Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/-ic6OrB7u3PKeYHdaTCffdfZr6s.roa
File:                     -ic6OrB7u3PKeYHdaTCffdfZr6s.roa (raw, json)
Hash identifier:          GIjYIHw+43pNcOc5+0qTkkdsrLJlzHXWXUAsow8YnFs=
Subject key identifier:   FA:27:3A:3A:B0:7B:BB:73:CA:79:81:DD:69:30:9F:7D:D7:D9:AF:AB
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B1
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/-ic6OrB7u3PKeYHdaTCffdfZr6s.roa
Signing time:             Sat 01 Oct 2022 01:29:18 +0000
ROA not before:           Sat 01 Oct 2022 01:29:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        220.100.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=FA273A3AB07BBB73CA7981DD69309F7DD7D9AFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:97:20:bf:eb:9c:24:cd:f0:e2:49:2f:dd:
                    30:e5:78:fe:c3:38:c1:cc:24:54:e3:03:98:68:18:
                    b7:d1:7b:7d:75:66:1f:4f:62:10:6a:92:37:49:08:
                    76:ba:ef:bd:09:41:e0:c0:0c:57:d5:df:01:77:b7:
                    83:03:6c:9f:fe:e1:dd:21:96:7a:2a:0f:b7:e8:0e:
                    d6:fc:22:ad:bd:e9:c8:c9:7e:98:7b:37:48:d5:b7:
                    f7:36:3e:b7:14:55:5d:59:e4:dd:ba:23:cf:89:3f:
                    31:c1:34:ef:be:36:b6:30:21:cd:8f:f4:87:b1:05:
                    d7:90:c0:ef:6e:45:7a:f1:27:44:18:86:59:17:09:
                    18:7c:7a:a5:6b:c5:1a:e8:97:46:0d:21:19:1b:2f:
                    4a:fb:8c:2e:3e:16:77:89:dc:d9:7f:52:d9:64:08:
                    e0:ed:37:34:89:ff:26:2a:c6:09:48:33:01:5d:9f:
                    f7:80:74:b6:30:0b:76:c1:d0:83:09:97:9c:e8:4a:
                    7b:68:33:10:46:ca:10:85:92:c9:4b:c6:84:0e:dc:
                    44:b5:f4:14:3c:d5:80:18:ff:1a:33:0b:b6:dc:1b:
                    7c:07:f6:29:d9:ef:e1:b0:23:52:b5:e9:f1:09:97:
                    6d:f1:b1:11:dc:17:86:0f:15:41:de:fc:b0:ae:a3:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:27:3A:3A:B0:7B:BB:73:CA:79:81:DD:69:30:9F:7D:D7:D9:AF:AB
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/-ic6OrB7u3PKeYHdaTCffdfZr6s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.100.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:2b:f6:76:22:89:14:80:93:f2:75:62:6a:44:c6:b4:f2:
         7b:8a:77:83:c8:27:d5:26:bc:bf:2c:40:16:d1:29:37:e8:86:
         ba:eb:5d:b9:28:45:13:62:7b:32:b8:35:14:61:28:da:a6:5f:
         eb:6a:6f:c6:ce:7d:4c:c2:47:3a:2d:fc:6a:47:f3:55:4c:cf:
         b3:fe:d5:87:dc:eb:b2:81:1d:88:1c:3b:db:dd:ab:05:15:c8:
         00:91:1d:68:d3:4e:59:58:9c:7d:f4:11:ea:ca:6b:23:1c:86:
         d7:e1:47:dc:93:fa:98:40:7b:ce:0c:f4:77:f2:1e:26:fa:ff:
         1f:2f:0d:06:ba:9b:9d:48:b2:88:63:93:3d:5c:fc:0f:f0:96:
         d8:14:d3:56:71:c2:79:ac:87:83:6b:67:91:70:b4:eb:0d:5b:
         17:3f:0d:59:6b:c3:9e:0a:a6:a7:76:6b:63:17:a2:15:7a:63:
         c5:79:7b:b9:98:24:22:fa:ff:f0:d7:a6:3c:ee:0f:c7:74:d0:
         5f:a0:42:97:4e:55:44:55:92:a3:29:99:cd:0d:10:25:ee:4f:
         f4:4c:97:2c:07:2e:94:53:c8:15:d5:da:16:85:3a:f1:4e:48:
         8a:05:d4:93:ce:f6:1c:c9:aa:95:5d:8f:07:c0:5d:7a:c8:9e:
         3d:72:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org