Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/RU9IH_Tmake8T17Hqq5PG0FKF1s.roa
File:                     RU9IH_Tmake8T17Hqq5PG0FKF1s.roa (raw, json)
Hash identifier:          YFc3Ca8dipSykiDTfwf9rKFuJyrQD39FK3ZIgFHRUCs=
Subject key identifier:   45:4F:48:1F:F4:E6:6A:47:BC:4F:5E:C7:AA:AE:4F:1B:41:4A:17:5B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       BE
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/RU9IH_Tmake8T17Hqq5PG0FKF1s.roa
Signing time:             Sat 01 Oct 2022 01:29:23 +0000
ROA not before:           Sat 01 Oct 2022 01:29:23 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        211.14.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:23 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=454F481FF4E66A47BC4F5EC7AAAE4F1B414A175B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:fc:4d:69:f6:2e:4b:7b:26:c2:99:8a:02:
                    14:93:fd:c0:1d:27:fb:ab:e6:81:28:95:4d:7a:22:
                    ff:5b:86:9f:40:db:87:f4:91:e7:9d:b8:94:db:27:
                    20:31:49:ed:67:28:50:5f:02:22:38:65:64:88:23:
                    3c:65:6c:48:75:91:e2:8c:ec:92:34:ba:63:a3:84:
                    2f:6e:bc:cf:2a:1c:fa:32:12:ae:98:12:9a:a7:fd:
                    95:5e:db:db:f4:96:f0:ef:1d:dc:eb:96:42:60:a2:
                    81:07:d4:04:24:2d:f1:76:2f:4e:75:91:b0:c0:52:
                    c9:c1:43:c7:7b:d1:0f:bb:ff:5e:d3:3c:f2:34:ac:
                    16:ca:dc:df:69:f4:c0:48:a0:2c:83:44:a6:44:b0:
                    3a:2a:99:50:08:91:b9:c6:78:30:1b:94:26:be:56:
                    20:de:87:37:07:4d:84:dd:4d:eb:d3:cc:bd:06:a7:
                    ba:67:f0:d4:9c:67:9a:26:f7:e6:a5:f9:cb:6e:d4:
                    f2:e5:f0:41:7f:25:2d:98:1f:b1:87:76:2e:bb:b1:
                    1f:cd:04:40:c9:30:45:8d:e7:55:bf:55:e6:7a:5b:
                    b7:e8:b9:cb:e1:6a:19:db:13:d8:2a:7a:89:1e:b9:
                    52:a7:d0:cb:2d:d3:58:46:3e:26:4f:2c:c9:cd:e6:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4F:48:1F:F4:E6:6A:47:BC:4F:5E:C7:AA:AE:4F:1B:41:4A:17:5B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/RU9IH_Tmake8T17Hqq5PG0FKF1s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:72:e1:fd:15:b0:9d:78:03:41:12:7b:5f:30:eb:9f:2e:f3:
         1d:8d:c3:88:3d:47:f5:c8:45:d2:1b:50:bc:11:db:5f:be:0b:
         79:a8:41:39:79:3e:b7:96:dc:ee:90:06:96:9d:76:2a:4f:87:
         6b:72:e2:99:2f:9b:c2:e5:d5:c7:5f:ad:45:c5:3b:2c:54:e2:
         bb:a5:25:0d:d4:7b:40:5f:91:65:28:c7:78:5b:e3:6b:55:93:
         c2:0c:26:89:c2:c9:81:4d:44:96:28:25:61:47:44:97:73:a3:
         bb:43:4f:48:27:6a:75:22:d9:50:7e:71:b4:9e:2e:20:08:72:
         47:c9:1b:01:39:8f:1d:0b:34:d8:62:bd:55:99:f9:bd:fc:9b:
         89:9b:75:2c:75:56:64:bd:23:d8:1e:9a:5b:7e:b7:9e:68:12:
         8c:bd:a0:8d:60:4f:f8:6a:7e:c5:0f:4a:cd:f5:ec:9e:9f:03:
         90:7c:4e:c4:c2:d0:d8:d5:7b:a7:b9:4b:8b:68:aa:17:3d:e3:
         6f:c9:65:6b:fa:58:1a:c2:35:83:52:39:d7:d3:a9:36:6b:6a:
         c6:3a:4d:66:87:88:1f:99:8f:96:9a:f8:97:1a:2e:48:b6:06:
         50:20:6a:99:7c:7a:a5:29:5b:15:ea:0f:0a:e0:38:9c:5a:bb:
         2e:2d:c3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org