Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/zCxeN50Q1V7MfeybFHB_wSEL_y0.roa
File:                     zCxeN50Q1V7MfeybFHB_wSEL_y0.roa (raw, json)
Hash identifier:          YaW5B+ziB4L75zqrU46C9xPwtt/ayN13fjJUhEvu+CE=
Subject key identifier:   CC:2C:5E:37:9D:10:D5:5E:CC:7D:EC:9B:14:70:7F:C1:21:0B:FF:2D
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       0A
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/zCxeN50Q1V7MfeybFHB_wSEL_y0.roa
Signing time:             Thu 28 Oct 2021 02:13:02 +0000
ROA not before:           Thu 28 Oct 2021 02:13:02 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     131921
IP address blocks:        153.123.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Oct 28 02:13:02 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=CC2C5E379D10D55ECC7DEC9B14707FC1210BFF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:80:f9:bc:5a:9d:7c:4b:cd:fa:09:81:67:
                    6e:de:21:1c:51:ef:f0:b1:73:06:e9:65:db:c4:92:
                    ce:91:24:38:1f:66:8d:4b:7a:92:b9:fb:70:55:37:
                    22:83:2e:b6:cc:ff:85:47:ad:8e:f9:ef:82:96:05:
                    18:2e:b6:09:98:d0:26:de:27:35:1f:3d:71:88:46:
                    39:ff:d2:c3:70:b2:69:0e:b6:5f:32:a9:2e:56:e5:
                    2d:bd:78:37:5b:92:92:65:ba:57:04:3c:d2:48:0c:
                    dc:31:c6:d9:24:31:59:bc:4f:87:39:0c:4b:6d:39:
                    79:33:54:98:1a:4e:97:81:b1:b2:7c:b6:4e:f3:9b:
                    79:36:34:37:7b:49:92:6d:f8:3f:83:65:f7:45:fa:
                    b4:43:ae:b3:56:aa:5a:8f:32:99:92:73:2f:74:f3:
                    27:a5:a4:9e:66:0a:e7:28:dc:6c:b3:42:72:c0:04:
                    e6:4f:e4:31:99:d8:bc:ba:a1:3b:31:ad:e0:8f:c2:
                    75:96:e4:6c:82:c3:4a:cb:e1:4e:85:50:cc:c3:c3:
                    87:16:81:ac:17:a5:ba:d4:9b:b5:ad:b6:70:80:95:
                    48:de:98:2a:5c:28:be:e1:15:f3:8d:89:5a:4f:cc:
                    04:df:f4:da:b7:da:f5:37:b9:5b:bf:71:f4:0c:fa:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:5E:37:9D:10:D5:5E:CC:7D:EC:9B:14:70:7F:C1:21:0B:FF:2D
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/zCxeN50Q1V7MfeybFHB_wSEL_y0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.123.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:7c:08:03:53:ee:f2:d6:b4:a3:3c:4c:23:49:2b:47:74:
         60:44:9a:69:79:0a:da:5e:a9:4b:49:33:af:45:15:7e:67:98:
         a0:94:59:f4:e1:76:21:8c:68:fa:02:9f:ef:95:d0:c0:a2:78:
         62:a3:c2:5c:46:49:9d:6e:12:bd:44:75:a4:25:17:6b:80:78:
         28:4f:5b:3e:38:c9:80:47:f3:69:86:68:fd:2b:55:8f:7d:66:
         9f:6f:c2:e3:e3:56:83:4b:45:3f:61:bd:54:54:0d:2a:7f:71:
         83:b9:17:12:60:bd:48:d9:0e:0d:d3:d2:63:47:1e:25:62:02:
         74:10:1d:e4:e3:fb:ac:58:4f:d7:2d:e3:ff:4c:7e:34:2e:15:
         76:80:ce:7a:6c:c7:3e:63:7b:2d:9f:97:f2:1f:05:aa:72:6f:
         42:9f:aa:51:69:5a:e3:33:f9:30:b0:1f:c5:5b:a4:f9:2d:03:
         ea:f6:ca:8b:c5:8b:79:92:64:41:43:e1:46:cc:65:3b:a0:21:
         89:81:40:9b:9a:a2:d3:1a:c4:bc:2e:8b:ac:63:35:a1:c3:fa:
         e1:64:d4:a3:a7:ad:dc:c9:c7:9a:be:6c:40:07:37:51:76:d9:
         59:c6:cf:d6:7a:be:d4:51:30:e9:3a:e0:0b:32:cd:7d:82:61:
         ba:95:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org