Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/PutOJeQm8HiFmLuJsS5Cl6tLqCg.roa
File:                     PutOJeQm8HiFmLuJsS5Cl6tLqCg.roa (raw, json)
Hash identifier:          O0gdzNudesn6jc5m6N8R3hKK6C/qwzshouNM2CSzCGg=
Subject key identifier:   3E:EB:4E:25:E4:26:F0:78:85:98:BB:89:B1:2E:42:97:AB:4B:A8:28
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       1C
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/PutOJeQm8HiFmLuJsS5Cl6tLqCg.roa
Signing time:             Sat 01 Oct 2022 01:29:54 +0000
ROA not before:           Sat 01 Oct 2022 01:29:54 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     131921
IP address blocks:        153.122.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Oct  1 01:29:54 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=3EEB4E25E426F0788598BB89B12E4297AB4BA828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:36:51:26:1b:2f:af:20:1f:39:af:cb:9d:
                    e2:b8:30:ca:53:38:ec:57:32:6a:75:c3:f6:92:89:
                    9f:8d:d2:b8:4b:93:32:3f:8d:93:28:ee:13:e9:65:
                    91:5c:05:d0:a5:c9:d9:c2:4b:47:27:88:7f:f4:2a:
                    82:77:99:c6:96:e5:00:97:1a:ae:61:fa:8f:ea:9c:
                    ae:f3:10:44:ba:35:c0:28:bc:c8:d1:ca:02:4e:e0:
                    2b:35:0b:53:0c:0b:8f:d8:26:38:2f:2c:ee:91:c3:
                    f7:7b:2f:47:87:b6:e4:35:b2:83:e3:03:1d:22:7c:
                    86:59:d7:32:5a:9b:7e:91:a3:c1:09:11:ff:7a:53:
                    dd:8f:b0:38:7b:b4:b4:8c:a4:ba:43:b7:f9:20:4e:
                    48:9c:e0:07:99:a7:ce:9b:68:2c:8b:80:49:ea:03:
                    0b:4e:de:42:30:47:1a:1a:2c:bf:0f:76:60:05:d1:
                    77:75:05:0a:98:eb:44:71:f3:62:f9:97:0f:4a:92:
                    02:fe:8a:ba:98:99:1b:4f:8d:93:8d:67:8d:5c:21:
                    02:14:c5:98:fa:72:e9:af:91:35:3d:2f:0a:be:0a:
                    82:63:14:71:b4:d5:13:fb:5c:bd:2e:d6:61:52:87:
                    71:c4:5a:a0:f1:34:08:3e:87:78:b5:2b:16:30:4b:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:4E:25:E4:26:F0:78:85:98:BB:89:B1:2E:42:97:AB:4B:A8:28
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/PutOJeQm8HiFmLuJsS5Cl6tLqCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:51:20:3f:2d:74:17:b5:4f:78:98:33:98:04:7a:ae:11:
         31:34:14:e3:e7:bd:a1:c5:6b:ea:e6:48:4c:43:26:82:b2:82:
         b6:b3:f6:7e:a3:99:16:d5:db:14:09:dc:88:7f:b6:32:fa:02:
         ea:7e:8e:98:31:e1:80:c2:d7:cd:fe:cd:d0:4c:f2:d3:55:93:
         9e:99:05:72:e0:c1:34:24:83:0f:9d:e8:65:6e:ff:72:06:39:
         4d:82:e3:ef:61:d0:f0:ad:e2:66:30:48:f7:f8:84:94:bf:eb:
         6a:a0:73:47:be:a5:c2:b0:9f:07:74:a8:e7:8b:a8:44:d2:09:
         79:f6:47:77:94:1f:a9:e4:12:0d:58:e1:00:41:93:2f:ab:dd:
         d1:3a:53:5e:0c:75:8a:1a:6a:c7:14:2e:02:b9:3d:ff:56:eb:
         f7:89:fa:55:8f:95:8b:3b:65:6b:9b:8a:d6:16:05:aa:04:df:
         4e:8d:80:59:61:72:05:e0:d9:86:59:09:60:3a:ba:f4:8d:f6:
         23:5e:59:53:33:8d:1b:36:cc:2b:df:c1:4b:c4:a8:94:5e:49:
         fe:d4:a7:b1:e4:cb:d6:64:73:3c:52:3b:98:5f:86:ef:f9:75:
         c5:15:e8:60:4d:7e:b0:c2:69:04:fd:c7:82:cb:f2:29:21:a8:
         1b:9d:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org