Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAhxshu-G0rdNZpm3xJglm8inQ0.roa
File:                     xAhxshu-G0rdNZpm3xJglm8inQ0.roa (raw, json)
Hash identifier:          yDyLmksVqhZKo9Ud2DEYyApR5PRoCmNKJWkDdx5TXGA=
Subject key identifier:   C4:08:71:B2:1B:BE:1B:4A:DD:35:9A:66:DF:12:60:96:6F:22:9D:0D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       9C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAhxshu-G0rdNZpm3xJglm8inQ0.roa
Signing time:             Fri 22 Jul 2022 06:37:45 +0000
ROA not before:           Fri 22 Jul 2022 06:37:45 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        119.150.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:37:45 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=C40871B21BBE1B4ADD359A66DF1260966F229D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:ca:80:b2:35:26:17:36:80:37:ef:6c:ec:
                    96:f1:69:dc:1f:5c:85:3a:23:2f:ab:f9:d3:02:5e:
                    f3:5c:fd:16:dc:b0:3f:81:cc:86:19:ea:73:38:93:
                    e7:cc:92:48:24:0d:c3:4a:ef:7f:f4:6e:fe:61:54:
                    fa:5b:07:67:7f:35:d2:4a:38:01:b9:24:da:fb:a0:
                    21:69:ca:83:49:63:8b:29:f6:73:05:6e:ac:07:34:
                    2f:9e:5b:42:5c:74:4d:7f:73:41:8f:e2:42:9e:bf:
                    2e:ff:01:39:1f:f5:75:95:58:eb:12:86:78:65:e3:
                    c7:81:4d:fe:1d:e1:7f:0e:12:a0:e0:a3:78:21:e3:
                    d6:0e:de:15:34:02:56:13:c7:b7:67:35:3a:20:4b:
                    87:92:80:d3:d7:b0:3a:a1:37:b8:1b:fc:ce:13:a6:
                    86:03:f3:99:6f:67:e3:52:32:8b:74:76:0e:e2:96:
                    31:de:98:68:a5:16:4b:23:9d:de:ef:c3:08:d3:7b:
                    e0:d7:cf:4c:38:67:85:91:b0:a2:47:16:ee:42:48:
                    06:2b:4a:cc:b8:46:8a:3d:4b:2b:50:f7:6e:7d:8f:
                    b1:ff:2d:29:6f:53:bc:f7:a6:64:4b:e8:cf:4d:39:
                    eb:67:3a:d1:5c:24:33:e5:b3:5a:93:ce:20:d4:4d:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:71:B2:1B:BE:1B:4A:DD:35:9A:66:DF:12:60:96:6F:22:9D:0D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xAhxshu-G0rdNZpm3xJglm8inQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:56:ac:b9:94:d0:d5:0e:43:51:12:eb:c3:10:28:c7:32:
         9d:d3:0c:b1:7d:04:e7:3d:df:68:56:b3:ab:ad:68:48:b0:bc:
         7c:32:6b:8f:9d:31:18:bd:51:37:9d:c2:76:ea:ed:f4:d3:38:
         69:2f:ae:9e:c4:fb:4b:65:4b:5c:83:2c:3f:30:62:d6:6f:72:
         18:ea:91:3f:87:46:f2:bd:e4:c3:7d:a7:0e:16:33:ce:8a:39:
         1e:64:d9:a1:c6:6f:f6:d9:18:ef:a9:e2:e8:a5:25:67:1e:43:
         aa:e9:c4:82:6d:6c:2e:ec:7f:87:f5:ef:55:d3:a9:cd:52:94:
         3a:5b:ef:5c:21:17:66:91:ca:b8:57:b8:a2:c7:3e:54:5a:1d:
         b2:06:97:b2:5e:ae:dc:31:1b:2e:58:87:8d:ac:1e:2f:87:35:
         dc:25:5b:e3:dc:50:19:8f:5a:d0:ff:ec:30:4c:ef:0a:15:32:
         27:d2:aa:6f:51:45:f9:ec:fa:52:e7:53:f0:8e:4c:e3:05:57:
         7c:17:80:f8:fb:dc:8c:42:6b:cf:21:6b:d1:eb:06:f6:8a:ad:
         f2:a6:d0:c9:15:6b:4b:ed:4f:27:5d:0a:40:5e:69:13:06:30:
         2b:c3:49:8e:5f:72:be:a1:d5:bb:aa:cd:8a:5b:9e:0f:a0:ef:
         b9:cc:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org