Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/6qOGlau8dPvMSoF9v1QrQaaoGmU.roa
File:                     6qOGlau8dPvMSoF9v1QrQaaoGmU.roa (raw, json)
Hash identifier:          JNDUpG5yCUKcPCCdvQG7Cp49dZPu4LqKTaujgzLgcaA=
Subject key identifier:   EA:A3:86:95:AB:BC:74:FB:CC:4A:81:7D:BF:54:2B:41:A6:A8:1A:65
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       08
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/6qOGlau8dPvMSoF9v1QrQaaoGmU.roa
Signing time:             Thu 13 Oct 2022 06:48:05 +0000
ROA not before:           Thu 13 Oct 2022 06:48:05 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        114.134.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:48:05 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=EAA38695ABBC74FBCC4A817DBF542B41A6A81A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:c5:5a:00:fc:58:30:ab:73:82:10:ec:80:
                    af:67:6d:65:77:3a:8d:56:be:8b:4e:2d:14:39:74:
                    4f:a1:ee:c9:ee:7f:83:e6:dd:09:20:3b:fe:9e:33:
                    b3:d2:15:ea:0a:38:bd:c8:56:11:a0:94:22:df:63:
                    a5:64:0d:be:66:be:ef:5e:86:02:93:bb:d7:b5:78:
                    3b:82:75:ec:77:ac:11:1b:a0:e6:58:75:f7:9d:cc:
                    ca:ab:b2:e8:5a:7a:e3:00:26:62:f0:87:96:95:4a:
                    27:5c:48:c1:11:d6:9a:9b:d7:17:65:c3:b8:3b:b5:
                    a9:22:59:6e:64:ad:12:38:00:34:87:cf:79:43:36:
                    28:39:37:7a:ac:40:b7:21:04:c5:51:e5:a4:14:1d:
                    58:32:42:a5:48:4e:c7:63:8d:5d:93:fd:da:1c:43:
                    52:ec:2c:76:bc:b1:cf:34:d7:d3:2e:03:b3:54:9e:
                    48:00:cf:ee:f0:b5:e9:46:88:42:c7:25:51:57:50:
                    12:84:c4:b4:7e:ff:4b:de:11:dd:68:8c:46:90:55:
                    04:10:80:f2:ff:e3:d4:de:5a:c4:6f:94:a8:90:32:
                    87:e5:a4:0a:f1:60:cd:aa:60:cb:fa:1e:0a:e5:f6:
                    01:dc:ea:bb:62:b5:be:c5:e1:40:6a:a4:4c:f4:a5:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A3:86:95:AB:BC:74:FB:CC:4A:81:7D:BF:54:2B:41:A6:A8:1A:65
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/6qOGlau8dPvMSoF9v1QrQaaoGmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:a2:d1:34:1d:68:09:6b:ab:0d:c0:61:58:2f:81:b1:b2:
         37:76:82:07:2d:86:22:1b:c2:4f:e1:2d:a0:28:95:ac:75:37:
         64:8f:f4:c2:fe:12:1c:e1:7b:4d:79:31:60:3b:f8:9c:b6:d0:
         57:f7:15:11:c3:ef:1a:2d:ea:97:96:6b:7c:b7:b1:19:a2:ce:
         c0:9e:78:c0:6d:f2:40:4b:50:06:0a:ac:03:0c:b3:24:16:90:
         17:55:8d:65:ff:bc:54:b3:fd:b2:95:2d:56:14:d0:23:85:95:
         43:38:34:43:4d:e7:01:98:9b:de:a4:3e:e6:7e:ed:79:1b:a4:
         dc:6d:a9:ee:7d:ac:b7:06:a7:5a:6c:0c:09:1b:7c:88:42:c7:
         9e:8a:71:8f:b6:f0:8b:3a:13:ee:55:c6:e0:77:fb:a9:57:ea:
         50:bd:86:82:2e:17:47:40:67:bf:be:90:ba:bc:00:71:f4:ab:
         ff:8f:9e:dd:71:78:de:ce:53:fb:56:06:79:ae:c9:e2:4a:2f:
         a5:6c:32:9b:02:42:cc:9e:6d:3b:97:2b:fc:2e:bb:e0:2d:b0:
         58:ef:a5:f6:57:d4:d5:82:62:eb:8c:1e:74:66:46:a1:a5:20:
         d8:bd:31:5c:47:15:13:6a:37:4e:3e:8a:6a:99:f5:01:34:79:
         76:6d:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org