Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/SmRDY1-evFUtn3R89h6kTTkb5LY.roa
File:                     SmRDY1-evFUtn3R89h6kTTkb5LY.roa (raw, json)
Hash identifier:          WsfJ8aWdFeINZllSkcI/S2SQ4yCGkPmfwJq12+8Pffc=
Subject key identifier:   4A:64:43:63:5F:9E:BC:55:2D:9F:74:7C:F6:1E:A4:4D:39:1B:E4:B6
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       9F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/SmRDY1-evFUtn3R89h6kTTkb5LY.roa
Signing time:             Tue 01 Feb 2022 01:31:51 +0000
ROA not before:           Tue 01 Feb 2022 01:31:51 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        150.246.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:51 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=4A6443635F9EBC552D9F747CF61EA44D391BE4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:38:98:54:39:ee:5e:96:4e:7a:8e:03:d1:
                    8b:f8:5c:51:8d:6b:2c:10:14:cc:db:80:8c:e7:39:
                    7b:f7:45:ee:03:df:96:4f:bf:1d:e2:52:c5:12:0d:
                    01:c0:57:4a:c1:1c:de:3b:6e:6f:8a:bf:13:80:7e:
                    e6:1d:db:d6:d8:5b:9c:4d:1b:79:8a:b7:76:5f:8d:
                    6b:17:d3:b7:c2:1a:56:0d:dc:2a:d4:75:93:59:7a:
                    ad:81:0d:23:ee:ef:05:0d:24:a0:f1:0e:ee:f9:59:
                    0b:fa:0b:5a:35:b4:75:d6:f9:c7:f8:7b:f1:2d:63:
                    13:9c:e4:5f:e8:ac:3a:11:1c:72:4d:c3:b5:e8:a0:
                    d9:48:4d:14:f5:47:ca:b7:6f:54:b7:fe:e2:42:34:
                    29:6c:8e:02:61:e5:29:2b:ae:e4:b3:a5:d9:a6:17:
                    61:8e:81:9d:53:63:7d:11:2b:9c:a0:b6:9a:f3:a9:
                    77:85:e2:a4:00:b7:30:92:3b:bc:b3:7b:49:22:c2:
                    14:d0:11:35:29:18:b9:fe:9f:c2:2c:87:ab:69:65:
                    a0:4e:0c:31:8d:3f:1a:2f:e3:8a:d0:99:fe:b9:9b:
                    0f:49:9c:33:f6:25:a0:c8:80:2c:6b:6d:a1:c5:b9:
                    4f:58:49:16:7e:4b:39:e0:1c:65:0a:5c:d6:95:0f:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:64:43:63:5F:9E:BC:55:2D:9F:74:7C:F6:1E:A4:4D:39:1B:E4:B6
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/SmRDY1-evFUtn3R89h6kTTkb5LY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:2b:f2:4e:5a:35:d3:b9:2f:fb:1e:f2:4e:cd:30:84:78:
         d6:80:f1:94:4b:35:4c:2e:7e:7b:d6:a2:31:86:f0:f8:6e:e6:
         56:0c:b0:12:86:51:ff:21:64:d1:1f:8b:13:53:1a:ed:7e:05:
         8a:06:5a:c4:49:3d:5d:93:63:a2:b7:ed:2b:d1:c0:fd:ba:e5:
         9d:a9:ac:4d:81:73:82:ad:8c:03:c9:f8:bc:c4:65:88:c1:15:
         33:3f:c1:ed:77:40:80:9d:7c:9a:04:28:ff:f7:46:29:a6:a1:
         2d:e3:df:18:39:23:60:b2:bc:bd:12:6c:e0:3a:db:0b:aa:06:
         e7:d2:d4:df:9c:ee:ed:bd:61:f4:14:35:2e:3c:61:f5:36:10:
         fc:3f:79:d2:49:88:e5:7e:a0:89:6c:16:51:d2:61:1a:aa:b8:
         0e:39:12:68:e9:88:03:39:18:33:82:ed:87:8c:e6:49:cc:d7:
         e1:bf:1f:5a:63:3b:14:13:35:13:09:38:af:b0:d4:e7:c4:b0:
         25:32:12:7b:17:4c:db:f0:67:e7:df:ac:41:a9:1d:44:c2:4e:
         1b:42:89:a5:ce:1b:85:c1:b5:96:34:e0:f8:e0:84:19:50:06:
         9f:31:e4:7e:a0:1a:f5:39:1e:ad:8a:9e:02:80:bc:66:d1:88:
         68:ed:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org