Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/RMEDM-RazavybGp-7A8D0OGgneA.roa
File:                     RMEDM-RazavybGp-7A8D0OGgneA.roa (raw, json)
Hash identifier:          y8VQqCsTuoStD0rm9v+AMHAn4EUXTcEUSoANcTbptPA=
Subject key identifier:   44:C1:03:33:E4:5A:CD:AB:F2:6C:6A:7E:EC:0F:03:D0:E1:A0:9D:E0
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       46
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/RMEDM-RazavybGp-7A8D0OGgneA.roa
Signing time:             Sat 01 Oct 2022 01:29:30 +0000
ROA not before:           Sat 01 Oct 2022 01:29:30 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     55900
IP address blocks:        43.248.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Oct  1 01:29:30 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=44C10333E45ACDABF26C6A7EEC0F03D0E1A09DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:20:5f:af:af:66:f4:79:5b:54:7d:c8:e9:
                    cd:69:45:66:45:f4:97:f6:60:1c:99:e1:52:8c:38:
                    9b:45:15:0a:2c:2a:09:76:26:44:12:53:25:0d:0a:
                    4a:82:2d:06:7c:e0:d0:67:9a:27:c4:ec:c9:37:eb:
                    8b:f1:2e:da:00:6e:18:cf:5e:83:b6:92:20:94:00:
                    e3:21:1b:7a:09:53:db:b3:19:b9:eb:51:6e:9a:4a:
                    b5:61:d9:93:9c:48:35:d4:46:88:03:ea:fc:2e:3f:
                    73:34:a0:ea:5d:0a:f9:3c:81:8c:57:19:47:aa:d7:
                    a6:77:29:cc:1f:79:86:5e:49:2b:c4:1b:0a:3b:dd:
                    a1:20:2d:e0:ed:ad:19:aa:1b:28:8a:0a:cb:1a:57:
                    1a:73:d2:86:f4:4e:96:01:b9:d5:ad:2d:54:05:86:
                    9d:d5:8a:13:ab:d3:b2:80:25:1e:12:b4:4b:3a:1d:
                    af:4f:3c:38:a7:7e:3d:1c:15:d5:06:3c:4f:87:78:
                    c1:10:57:d9:79:5f:57:ec:87:33:c2:6f:ef:2d:11:
                    27:2d:62:18:2f:1e:e5:0d:25:66:c0:1c:0e:e8:74:
                    69:79:5e:fa:2b:29:41:33:29:f8:0a:c9:46:4c:c4:
                    90:6e:8d:92:3a:62:1b:52:fd:05:20:e6:5e:74:8a:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:03:33:E4:5A:CD:AB:F2:6C:6A:7E:EC:0F:03:D0:E1:A0:9D:E0
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/RMEDM-RazavybGp-7A8D0OGgneA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:67:ce:93:98:9f:40:93:4d:d9:6b:23:3a:f7:5f:c0:dd:
         57:e5:9e:73:44:12:52:7b:cc:33:ed:08:a0:6d:d9:86:55:ae:
         98:2d:66:a3:9a:c0:bd:5c:22:3e:a3:f1:e3:5a:78:ca:6a:f6:
         4f:d5:a1:59:0c:1c:9c:08:fd:5d:05:e4:46:8e:7a:a5:34:0e:
         e9:4f:cd:1b:41:9c:72:a9:13:cb:0e:b3:a3:2d:28:ab:c6:d3:
         18:db:d7:e2:ec:12:d2:df:eb:f0:84:37:53:8c:38:25:db:17:
         e6:99:39:01:17:02:27:4f:6f:07:da:a1:51:9b:2e:6f:30:9f:
         05:27:cc:e0:a2:73:32:ef:d6:c2:5b:c7:9d:ed:7f:35:3e:c6:
         ec:8f:e2:cf:83:3f:c3:9f:60:fa:04:3d:b3:83:5e:2a:b3:27:
         2e:91:c0:83:d1:a8:6c:fe:1c:14:6e:03:c9:59:c8:a5:54:14:
         57:72:f3:dd:f5:ec:86:06:7e:1c:ff:9d:d6:3c:af:71:7d:3c:
         eb:eb:bf:44:12:eb:bc:4f:b1:49:e2:17:53:18:6c:50:d0:01:
         a7:f7:8c:71:a9:06:52:4b:e2:c2:39:4e:5b:b2:90:4a:21:11:
         bd:15:24:86:1a:6e:e9:9f:69:42:39:60:53:91:49:8d:7e:4e:
         63:ea:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org