Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/U8SLBYCb-RrXpTUwmtuay9cns7M.roa
File:                     U8SLBYCb-RrXpTUwmtuay9cns7M.roa (raw, json)
Hash identifier:          3sBcramHeR3DnKliRWHfpABFx2rWJkMoCSMApn6Asic=
Subject key identifier:   53:C4:8B:05:80:9B:F9:1A:D7:A5:35:30:9A:DB:9A:CB:D7:27:B3:B3
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       07
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/U8SLBYCb-RrXpTUwmtuay9cns7M.roa
Signing time:             Mon 03 Oct 2022 07:41:53 +0000
ROA not before:           Mon 03 Oct 2022 07:41:53 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     45677
IP address blocks:        180.148.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Oct  3 07:41:53 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=53C48B05809BF91AD7A535309ADB9ACBD727B3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:14:80:69:6d:6d:c3:0c:57:43:33:6d:99:
                    c3:f4:b4:a0:6d:b9:f2:17:d7:9f:f1:c4:7a:0a:a1:
                    4e:59:4c:18:36:63:75:b4:81:af:7e:ae:f8:dd:21:
                    67:7d:fc:94:74:6b:85:28:f2:a1:c4:9e:12:51:a8:
                    4f:93:e9:ad:31:27:66:4b:0f:1e:78:b2:bd:12:2a:
                    d4:1a:65:77:e5:5b:b4:05:4e:64:9b:de:dd:50:ce:
                    d6:ae:e1:14:ab:5d:ad:4d:87:30:4c:11:06:de:53:
                    69:05:ea:16:a5:f8:b0:f5:d2:3b:64:62:91:ba:30:
                    fe:b5:fd:08:bf:d1:9e:e6:55:25:3d:a3:0b:3a:5d:
                    cd:e7:7e:2c:61:05:32:81:2e:52:70:ad:d3:43:da:
                    b9:01:df:83:fd:7c:3c:96:16:48:e8:5b:ed:00:3e:
                    21:81:38:f4:f8:2a:97:b0:75:b0:95:ae:88:ac:d2:
                    3f:3c:5a:16:f9:c3:cc:5d:67:47:36:0e:16:22:21:
                    45:f8:60:a3:f6:3c:84:1f:4f:4c:c6:d3:80:63:10:
                    55:1d:97:e9:11:56:f7:9c:56:48:f6:12:7b:c1:07:
                    05:2a:4b:e3:f3:fe:e1:80:8c:83:66:59:e2:ad:34:
                    3b:10:31:24:41:41:8f:04:fa:86:f8:b8:ca:49:fa:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:8B:05:80:9B:F9:1A:D7:A5:35:30:9A:DB:9A:CB:D7:27:B3:B3
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/U8SLBYCb-RrXpTUwmtuay9cns7M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:c6:28:7d:6d:98:6c:78:69:c0:2c:56:3b:ca:28:0a:19:
         e7:8b:aa:7e:ad:3d:4b:da:7a:eb:65:db:f2:07:10:32:3a:d6:
         9a:f4:99:83:b0:2e:4d:9a:e0:2c:13:d0:6d:c6:44:bf:e0:f8:
         8e:5d:ad:c2:da:01:ac:93:93:fd:50:f4:9f:90:cb:a4:58:49:
         9b:3f:e2:f5:8c:3d:74:67:fd:00:a8:50:c9:fe:24:e0:93:c1:
         12:95:00:cb:e5:1f:c8:af:a4:c1:ed:3a:68:41:49:91:f1:41:
         e3:e3:2a:ac:8c:c1:2c:19:06:73:09:99:bd:e2:44:ef:3d:86:
         2d:50:2e:7a:80:54:f2:7f:cf:49:5a:85:bf:f8:11:1f:6e:f9:
         34:41:3e:92:c6:63:3a:f7:c9:82:e5:3d:e2:1c:77:a2:16:f0:
         5d:97:40:bb:cd:ef:53:0d:bb:b6:7f:36:ac:34:0b:23:2a:8b:
         04:68:39:b2:6c:c8:af:7a:9f:82:2c:f2:b8:5d:bb:14:f1:58:
         71:78:3d:5e:27:3b:ee:1c:f0:c3:b0:7f:3c:58:51:e5:cc:53:
         e2:f4:32:cd:0a:68:d3:e8:3e:57:73:f1:76:9a:35:fc:e4:4b:
         a6:63:ab:33:0e:65:6c:cd:91:e3:6d:e4:13:11:69:bc:c1:cc:
         6f:48:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org