Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/k7UlROszsS3ctB-hCealGymYF-A.roa
File:                     k7UlROszsS3ctB-hCealGymYF-A.roa (raw, json)
Hash identifier:          RXM9oFCc4wInWhH6LiU+UK0JUj6oXkBFCI8P/snGAJA=
Subject key identifier:   93:B5:25:44:EB:33:B1:2D:DC:B4:1F:A1:09:E6:A5:1B:29:98:17:E0
Certificate issuer:       /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial:       2A
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/k7UlROszsS3ctB-hCealGymYF-A.roa
Signing time:             Thu 01 Sep 2022 01:28:35 +0000
ROA not before:           Thu 01 Sep 2022 01:28:35 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     55900
IP address blocks:        198.144.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
        Validity
            Not Before: Sep  1 01:28:35 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=93B52544EB33B12DDCB41FA109E6A51B299817E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:60:07:00:30:42:5b:61:37:85:a6:ac:22:
                    15:ae:78:7a:93:18:b5:ae:2c:0d:29:c8:c8:44:7c:
                    06:2e:83:57:1b:63:c6:d8:3f:0b:09:92:f7:0a:86:
                    d2:0e:6c:b5:ef:db:36:a3:d3:1c:8e:47:a3:67:f8:
                    af:15:f2:ab:4e:f3:fd:dc:04:81:a4:2f:c1:66:b4:
                    a7:0e:6c:be:9d:f9:bc:10:28:fd:9a:34:81:51:e3:
                    a8:69:ae:16:7b:93:9a:9d:0d:0e:af:9c:3c:81:9e:
                    81:a1:2c:16:47:9a:f4:4c:38:c3:5b:f6:e8:19:c1:
                    ef:43:09:cf:28:3e:ec:d3:4a:d3:ae:1e:1e:00:5a:
                    90:8a:3d:2d:09:25:fb:dc:8c:f2:43:aa:9e:63:59:
                    18:cb:89:0c:b6:82:87:3d:9a:44:a8:ba:61:f4:1b:
                    b8:36:02:7f:8c:0a:fc:ba:1c:5e:3f:64:8d:60:bc:
                    07:f2:0a:ec:c5:91:78:9d:8a:0a:20:39:69:06:8a:
                    20:20:f4:c6:e1:54:1d:a2:cb:5a:17:cc:9b:d8:94:
                    fc:d6:74:dc:ce:80:c5:69:27:fc:ec:3b:ad:18:1b:
                    df:cf:d7:be:e7:6f:dd:6b:c1:dd:7a:ed:2f:2a:aa:
                    b9:87:1c:fd:f1:dc:02:a8:f3:99:cc:8a:c9:7a:c1:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:25:44:EB:33:B1:2D:DC:B4:1F:A1:09:E6:A5:1B:29:98:17:E0
            X509v3 Authority Key Identifier:
                keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/k7UlROszsS3ctB-hCealGymYF-A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:de:b3:75:bc:27:e8:9a:a1:1d:de:61:5a:ec:d3:66:cc:
         b5:47:cc:ab:65:60:9a:9c:10:b5:eb:a0:63:46:36:be:43:dd:
         36:5c:3c:e5:84:0c:5d:24:a6:53:58:f4:c5:fb:3f:dd:f5:ac:
         53:26:2d:1c:67:b5:0a:03:c2:c5:52:f0:33:7f:34:11:e1:29:
         22:64:75:6e:5d:ec:85:97:ed:6c:c7:8a:9c:db:bf:73:30:d6:
         61:77:59:ec:08:26:d8:9e:f8:4a:c4:6d:d4:7c:aa:73:18:db:
         9c:e3:32:aa:8b:4f:f4:c8:f0:d5:49:64:15:80:7c:d8:d7:25:
         83:a3:b3:1a:33:62:2f:c2:87:64:ef:0e:b1:3f:6d:35:8a:13:
         f3:aa:ab:c7:7e:98:10:1f:b8:bd:14:82:51:9e:9d:b2:71:cc:
         e2:49:71:71:ea:00:83:3c:89:94:16:83:d8:26:ac:6e:11:7f:
         13:66:f5:f7:34:0c:43:98:b2:f5:9a:6f:8f:59:fe:37:c9:75:
         64:61:78:ea:35:71:9d:fb:c0:91:c1:eb:82:13:2b:45:70:e1:
         79:0b:3f:f4:a5:0e:da:7e:6e:e8:b5:7e:b1:53:c1:5f:6e:83:
         4a:03:df:d3:8d:2f:71:f9:89:cc:a6:ea:95:8a:be:7f:94:f2:
         ec:2c:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org