Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/fBH7ARzhreGkFH54YCVXSQ4EjRE.roa
File:                     fBH7ARzhreGkFH54YCVXSQ4EjRE.roa (raw, json)
Hash identifier:          aeKw+EHhVwENYdIdkEArp+NF/yYVvncI7QyEUJPw0pQ=
Subject key identifier:   7C:11:FB:01:1C:E1:AD:E1:A4:14:7E:78:60:25:57:49:0E:04:8D:11
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       14
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/fBH7ARzhreGkFH54YCVXSQ4EjRE.roa
Signing time:             Thu 13 Oct 2022 06:56:13 +0000
ROA not before:           Thu 13 Oct 2022 06:56:13 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        202.169.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:56:13 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=7C11FB011CE1ADE1A4147E78602557490E048D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:c7:dc:fa:e0:82:e0:b0:22:e8:cb:0e:b9:
                    b6:79:5b:2d:3e:21:fd:9e:ad:d1:6c:72:a4:20:10:
                    1a:59:53:66:40:f1:48:41:76:f4:e0:8f:dd:74:12:
                    05:f2:4f:11:89:c5:ba:42:76:a5:4a:76:97:1b:3e:
                    18:84:1d:f6:06:f0:51:43:6b:c2:bc:cd:8c:28:41:
                    5b:9e:fc:9e:d4:12:4e:da:9d:6a:4c:8f:47:f1:54:
                    24:20:4c:f1:60:7d:03:7b:bf:0a:05:a4:d4:d0:05:
                    65:dc:a8:f4:d8:f4:d6:ef:68:eb:21:97:01:13:a9:
                    26:50:5f:86:c1:84:13:4e:37:15:3d:cf:70:9b:5e:
                    9b:bb:4d:e2:54:2e:45:89:5c:7c:b6:26:7a:80:c6:
                    f1:27:fc:37:81:d9:fc:d7:a2:81:16:72:b6:80:33:
                    66:68:09:08:f2:40:33:34:74:d0:84:15:e8:0f:6b:
                    09:5a:80:f0:d1:a8:a5:79:2b:34:a2:5a:6a:47:cc:
                    20:78:42:6f:d9:e6:4f:7e:f5:14:a5:93:75:05:86:
                    0a:8b:13:87:fc:26:b2:6b:d1:42:8c:34:ed:77:af:
                    59:79:a4:8c:9a:f0:35:91:15:f1:f8:cf:8e:91:77:
                    70:45:4d:aa:be:c0:9a:db:3b:4d:96:61:ae:ab:25:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:FB:01:1C:E1:AD:E1:A4:14:7E:78:60:25:57:49:0E:04:8D:11
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/fBH7ARzhreGkFH54YCVXSQ4EjRE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:1a:10:d9:be:f1:a1:f7:ae:ef:b7:11:71:c8:29:52:9a:86:
         0c:c2:ee:db:60:78:ba:c2:5a:7a:2f:0b:38:b4:46:52:15:ee:
         6e:44:28:3c:bb:89:03:c5:e3:17:b5:b8:4e:4f:25:af:4b:7d:
         d9:29:d1:73:61:75:d0:88:bd:06:39:cb:72:e8:41:8e:c4:69:
         d2:a9:73:49:b5:3e:9a:17:b2:d8:54:f8:3c:a7:01:5a:ee:82:
         fa:64:a0:9c:d4:dd:f6:75:da:bf:bd:2e:26:99:67:4f:4b:56:
         4d:8e:cb:a4:33:91:ee:87:0c:2c:e5:89:93:7d:58:db:0b:12:
         68:05:a9:0b:b9:f2:01:9e:dc:64:7a:72:40:ce:a1:56:b8:cf:
         43:11:b1:48:41:f9:a0:c7:d6:e4:47:a0:08:b5:90:85:b5:7b:
         aa:be:57:39:e4:13:a3:1f:46:04:ba:e5:44:41:2a:e6:c6:2f:
         7e:c3:7d:5f:29:ec:e2:9b:48:db:46:81:6c:96:02:68:b6:78:
         39:7b:b7:48:8b:9d:8b:c8:22:68:f7:75:b7:fe:53:97:a0:70:
         09:2f:a9:7c:37:ad:6d:a3:65:1a:e8:cf:dd:16:68:e8:4b:1c:
         ba:8d:7c:54:87:95:dd:f4:a7:85:96:a0:65:11:83:85:df:15:
         a0:3e:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org