Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/-Xu2tjO7styIAPjoB6YHf82BIs8.roa
File:                     -Xu2tjO7styIAPjoB6YHf82BIs8.roa (raw, json)
Hash identifier:          tZkbQPqZXYJCPV4r8/HTmK/rZQhin/k/hZgpjX5hvkI=
Subject key identifier:   F9:7B:B6:B6:33:BB:B2:DC:88:00:F8:E8:07:A6:07:7F:CD:81:22:CF
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       C7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/-Xu2tjO7styIAPjoB6YHf82BIs8.roa
Signing time:             Sat 01 Oct 2022 01:29:25 +0000
ROA not before:           Sat 01 Oct 2022 01:29:25 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        210.133.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:25 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=F97BB6B633BBB2DC8800F8E807A6077FCD8122CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:f9:c3:05:02:e2:40:12:b0:2e:ea:a3:35:
                    a9:87:9c:01:21:a3:ee:03:83:7f:15:1e:50:b0:79:
                    ca:42:7e:64:c7:57:d1:76:dd:de:fc:b2:7e:46:3a:
                    c8:20:94:25:1d:d8:48:ea:6c:e0:b1:9c:12:34:8b:
                    8e:ea:cf:11:46:e0:e2:14:ba:72:41:83:6b:15:dc:
                    6e:8e:70:a2:96:c5:13:e4:72:7a:f6:e6:70:0c:18:
                    03:1b:2e:3e:da:51:66:1a:8f:b3:4e:3f:c9:de:cd:
                    99:dd:24:db:8a:37:3e:65:45:b7:a4:ab:c8:f4:e1:
                    5f:38:4c:03:ea:44:11:a9:84:36:1e:31:74:ca:25:
                    87:db:3c:ec:73:3e:66:ba:4c:3c:34:2c:72:2c:95:
                    b3:6f:ac:86:ed:e2:df:4e:78:9d:05:1b:23:74:81:
                    9e:7b:fc:de:c9:6a:90:89:16:7b:0b:4c:1d:51:ea:
                    92:2a:ff:63:cf:91:6d:4d:c3:61:61:00:42:0f:b8:
                    d1:5c:9f:97:60:97:49:78:b1:b0:3a:90:83:6e:26:
                    27:ee:ad:9d:4b:fe:fd:e8:27:9a:ab:fd:f6:62:76:
                    57:d1:a7:9f:02:b2:86:f4:26:12:72:1d:39:34:03:
                    f0:03:44:a1:b9:84:ed:65:ea:47:d9:33:50:24:15:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:B6:B6:33:BB:B2:DC:88:00:F8:E8:07:A6:07:7F:CD:81:22:CF
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/-Xu2tjO7styIAPjoB6YHf82BIs8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:ba:24:d2:64:79:cd:82:2b:57:02:40:34:0f:21:34:9b:d1:
         ee:84:ca:f4:24:bf:26:5e:db:c1:3e:9c:3f:28:f6:1c:98:a1:
         1e:fd:71:f7:4e:e2:53:e5:fd:8b:f6:b5:bd:5f:4f:ad:29:d9:
         d7:7b:64:ab:d6:13:1b:62:70:70:6f:5b:0a:8e:8b:45:6b:a1:
         79:06:80:8b:64:2b:5a:2d:02:6b:fa:82:56:f4:2c:c4:83:0e:
         3e:8b:4b:a8:0c:e8:4a:49:8c:f7:63:24:9e:43:39:1a:13:07:
         01:c4:b9:4b:a0:30:89:14:18:c5:05:75:b7:71:04:d6:f9:cd:
         e2:4c:5b:27:72:b7:e0:9e:3e:dc:c1:0a:1d:6f:77:c6:08:49:
         66:78:c1:5f:e3:a9:b6:59:01:c7:97:25:87:18:5e:da:45:b5:
         18:96:9d:7d:e4:02:32:6d:76:a6:88:01:3f:e5:18:bd:a4:f5:
         3b:36:21:37:b7:2d:62:03:9d:37:c8:bb:55:76:ef:a6:da:69:
         7c:a2:ac:dd:28:50:9a:5d:66:e9:3d:16:a2:cb:b4:b5:d8:0f:
         d4:74:0c:21:27:88:9f:15:49:ae:a9:87:74:4b:80:70:a0:0f:
         37:b0:d6:5b:f2:a5:23:4e:6e:d9:0b:2d:8b:26:d9:fd:a6:5b:
         72:85:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org