Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/ooFR1yP0_aEeA_g2NX7JNucDSZM.roa
File:                     ooFR1yP0_aEeA_g2NX7JNucDSZM.roa (raw, json)
Hash identifier:          MkEBAIHQVlXBH66GNy7gM0Nj1xImksljrU6smBn5++o=
Subject key identifier:   A2:81:51:D7:23:F4:FD:A1:1E:03:F8:36:35:7E:C9:36:E7:03:49:93
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       2E
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/ooFR1yP0_aEeA_g2NX7JNucDSZM.roa
Signing time:             Mon 01 Aug 2022 01:28:54 +0000
ROA not before:           Mon 01 Aug 2022 01:28:54 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     17675
IP address blocks:        122.200.36.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug  1 01:28:54 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=A28151D723F4FDA11E03F836357EC936E7034993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:9c:42:2f:71:21:d8:d7:3d:48:35:46:b9:
                    7b:0b:04:98:1b:93:aa:bb:aa:ec:b4:fe:d0:6b:70:
                    bd:55:0b:f6:b6:ca:6f:6a:08:98:5f:69:93:e7:ea:
                    62:dc:3a:68:19:89:29:28:0a:41:6e:74:a2:f4:70:
                    d9:7b:65:ac:76:ea:69:f2:6d:0e:d3:d9:c4:06:87:
                    f2:43:a3:f9:05:26:3a:8b:32:a4:8a:98:3c:7a:cd:
                    c1:ea:a6:d3:f4:ea:8b:0b:05:30:c6:f3:c4:08:c6:
                    d1:f2:71:a9:f1:f7:0f:1b:6a:f0:82:57:a4:a7:a1:
                    1d:14:9b:7e:1d:65:e3:e7:b6:2a:67:bf:bc:53:0d:
                    de:23:69:57:93:03:49:e3:d1:77:38:2f:d3:b1:03:
                    ad:c8:8c:e8:3d:0e:7a:65:61:8f:17:3c:98:1c:18:
                    43:3b:3a:ea:32:1e:88:55:73:74:9c:8a:1d:c0:b7:
                    4d:72:ed:d4:9c:d5:d2:21:26:a3:b4:81:f9:e3:b1:
                    75:d7:2e:da:9b:49:f6:67:b2:0c:46:40:1f:bb:74:
                    63:34:d9:11:d1:76:48:42:4b:5e:72:96:df:7b:a0:
                    0a:b9:07:b3:24:fb:30:18:65:06:e6:d2:b0:1e:49:
                    e8:f1:14:52:7c:8f:c1:e6:c5:93:08:12:cc:df:ad:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:81:51:D7:23:F4:FD:A1:1E:03:F8:36:35:7E:C9:36:E7:03:49:93
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/ooFR1yP0_aEeA_g2NX7JNucDSZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:21:c5:01:eb:57:22:ef:3a:59:3a:81:da:92:a7:e4:01:83:
         55:c4:d0:ba:0d:56:24:48:e5:99:e9:97:38:24:c4:5e:18:bc:
         df:5b:18:73:35:60:20:44:58:78:03:98:bb:93:d8:5b:bb:dd:
         e5:7d:3c:ce:2a:e3:a4:3b:11:9c:85:74:2c:80:9c:b5:9c:92:
         55:8c:09:08:ea:fc:f0:39:05:82:40:30:bf:63:9f:7d:a1:19:
         d4:14:02:a2:70:c4:b6:68:9e:8b:56:fe:95:a0:40:e3:26:5f:
         b7:6a:a6:96:4e:b8:e7:a4:fc:1d:c4:7a:e3:00:49:53:a9:93:
         e7:8a:ff:8b:bd:71:d8:55:b0:14:07:e9:c0:58:99:e8:13:df:
         2f:53:e2:d4:78:ed:b2:09:70:39:f9:8b:f6:64:30:8d:73:33:
         41:c8:26:37:6b:a4:a6:c7:66:7b:89:39:f3:c0:b3:da:6d:93:
         2d:58:38:b4:90:c3:84:c3:2b:eb:c3:e1:0f:37:3d:3d:ff:c3:
         72:bf:6c:f2:f2:f0:49:f2:21:3a:5b:7d:c0:36:4a:f7:d2:0b:
         76:58:1b:9d:36:87:92:90:43:c2:24:90:f4:05:69:58:1f:af:
         ff:bc:2d:85:0c:10:db:c3:86:57:21:37:e7:d4:ca:a5:d1:1b:
         62:fd:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org