Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/uqirCpbmtNSLj3YqhmvWIJ3yzvc.roa
File:                     uqirCpbmtNSLj3YqhmvWIJ3yzvc.roa (raw, json)
Hash identifier:          2kGPcbVi8cfeGugdJor8kui7Vz8gUN6soNheCUa7VOw=
Subject key identifier:   BA:A8:AB:0A:96:E6:B4:D4:8B:8F:76:2A:86:6B:D6:20:9D:F2:CE:F7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       22
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uqirCpbmtNSLj3YqhmvWIJ3yzvc.roa
Signing time:             Fri 22 Jul 2022 00:06:04 +0000
ROA not before:           Fri 22 Jul 2022 00:06:04 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.90.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:06:04 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=BAA8AB0A96E6B4D48B8F762A866BD6209DF2CEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:c7:12:0b:c3:e8:44:3e:84:27:1e:e5:59:
                    b6:79:aa:7c:9f:2c:d5:ce:14:62:ed:6f:6b:ef:59:
                    88:44:c5:d7:64:64:75:ce:10:6f:90:53:3e:55:81:
                    9c:b5:c2:f8:80:71:86:87:55:72:62:dd:25:23:ae:
                    27:38:c0:53:11:72:5c:ed:c8:30:85:4b:71:9d:98:
                    15:87:41:7d:56:64:f9:1e:80:8e:2c:63:a3:c6:fc:
                    18:7f:91:b9:1f:92:18:c5:23:8b:2f:d4:ee:a8:85:
                    fd:f8:66:dc:f0:77:31:c2:07:14:f8:e9:0f:1d:6f:
                    d7:1e:71:2d:4d:22:26:b0:1f:62:b9:f9:1d:19:ba:
                    ab:50:b9:59:0e:a8:17:0e:fa:15:43:dd:7a:36:5c:
                    48:e6:b7:eb:59:2c:5b:36:09:07:0a:d4:75:b5:af:
                    85:a5:df:2d:ed:32:0e:15:b7:f1:fc:bc:2f:83:c3:
                    1d:81:88:36:92:75:6f:89:67:67:14:fa:b6:6e:54:
                    55:f1:ea:aa:ad:e5:ef:84:49:b9:01:78:01:52:22:
                    02:41:86:15:06:78:4a:95:5b:2d:df:00:d4:a0:da:
                    26:41:de:82:32:5f:52:df:17:bc:bf:83:69:4b:61:
                    94:04:de:ba:f5:e0:2f:16:71:73:b1:18:1c:ba:66:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A8:AB:0A:96:E6:B4:D4:8B:8F:76:2A:86:6B:D6:20:9D:F2:CE:F7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uqirCpbmtNSLj3YqhmvWIJ3yzvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:92:db:b1:36:8c:b0:8d:a1:79:55:e5:4b:4c:2a:da:65:
         b0:77:36:80:4f:3d:51:b3:fb:7c:90:7b:c5:a7:17:a1:04:2f:
         07:58:66:59:05:50:cb:b6:ac:19:6e:fe:22:07:1d:ed:7a:e6:
         b2:7e:80:a6:21:16:b9:03:37:3f:05:19:e4:6c:12:ad:0d:2c:
         66:f1:9e:ca:b1:97:f4:1c:31:6f:ce:01:b8:a5:fe:ba:d6:fd:
         e5:19:bb:a6:b7:ab:a5:4d:37:97:95:eb:4e:98:f2:5b:fa:c2:
         d5:fc:72:d6:42:82:fa:40:3f:f3:ff:ae:27:e7:fe:d1:cd:1c:
         c2:be:a5:58:f4:47:8c:78:1d:b4:cc:53:e6:68:d8:96:e7:21:
         f1:3c:ac:b9:3b:d3:1e:b4:7b:8b:81:9a:08:82:7f:c1:3c:af:
         79:4c:9d:ea:2f:e3:92:f3:99:0b:93:af:61:66:79:3b:b9:83:
         a5:b4:2a:c8:c4:cb:96:00:12:2c:02:31:68:6f:62:1b:fc:63:
         f7:87:59:2a:dc:f7:9f:2d:95:2d:22:df:5d:02:61:3d:fc:a1:
         72:e5:d0:43:04:72:48:36:a5:be:b1:12:4d:2c:f1:be:70:e5:
         56:08:91:0d:d4:2a:2d:98:f9:54:77:9e:f2:82:3e:92:22:1e:
         14:dc:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org