Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/EMPR7oRSdQGctAEo1usWYmJ8sGE.roa
File:                     EMPR7oRSdQGctAEo1usWYmJ8sGE.roa (raw, json)
Hash identifier:          8cWgL4LTYWbdth2GnyBPAfBiV0PsrRRGr4/dnKbb8Ps=
Subject key identifier:   10:C3:D1:EE:84:52:75:01:9C:B4:01:28:D6:EB:16:62:62:7C:B0:61
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       D6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/EMPR7oRSdQGctAEo1usWYmJ8sGE.roa
Signing time:             Sun 01 Jan 2023 01:29:42 +0000
ROA not before:           Sun 01 Jan 2023 01:29:42 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        59.146.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:42 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=10C3D1EE845275019CB40128D6EB1662627CB061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:6c:0e:72:1e:b1:ce:1d:12:6c:59:e4:c9:
                    9f:27:b2:1e:43:62:db:d8:d1:da:0c:1d:ca:a8:5c:
                    a2:5f:e6:ef:ab:9d:23:f1:42:98:a7:31:f5:a8:df:
                    db:34:19:17:7b:99:cd:c1:da:6b:d5:4c:2c:54:80:
                    cb:27:ba:1f:1d:6b:99:b2:f4:32:78:46:96:83:78:
                    3e:72:4a:0e:7f:7e:27:bc:16:3a:f6:2e:88:2a:05:
                    93:15:51:b5:32:20:33:fe:a6:e1:e8:1c:49:d4:ca:
                    4b:de:5a:c9:3c:f9:19:8d:e5:34:b8:f2:99:50:77:
                    d4:2e:03:da:0a:ff:d8:cd:f7:b3:ab:df:4a:cb:62:
                    f8:dd:48:83:83:1e:8d:63:19:79:1e:36:c6:85:77:
                    78:a5:6e:f6:5f:4e:12:b0:a9:79:40:94:6c:5c:cb:
                    c0:f9:81:ce:34:00:f9:f6:ff:dc:8a:28:6d:2b:c3:
                    46:90:37:0b:f0:8a:c3:58:b5:ab:2d:23:23:9f:d0:
                    1d:9b:83:99:15:de:2f:34:bb:55:da:5c:50:74:22:
                    ff:46:00:48:a5:7e:3f:62:c6:f1:8f:d2:d4:9f:40:
                    e5:40:6e:b0:47:39:2b:7e:aa:8f:b4:03:37:d7:5a:
                    2e:1b:18:96:fa:16:2f:7e:76:5a:5f:76:6c:8f:cf:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:D1:EE:84:52:75:01:9C:B4:01:28:D6:EB:16:62:62:7C:B0:61
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/EMPR7oRSdQGctAEo1usWYmJ8sGE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:16:74:26:5e:05:5c:85:48:49:88:64:2f:89:3d:a6:1b:
         d9:bd:10:86:28:b0:05:7e:46:7f:69:fb:a0:53:a5:3d:9b:7f:
         c4:aa:89:8c:e6:ff:c7:d2:ee:0c:8b:a3:49:9d:4b:65:a7:8a:
         81:62:cf:70:b5:f8:e0:bd:1c:1e:8b:ae:84:57:68:e2:6f:b6:
         b0:6f:1f:da:50:1f:d9:f1:bf:d1:4a:d0:96:cd:48:c0:39:77:
         48:64:5c:64:a7:01:d2:01:e0:9f:b5:29:b0:2c:a9:61:97:71:
         ea:83:1d:52:2a:ef:63:b9:cc:09:2a:1b:07:87:1c:e5:e7:d9:
         56:be:1b:8e:60:2f:85:51:a1:af:31:b9:60:c4:af:d2:c1:29:
         d2:f6:f0:ae:ea:18:3b:e8:fa:b8:82:a9:8d:65:c2:f9:77:4f:
         5b:2c:dd:cb:5f:83:a8:b0:e1:d9:c9:eb:ef:3d:2d:e6:59:c1:
         eb:94:98:f3:a5:84:fb:cb:aa:1e:67:1d:49:e3:1b:d2:47:c1:
         13:da:f2:b3:5d:bf:55:76:a4:0c:24:68:c9:06:e2:05:cd:71:
         ff:2b:4c:05:b3:24:69:d6:f5:20:61:eb:cd:ff:26:a6:1c:9f:
         9a:e4:15:d5:15:ed:84:da:6a:a1:95:4f:8f:3e:e7:56:4a:36:
         73:86:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org