Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/R2dEXB8StTrcvQhor_P6RcxOK_8.roa
File:                     R2dEXB8StTrcvQhor_P6RcxOK_8.roa (raw, json)
Hash identifier:          MgrO8FrI9ud9wFRGXBDAUlc5tOiEkLn61XiDhzOLS6U=
Subject key identifier:   47:67:44:5C:1F:12:B5:3A:DC:BD:08:68:AF:F3:FA:45:CC:4E:2B:FF
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B0
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/R2dEXB8StTrcvQhor_P6RcxOK_8.roa
Signing time:             Sat 01 Oct 2022 01:29:18 +0000
ROA not before:           Sat 01 Oct 2022 01:29:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        220.100.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=4767445C1F12B53ADCBD0868AFF3FA45CC4E2BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:cf:2f:ed:f1:88:c6:45:fe:a7:8c:57:5d:
                    3d:eb:47:6f:ad:3b:7a:81:ce:1e:60:42:dd:cc:df:
                    7d:ae:a9:a5:aa:f9:64:a8:05:59:2e:d7:e7:f8:8a:
                    54:44:c9:57:45:7b:65:58:3a:b4:35:bf:b8:85:97:
                    95:d4:9f:29:20:91:a3:ab:ed:48:84:90:86:1e:41:
                    9e:73:c2:92:9f:72:e7:b6:a5:90:83:ae:27:4d:76:
                    37:69:84:9e:ce:c9:c6:c9:79:4c:85:70:98:ca:85:
                    c7:a7:c7:d8:c5:d9:48:d9:ef:1e:d4:27:a8:3f:b0:
                    69:d4:93:19:69:2f:20:64:40:97:6a:30:2e:f6:be:
                    97:99:44:c4:15:98:b2:52:60:06:f3:9c:9d:41:b3:
                    25:9e:e4:dd:1a:2c:1f:a6:d5:89:f7:1c:0e:ae:11:
                    33:fd:2c:dd:93:58:c2:ac:20:41:7d:fc:8a:44:f9:
                    ad:69:d1:7f:4d:de:b1:55:d6:58:fe:13:c1:98:1e:
                    74:c3:57:39:b0:17:0d:bc:9c:a3:62:4d:8c:fd:a1:
                    4c:f9:63:5e:fc:14:38:ba:3e:ba:e7:50:80:8d:a7:
                    c6:ba:9a:6a:72:4a:1a:13:47:a3:7e:31:8e:26:ae:
                    d6:76:ce:81:d9:45:b6:90:89:4d:d9:91:7f:01:da:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:44:5C:1F:12:B5:3A:DC:BD:08:68:AF:F3:FA:45:CC:4E:2B:FF
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/R2dEXB8StTrcvQhor_P6RcxOK_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.100.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:22:a3:e8:3a:1e:6d:34:21:cb:59:4a:9d:8e:0c:a7:52:
         dc:7a:f3:f5:48:3f:9c:33:58:f3:99:e3:6d:86:d5:83:c6:35:
         96:05:5e:66:15:69:6c:b0:7d:4a:51:10:4e:64:e4:33:64:ff:
         9f:39:9c:a4:37:8e:1a:2c:d4:3c:36:30:34:aa:d6:8a:5b:b6:
         8d:43:33:87:b2:da:d6:a1:98:b0:4f:96:38:b6:49:2c:6f:fe:
         96:e0:51:82:e5:83:d4:95:5a:72:2a:58:74:fb:83:49:27:9b:
         17:f7:a9:18:29:67:7d:78:16:5e:1c:05:ba:27:35:1d:97:92:
         81:77:37:fc:96:9a:ae:97:e3:70:43:1a:f8:78:a6:92:e0:2a:
         41:04:4b:de:a2:ec:b7:48:1a:8b:c8:db:58:67:57:2b:73:48:
         dd:bd:3d:34:61:89:97:1b:c6:80:13:3a:4f:8b:bc:31:84:c5:
         c7:03:d8:95:0e:4f:23:67:2d:2a:6c:2c:2e:d6:a5:76:e0:3c:
         45:7a:14:68:b1:e7:7a:90:b2:28:b8:68:0e:62:58:cd:25:05:
         94:c0:4a:0d:2d:9b:8b:4f:f4:20:f4:8f:17:80:de:df:37:94:
         29:3c:ae:7c:b9:62:22:7b:a8:a1:75:e8:30:31:72:7c:3b:1a:
         5f:ee:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org