Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/mRCadprHAZSF18PXN97fu72SpoQ.roa
File:                     mRCadprHAZSF18PXN97fu72SpoQ.roa (raw, json)
Hash identifier:          EtfMqAsoSX95lxFAET7HnKrphUtX2DheumhHZOFdVcg=
Subject key identifier:   99:10:9A:76:9A:C7:01:94:85:D7:C3:D7:37:DE:DF:BB:BD:92:A6:84
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       C3
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/mRCadprHAZSF18PXN97fu72SpoQ.roa
Signing time:             Sun 01 Jan 2023 01:29:32 +0000
ROA not before:           Sun 01 Jan 2023 01:29:32 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        124.219.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:32 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=99109A769AC7019485D7C3D737DEDFBBBD92A684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:72:2d:6c:7f:ec:db:c4:6e:cd:ec:2a:da:
                    24:47:38:32:cc:13:4b:77:64:78:c7:3b:f6:df:cd:
                    e7:02:74:8c:6c:ea:d7:b1:8d:63:68:1c:62:5e:de:
                    bf:f8:5e:86:9c:92:10:b9:76:21:01:27:bd:01:71:
                    74:0d:59:7e:26:73:3e:47:a4:54:30:cb:4e:83:55:
                    2f:4e:b6:5e:12:82:e2:2c:a4:ab:71:24:12:48:91:
                    52:5d:18:93:50:37:1a:25:f9:10:ad:b5:e7:db:a1:
                    55:b4:4e:a8:8e:ef:56:6b:2e:4e:31:55:f3:96:89:
                    e2:52:d9:d1:5e:73:02:9a:18:47:2d:17:a8:6b:0a:
                    b9:e7:51:ee:2b:a3:c2:c3:04:7d:b2:dd:77:ea:21:
                    c6:e4:2a:c1:c2:de:a3:9b:fb:4c:4b:21:44:e9:37:
                    dc:f2:20:b9:62:2e:f6:8d:e0:e7:22:63:46:08:f2:
                    45:82:55:62:b2:76:73:98:0b:14:9e:a9:c6:6a:01:
                    8f:1c:e0:e8:ac:ec:f1:80:22:7e:71:ec:0f:3e:aa:
                    f8:39:93:8c:42:42:d9:d0:6a:5d:98:87:7d:24:6e:
                    09:b2:03:aa:c8:8c:b5:21:8a:d6:1f:bb:7b:65:84:
                    9b:8f:d4:25:df:11:17:08:4f:90:41:ba:f8:8e:7b:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:10:9A:76:9A:C7:01:94:85:D7:C3:D7:37:DE:DF:BB:BD:92:A6:84
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/mRCadprHAZSF18PXN97fu72SpoQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.219.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2b:73:43:eb:bd:39:04:64:81:a3:17:56:7e:7a:49:58:7e:97:
         11:95:a5:8e:b6:c4:5e:16:26:d4:07:d2:6f:b5:fa:64:aa:f1:
         a3:20:8c:6b:71:a8:b9:69:fe:33:2e:8c:1c:ab:f0:69:f9:5e:
         6d:fb:77:63:a9:90:66:53:76:95:e0:e5:38:7f:27:fa:a9:79:
         8a:17:9f:4b:cb:1d:65:85:61:2e:cd:c1:8a:7a:bf:98:fe:49:
         7e:4c:c7:b9:45:5e:f9:99:ba:ab:46:d6:f3:1a:1f:f6:49:a6:
         13:2d:ce:df:40:ad:3b:94:7b:61:25:93:c0:c5:55:57:54:08:
         b3:f4:bc:d8:20:1c:f1:c7:cd:ed:8e:33:ec:d6:4d:a7:1e:d8:
         b5:f0:58:86:85:8b:d8:49:49:9c:78:60:a9:59:67:c6:05:b5:
         ed:27:f2:ea:ad:a1:89:9b:77:09:ec:1d:2a:f3:b4:30:b9:1a:
         ff:0e:6d:16:0c:ca:de:a8:49:8f:ea:b6:74:8b:bb:af:b1:44:
         c8:d7:d4:c7:a4:77:9c:71:35:d3:69:0a:d0:06:6c:35:61:c8:
         6e:e4:30:a4:45:9b:00:0a:e3:65:72:09:da:1e:17:63:ff:a2:
         31:e3:c0:da:7f:4b:d9:43:a9:74:98:f3:ba:3f:02:44:5a:3b:
         e2:84:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org