Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/rL368JPCllO7rmSCDam3apMnZtw.roa
File:                     rL368JPCllO7rmSCDam3apMnZtw.roa (raw, json)
Hash identifier:          xoHd8ZhrhXqtfomilm4PdMI1Cd3hVn+G6bJ6hAL/D0c=
Subject key identifier:   AC:BD:FA:F0:93:C2:96:53:BB:AE:64:82:0D:A9:B7:6A:93:27:66:DC
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       DB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rL368JPCllO7rmSCDam3apMnZtw.roa
Signing time:             Sun 01 Jan 2023 01:31:01 +0000
ROA not before:           Sun 01 Jan 2023 01:31:01 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        121.2.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:01 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=ACBDFAF093C29653BBAE64820DA9B76A932766DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:dd:c0:c9:95:98:aa:0b:a0:09:58:5e:6c:
                    35:15:71:7f:99:fd:46:76:a3:55:80:54:ca:72:c8:
                    fe:11:6f:d6:c8:fe:b3:79:59:57:a6:20:f0:f7:a3:
                    5c:06:21:fe:cc:46:1b:9b:d3:c0:f3:07:84:ed:46:
                    c7:07:81:7a:52:b7:77:3a:46:3f:a6:e9:b7:b4:ba:
                    c6:a4:3a:48:06:af:6e:c1:a4:be:21:91:d1:a6:3a:
                    c8:0b:c6:1c:34:60:47:39:a1:32:15:1d:f5:f0:8f:
                    76:7c:d2:f0:f4:9d:7f:fc:35:ae:92:10:f3:bb:68:
                    11:27:c1:b8:01:e6:72:65:32:85:18:ef:80:9d:40:
                    3d:c6:ad:a0:fb:87:8a:05:a9:d2:a1:06:ef:55:ab:
                    35:cb:70:b9:09:6d:01:c0:8c:12:b3:4a:c4:d3:bf:
                    d7:a0:cc:37:05:e3:b5:fa:c2:3f:3d:9e:b1:f0:74:
                    4b:d3:5e:1d:b0:89:62:78:19:ae:45:5b:70:10:be:
                    ad:7e:8b:b0:14:09:2e:02:be:8d:bb:30:77:27:99:
                    a2:5d:14:3b:d7:d0:a3:fe:d0:e5:35:d9:a4:94:60:
                    4e:f1:d8:c3:44:81:2a:d8:d2:8b:0a:f3:30:7f:b3:
                    70:9d:c8:c4:e1:94:8f:a0:f4:a3:75:a4:f3:da:5b:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:FA:F0:93:C2:96:53:BB:AE:64:82:0D:A9:B7:6A:93:27:66:DC
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rL368JPCllO7rmSCDam3apMnZtw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:4b:92:57:25:28:2a:0b:60:cc:38:a1:c5:c7:ac:1b:c9:
         de:8c:19:3c:d4:d8:b1:fd:99:ca:87:87:9d:e3:e2:91:54:98:
         3b:c0:7a:36:73:7d:9f:72:fc:eb:50:e4:04:72:e9:5d:46:c7:
         f5:60:70:40:5e:60:3f:78:9c:a7:e2:44:f3:dc:e3:c5:ad:be:
         85:9f:28:b3:7f:db:34:9c:ab:f5:ff:64:b9:a0:d9:c1:7a:4f:
         47:d4:07:9e:86:c6:6c:32:89:90:d6:05:a6:6e:44:06:35:45:
         aa:48:38:17:91:d9:4f:5c:49:92:7e:68:8c:86:aa:90:32:d8:
         02:9e:8e:9b:f3:ff:40:fc:fb:b1:c6:e9:9d:6c:d7:27:ea:68:
         60:67:94:4f:d2:bd:68:75:75:ec:e1:99:f9:3e:e4:c6:cd:52:
         a5:8c:07:da:7a:ad:7f:ac:46:a4:e0:08:2c:22:9c:81:c0:b3:
         43:74:ab:db:19:40:3c:ec:79:29:98:93:c9:e2:8b:ec:31:65:
         ef:ab:ab:ae:6f:9a:30:cb:95:3c:3f:bc:86:35:af:42:65:dd:
         d1:57:85:09:3e:50:7b:56:4f:5a:e5:ab:7a:f3:ec:aa:85:f1:
         73:0f:70:5e:29:12:00:09:aa:d5:2c:88:65:61:c1:4f:bf:7c:
         84:9b:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org