Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/UmDiUX7b6y40ymUjIe4mIwFsbUY.roa
File:                     UmDiUX7b6y40ymUjIe4mIwFsbUY.roa (raw, json)
Hash identifier:          ljzjw2m51ftsf/IR9d24oZBIIK4prQDHAunSlQlyvF0=
Subject key identifier:   52:60:E2:51:7E:DB:EB:2E:34:CA:65:23:21:EE:26:23:01:6C:6D:46
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       4C
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/UmDiUX7b6y40ymUjIe4mIwFsbUY.roa
Signing time:             Mon 17 Oct 2022 05:26:17 +0000
ROA not before:           Mon 17 Oct 2022 05:26:17 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9621
IP address blocks:        125.2.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct 17 05:26:17 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5260E2517EDBEB2E34CA652321EE2623016C6D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:1a:7c:76:16:8f:f5:a6:90:39:f2:2f:bd:
                    75:15:7e:ed:81:6e:0b:41:31:f0:fc:81:15:35:54:
                    95:5e:3b:89:72:12:46:6f:b8:c6:49:1b:79:1d:56:
                    95:1d:26:7f:d6:a0:59:23:ed:10:8e:8f:19:79:21:
                    74:b1:27:2e:b2:f8:30:b9:83:fc:37:0e:98:3c:e6:
                    67:69:12:75:25:8c:e5:7d:db:a6:b7:7c:19:c7:af:
                    46:4f:e4:c6:ad:81:33:23:94:07:23:ed:d0:ef:3f:
                    d5:77:bb:19:74:0b:33:a1:86:eb:95:d6:0c:b8:a8:
                    0f:bc:d9:d4:8b:15:c3:31:d1:12:05:1c:2b:9e:5e:
                    14:be:3e:24:d7:ab:9d:62:d1:72:68:49:61:e4:7c:
                    2c:73:f9:de:c2:0e:a9:16:35:33:51:39:81:3f:02:
                    e6:75:da:1b:84:56:04:48:7a:b7:54:e2:ac:eb:d7:
                    3e:19:c9:d5:f8:34:99:81:73:fb:9a:4b:d4:d1:df:
                    77:c8:75:b7:ff:05:2f:3c:c6:f7:61:31:0e:f6:c1:
                    1a:e1:21:c1:30:d3:9b:0d:09:ac:9b:2b:85:b2:d3:
                    d1:c3:8e:5b:93:0c:8c:e5:a7:34:f6:9a:fc:b4:a4:
                    e0:99:fd:82:07:c1:80:bf:45:49:76:50:f8:3c:d3:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:60:E2:51:7E:DB:EB:2E:34:CA:65:23:21:EE:26:23:01:6C:6D:46
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/UmDiUX7b6y40ymUjIe4mIwFsbUY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:50:0c:3f:3e:fe:8e:8f:aa:41:52:f6:3d:a0:c9:9e:e9:
         2e:ab:a2:f1:27:bf:40:86:d9:ea:e0:85:e5:21:d2:cb:de:92:
         d5:52:04:13:c3:42:87:44:76:29:e7:eb:17:7b:c8:82:fd:0c:
         06:1d:62:4d:18:63:ad:9c:57:f8:1f:14:6e:1d:72:dc:03:3a:
         b1:1d:d8:58:63:8d:42:21:88:8c:fd:ce:f0:66:85:da:7c:d4:
         52:65:78:da:e7:b4:a6:d0:12:e0:4b:c5:44:27:a3:b8:8b:5f:
         49:43:ea:a4:8f:80:a4:72:a7:7f:9d:6c:c5:20:90:7f:9e:15:
         9c:25:34:20:1a:8e:6e:08:65:ad:14:1f:33:27:11:cf:fe:93:
         3d:47:b6:34:1b:e7:0a:32:57:dd:8b:59:fd:9d:fd:61:a3:29:
         11:41:ec:e0:b2:dc:35:f3:23:78:39:a5:0d:32:99:79:69:e0:
         c6:8e:de:9f:0f:7f:f3:5c:68:99:9a:c8:97:d3:94:fb:4f:b1:
         b5:77:76:18:57:3a:03:8d:01:92:74:da:81:2d:f1:d5:10:a4:
         98:dc:a3:58:af:9f:5d:87:2f:b8:c9:33:9b:5b:48:ee:f2:70:
         de:51:41:3b:22:ce:d8:ab:2b:ba:94:ed:ae:c2:e5:1b:63:bc:
         0b:cf:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org