Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/ntxeL7U8aIRuAYSNkLC_UxtGZLo.roa
File:                     ntxeL7U8aIRuAYSNkLC_UxtGZLo.roa (raw, json)
Hash identifier:          DZbupM014ZfN0izn0ydhShNQjvFZtyVWbjfnGo41lew=
Subject key identifier:   9E:DC:5E:2F:B5:3C:68:84:6E:01:84:8D:90:B0:BF:53:1B:46:64:BA
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       7D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ntxeL7U8aIRuAYSNkLC_UxtGZLo.roa
Signing time:             Tue 01 Feb 2022 01:31:12 +0000
ROA not before:           Tue 01 Feb 2022 01:31:12 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        150.147.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:31:12 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=9EDC5E2FB53C68846E01848D90B0BF531B4664BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:d5:84:57:6a:b2:9b:67:1a:f0:8f:a5:e6:
                    ab:c6:64:c4:f9:2f:f0:8b:36:d3:8e:3c:b0:bb:2c:
                    c3:fe:b3:cd:39:d6:c8:0a:1d:d2:79:dd:dc:a2:15:
                    18:31:61:ff:62:f6:1d:b7:60:2b:59:1f:f7:cd:7b:
                    f9:84:d4:f8:a6:45:20:b1:2f:07:c7:7b:94:19:1a:
                    81:65:1d:92:ce:02:1c:eb:96:60:e4:ca:14:4d:13:
                    8f:ad:f5:09:f9:89:98:a4:68:8d:69:42:67:91:24:
                    27:cf:88:3e:34:5b:a9:e7:ef:77:b0:47:ee:d7:8b:
                    c1:13:fd:f0:30:f2:f2:65:4d:41:dd:f0:cb:a1:42:
                    3d:b4:79:27:06:bd:64:a4:95:cc:88:37:ec:ac:bb:
                    1d:e3:55:8b:e3:b0:4d:31:e6:f4:3c:f5:dc:36:5a:
                    7e:59:b4:83:bc:ad:d0:5b:0f:b4:28:25:f4:4e:15:
                    7c:94:80:f9:aa:e2:80:46:8e:f2:ef:45:57:32:18:
                    c8:9f:aa:ae:41:d0:29:0c:fc:59:0a:48:41:b9:a0:
                    16:0a:be:84:2b:e3:06:69:5d:73:fc:d0:66:6e:88:
                    5e:5e:59:d3:91:ac:05:aa:03:36:9f:eb:49:b3:df:
                    8f:b9:86:e2:96:d3:03:33:07:eb:b8:36:eb:d5:e6:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:5E:2F:B5:3C:68:84:6E:01:84:8D:90:B0:BF:53:1B:46:64:BA
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ntxeL7U8aIRuAYSNkLC_UxtGZLo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:15:c7:c2:64:53:71:73:7d:21:a3:eb:3d:50:2f:1e:6f:c3:
         22:97:45:11:4c:d3:87:34:95:8f:5c:52:6f:70:7f:10:5a:44:
         b6:aa:40:5e:3e:1f:ad:f9:6b:55:57:2d:cd:49:04:2e:59:3c:
         8a:c9:74:75:a9:db:e2:6a:af:7c:1f:c6:81:4d:f2:dd:24:df:
         62:0b:7f:1e:34:34:c8:64:73:37:d9:d4:b4:1f:2b:a5:d2:f0:
         c1:87:99:15:61:2b:d2:72:3a:ab:94:75:d8:97:1f:04:e1:5c:
         0a:89:12:4a:43:30:bb:49:55:bb:94:c0:61:3c:9f:78:e0:38:
         6d:23:8e:18:e3:e6:ec:ff:32:c9:7d:b9:e2:85:48:04:16:6e:
         21:b9:3b:47:8b:8c:e8:e2:a6:5e:50:1b:0e:71:64:dd:b1:49:
         87:19:49:d3:e6:be:9c:2d:cc:3f:78:df:84:8f:e1:86:cd:9e:
         43:54:7c:14:a6:2e:28:68:38:f8:e6:c2:0a:58:5b:ad:41:2c:
         e3:bc:2b:0a:b9:e4:e3:d2:8e:8b:b2:c0:66:ee:08:4b:c3:13:
         73:07:6f:b2:7f:f9:4b:3e:a1:a0:1c:e3:04:01:60:f0:21:4b:
         04:e3:8a:33:c2:be:8b:cb:83:fd:ee:65:70:30:f1:98:e5:58:
         aa:7e:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org