Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/fycsBRqrZgLVPk2x7j_pHsGk-Lg.roa
File:                     fycsBRqrZgLVPk2x7j_pHsGk-Lg.roa (raw, json)
Hash identifier:          K67jqsJdOJOxvsaltD8J1vaT9TvjKk7bdulxmngkjGk=
Subject key identifier:   7F:27:2C:05:1A:AB:66:02:D5:3E:4D:B1:EE:3F:E9:1E:C1:A4:F8:B8
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       54
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fycsBRqrZgLVPk2x7j_pHsGk-Lg.roa
Signing time:             Mon 01 Aug 2022 01:29:01 +0000
ROA not before:           Mon 01 Aug 2022 01:29:01 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        210.151.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:01 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=7F272C051AAB6602D53E4DB1EE3FE91EC1A4F8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:f2:fd:6b:aa:29:58:63:09:37:a3:9b:9a:
                    03:da:96:17:71:c4:1d:46:c4:5f:2c:eb:d6:b1:b5:
                    ff:90:f4:ce:e9:1d:69:54:16:3d:2c:14:6e:d5:9e:
                    44:80:ee:07:61:bc:c6:04:ab:25:14:21:fa:ef:13:
                    5f:66:24:25:03:64:cc:22:4d:bd:68:db:29:b7:e9:
                    d7:cd:ad:1a:60:05:f1:c9:62:50:e4:ae:05:36:04:
                    eb:75:6d:28:1a:85:fc:01:9c:ea:13:fa:b0:6f:c3:
                    f3:75:e4:f6:7d:66:9f:81:43:d5:5c:b7:09:07:f3:
                    06:85:07:43:f4:57:5c:c0:46:d5:92:be:52:ed:39:
                    ab:b5:7c:c7:c9:6b:2c:16:ca:5e:00:0f:d4:e8:92:
                    e1:cb:5d:4c:c5:b5:eb:ee:a9:b3:a0:f1:bd:59:7d:
                    c3:5e:9a:29:29:12:ab:62:43:ae:04:0f:76:5b:72:
                    2f:ce:9d:e4:08:45:b5:86:9b:bc:7c:9b:30:c5:1e:
                    f0:ec:d2:97:a5:85:b1:87:c0:5e:8b:1a:07:63:97:
                    98:af:bc:f1:c3:92:f0:5f:37:3c:01:49:94:5c:7b:
                    3e:d6:84:d7:dc:61:7d:a8:9a:d5:c8:c2:85:a0:b2:
                    ec:fd:e5:de:cb:d5:6a:de:b3:d3:b7:24:93:24:ca:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:2C:05:1A:AB:66:02:D5:3E:4D:B1:EE:3F:E9:1E:C1:A4:F8:B8
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fycsBRqrZgLVPk2x7j_pHsGk-Lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.151.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:dc:20:44:13:cb:0e:ba:95:c3:28:80:e9:f5:81:82:4a:
         9e:a2:e2:b9:bc:24:e3:1d:40:94:85:e8:30:30:a4:ff:54:d4:
         8e:7b:59:27:8f:b5:dc:f0:88:7f:b4:82:2b:70:6d:d5:0b:e8:
         ac:83:71:91:3c:8d:df:8a:a7:3e:b6:e6:bc:3d:0a:a6:29:58:
         2b:61:b9:f4:17:2a:75:f1:8e:35:3a:f8:73:7c:98:5b:be:83:
         fa:c8:02:d8:4d:51:fe:07:f5:5b:53:4a:54:51:57:98:5f:40:
         cb:ed:e1:7c:e6:c9:94:67:71:40:e5:64:7e:23:3b:91:1d:59:
         a7:65:b4:40:15:3e:c3:fa:b7:e1:80:f0:c9:ee:74:2e:24:ba:
         45:bf:f8:cd:00:27:d2:9d:16:12:7d:96:3a:f7:b7:10:ca:fd:
         ab:12:b2:28:6a:58:99:01:5f:a7:6a:9a:ba:a9:c2:98:90:b5:
         18:9f:5e:c4:40:97:a2:1d:35:14:43:4a:ea:f3:bb:11:81:ea:
         7e:0b:5a:0d:38:c6:79:57:01:96:05:d2:74:2a:4d:0e:77:5d:
         77:2f:f8:d1:1f:83:14:f2:c2:e0:f4:0c:5d:ac:a0:df:86:b4:
         d8:65:cf:a1:5e:13:e2:b1:b9:9a:75:6b:7d:82:10:6f:09:8a:
         24:ff:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org