Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/HpMHKlQzK-Pg-PZ_fFcABfaUDS8.roa
File:                     HpMHKlQzK-Pg-PZ_fFcABfaUDS8.roa (raw, json)
Hash identifier:          mOpU/tUtnnsOymNQz0clNC0tK13+dMQ7I4R1M6IOP2A=
Subject key identifier:   1E:93:07:2A:54:33:2B:E3:E0:F8:F6:7F:7C:57:00:05:F6:94:0D:2F
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       0D
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/HpMHKlQzK-Pg-PZ_fFcABfaUDS8.roa
Signing time:             Mon 10 May 2021 04:26:20 +0000
ROA not before:           Mon 10 May 2021 04:26:20 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     63786
IP address blocks:        103.123.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: May 10 04:26:20 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=1E93072A54332BE3E0F8F67F7C570005F6940D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:a9:2e:9c:40:8c:6d:e9:fb:ce:ed:64:a7:
                    50:6e:52:a9:7b:d6:f9:01:44:52:a8:27:88:78:5f:
                    88:6c:f5:e3:0a:50:07:9e:01:83:67:86:db:94:c1:
                    3d:b0:d2:ad:37:f5:83:0f:4f:62:16:58:95:0a:49:
                    e9:12:bd:8f:4f:ab:22:bc:14:3c:16:9e:e7:29:ce:
                    ed:ca:95:7e:a5:3c:82:38:10:50:cd:2a:7d:51:4f:
                    92:ac:f0:88:72:14:42:2a:2e:db:cd:d5:34:90:9c:
                    d5:20:bf:ff:62:db:0b:a8:2a:ec:70:24:51:68:80:
                    dd:22:f8:a1:ba:a0:40:0c:ae:18:a8:9e:6c:ad:1b:
                    a5:76:f0:0c:f3:4b:b1:bc:5a:fa:5a:dc:79:85:13:
                    f3:9b:2a:99:11:93:f8:d2:cf:0c:c1:e9:20:fb:1b:
                    f6:d6:3b:cb:1b:52:ff:fc:7e:4d:3d:23:3d:22:bb:
                    75:0a:f2:df:4c:87:7c:68:be:d2:3f:cc:c6:0b:e8:
                    9c:d8:8f:4a:63:5d:ac:1e:85:cf:ec:65:fb:a9:e4:
                    05:89:a2:ad:59:54:e9:d7:23:07:16:7e:52:eb:2a:
                    29:1f:0a:72:93:c5:31:d1:e5:ea:19:79:1e:54:7b:
                    8d:47:4a:c5:2b:bd:c8:b7:93:b3:5d:2a:6e:c0:c5:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:07:2A:54:33:2B:E3:E0:F8:F6:7F:7C:57:00:05:F6:94:0D:2F
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/HpMHKlQzK-Pg-PZ_fFcABfaUDS8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:e2:bc:d0:eb:c3:cb:d7:4f:43:17:ab:86:e5:ed:5e:7b:
         c5:4a:c8:65:75:1d:69:f6:68:9a:60:5f:56:a4:28:ef:00:7e:
         14:5b:d8:ac:dc:49:5a:d7:37:e2:25:e0:e1:60:74:87:02:4c:
         ba:55:bb:8e:2b:a2:46:a1:20:c7:f2:75:39:7d:d5:4c:d7:1f:
         f8:06:df:6f:33:10:48:06:06:53:c7:0b:cf:a2:8a:6b:20:c3:
         0d:69:80:30:ea:ac:19:38:fb:ad:71:72:cd:48:c8:b2:83:b7:
         b0:49:34:3f:db:c4:63:42:65:87:b1:3d:ee:d8:b7:60:c3:9a:
         8b:6d:74:c5:9a:d1:2f:dc:92:d1:f0:49:00:46:3c:37:d2:3a:
         20:43:5b:e1:dd:fd:ab:df:4f:ea:54:d6:8f:a5:42:13:42:f3:
         db:b9:92:9a:94:9f:8e:4a:6f:0e:ec:a1:2e:4e:00:2f:3c:5d:
         37:fa:30:0f:bb:d6:05:fa:1a:1e:71:d3:1f:e8:d5:9a:07:2a:
         4b:05:df:a2:72:a4:fc:d0:64:e7:ba:76:ce:81:d0:ae:60:ff:
         6f:28:5a:4f:a8:c9:69:9c:93:1a:56:65:f9:f6:d4:2a:8a:8f:
         43:45:f2:61:4d:fd:4c:00:e6:4d:ca:a6:81:9e:4a:e0:dd:e6:
         bc:4d:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org