f:fb:37:8f:f7:45:bc:
         e8:fd:4b:fd:b2:2e:65:04:9e:bc:67:3c:48:d3:35:19:45:5c:
         ac:11:49:3b:89:43:d7:a1:b1:c2:c2:21:d6:97:5e:75:03:be:
         1f:73:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org