Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/8YJsmpLUILms-w1lOvF5NWmut7c.roa
File:                     8YJsmpLUILms-w1lOvF5NWmut7c.roa (raw, json)
Hash identifier:          Z0es8rRI0gOabg6p/29lz+9XnVMSmqjAanDd5W9fMIc=
Subject key identifier:   F1:82:6C:9A:92:D4:20:B9:AC:FB:0D:65:3A:F1:79:35:69:AE:B7:B7
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       08
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/8YJsmpLUILms-w1lOvF5NWmut7c.roa
Signing time:             Wed 11 May 2022 02:31:21 +0000
ROA not before:           Wed 11 May 2022 02:31:21 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     131934
IP address blocks:        180.94.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: May 11 02:31:21 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=F1826C9A92D420B9ACFB0D653AF1793569AEB7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:8b:7a:fc:4a:4c:8a:46:a9:79:d8:02:56:
                    da:48:d8:fb:d4:64:29:0e:de:04:9b:32:cc:9e:29:
                    6b:81:1b:0b:a3:a1:05:43:de:73:6c:6a:d6:0e:7b:
                    0c:3d:96:b6:b5:ef:e4:24:82:96:c5:04:d3:5f:85:
                    7d:74:d8:3a:e1:ad:f3:a0:ba:25:66:13:87:ab:e7:
                    58:a8:d3:4b:70:3b:d5:eb:9c:24:36:f3:04:8f:d1:
                    57:17:6e:08:cc:e6:73:07:82:7c:4a:ef:c1:80:be:
                    1c:2d:3b:0e:1d:27:73:bd:fd:37:ff:1d:ea:1a:82:
                    78:f9:9d:47:b8:e1:1a:06:bc:86:21:78:a3:04:b1:
                    e9:7e:89:0e:35:c7:a8:30:83:69:b4:63:b8:0e:99:
                    52:f9:7f:34:1e:d8:ed:39:af:84:42:07:4e:88:78:
                    a5:4c:14:36:0a:c2:5c:4c:9a:5b:e5:f8:3e:5b:d1:
                    fd:18:69:9b:8d:78:3d:bb:70:16:b3:57:3c:b4:f2:
                    c5:ac:c3:83:64:96:f9:1a:1c:b9:8f:cf:61:6a:3f:
                    81:ac:89:fc:a7:0e:7b:81:f5:2c:08:fd:f0:1e:b9:
                    cc:4d:1f:a9:71:30:69:95:02:11:ae:c2:fb:a8:b5:
                    68:56:98:07:23:03:29:17:aa:b1:7d:06:55:07:ba:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:82:6C:9A:92:D4:20:B9:AC:FB:0D:65:3A:F1:79:35:69:AE:B7:B7
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/8YJsmpLUILms-w1lOvF5NWmut7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:97:94:b3:2f:44:2c:3c:1f:4a:56:47:78:b0:ee:2f:54:
         5d:04:98:c6:42:c1:76:58:df:44:5e:22:36:6c:ff:7a:76:07:
         2c:06:df:e2:ee:e0:8d:e2:49:36:24:d8:14:fa:4b:e7:af:70:
         87:fa:ff:b0:1c:a1:79:4d:20:04:ab:70:d7:54:fd:1d:98:2c:
         9e:7f:71:65:9e:5e:7a:bc:55:43:99:75:31:d9:a9:4f:b7:f1:
         11:f7:3a:e6:4a:b2:95:92:4a:ae:86:e6:dd:39:c7:d9:9b:d3:
         03:f6:05:5b:fb:f1:07:a3:d3:ec:a7:9a:3f:01:5b:0e:f4:37:
         c0:bd:cf:a8:b7:e0:b3:d8:7c:6e:65:bf:cc:47:20:e6:57:72:
         d6:7c:fa:69:32:21:af:65:00:55:b0:13:15:2a:b5:2f:3a:56:
         0b:b4:24:0b:1e:39:1c:28:72:bd:e8:4b:18:b7:09:4e:34:5f:
         e5:4a:6c:aa:50:69:54:96:db:90:11:3f:a7:20:3f:5a:77:47:
         ac:17:7a:ba:76:08:1c:bd:0d:53:dd:6a:7e:8d:49:a5:5d:63:
         7a:1e:99:06:c6:d8:30:be:10:74:c7:18:41:56:5e:27:82:bf:
         5b:4b:18:e5:72:bf:34:d5:2e:de:aa:75:25:5c:86:86:ed:5a:
         49:28:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org