Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/VHPsr6NIcFDwK3YQy3uhM7gyftA.roa
File:                     VHPsr6NIcFDwK3YQy3uhM7gyftA.roa (raw, json)
Hash identifier:          dnnvRqrEAXarB5co0QEfAi3EKNwaPshmMwLs+efv2RM=
Subject key identifier:   54:73:EC:AF:A3:48:70:50:F0:2B:76:10:CB:7B:A1:33:B8:32:7E:D0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       9B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/VHPsr6NIcFDwK3YQy3uhM7gyftA.roa
Signing time:             Mon 01 Aug 2022 01:28:44 +0000
ROA not before:           Mon 01 Aug 2022 01:28:44 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        203.180.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug  1 01:28:44 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=5473ECAFA3487050F02B7610CB7BA133B8327ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:5e:c2:44:dc:e5:96:b9:a2:29:1b:ae:ee:
                    36:41:c0:16:5e:81:07:62:e3:80:bf:5a:6f:b1:4e:
                    0e:9f:3d:bd:d2:ee:7c:08:e5:f8:37:8f:37:ea:10:
                    0a:e1:d9:1b:62:ac:0b:fb:b8:ab:2b:e0:3b:47:e0:
                    9c:e8:90:01:00:95:36:2e:4b:94:b8:f0:1b:c6:3c:
                    d6:b0:bc:0f:f0:5b:a1:00:26:e3:33:cd:88:1a:9f:
                    be:8f:6a:8f:7c:13:f2:4c:d2:85:c2:df:5e:8c:57:
                    52:52:07:7a:7d:67:70:f4:04:9b:6e:ae:0d:4c:40:
                    bb:87:25:47:a8:da:15:ed:26:cf:18:1d:7d:3c:0e:
                    97:de:a7:23:49:e9:25:7c:f7:f4:57:41:5f:28:da:
                    5b:c0:e6:29:c5:fe:df:1d:53:f4:73:37:34:36:df:
                    22:de:ac:00:d6:11:0b:0f:84:76:20:e3:bc:9a:19:
                    5d:c9:ea:1f:fa:42:c5:2c:9f:cd:b3:45:ff:35:ed:
                    98:2f:40:82:c7:71:91:be:62:2a:2f:12:c4:e6:79:
                    ce:51:f9:a7:90:16:5a:6b:da:81:ea:14:c0:b7:f8:
                    8e:4d:c1:a2:a0:0a:16:6e:82:ee:75:16:66:e9:eb:
                    b2:ac:7f:db:70:a9:a6:3d:d7:52:b5:58:99:52:07:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:EC:AF:A3:48:70:50:F0:2B:76:10:CB:7B:A1:33:B8:32:7E:D0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/VHPsr6NIcFDwK3YQy3uhM7gyftA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:20:f1:41:9e:7b:d4:ec:cb:7f:ba:2b:95:8c:eb:5e:d3:
         76:07:1f:45:2c:6d:50:9e:4f:dd:18:da:ae:0d:9a:f7:b3:55:
         83:dc:64:34:61:0b:ce:51:67:c1:85:25:a2:39:24:52:a7:d8:
         15:66:fe:ea:c9:73:03:77:44:05:99:4b:b3:28:45:3b:1d:7c:
         d1:69:19:ee:bb:69:36:4a:50:9d:0e:5f:f1:f9:ae:67:a9:12:
         3d:f4:31:9f:4d:ba:50:13:e7:5b:82:9a:3c:4f:48:f4:a0:6f:
         e3:b3:a0:0d:16:e9:0a:31:08:94:79:5c:81:cf:bf:3a:3b:3a:
         6e:70:82:71:39:91:15:83:44:20:a6:f6:2c:74:f1:d6:bc:ae:
         f9:d4:91:3b:72:5b:52:2e:8f:00:07:63:0b:7b:d0:ac:bb:3f:
         8b:b8:c3:06:9e:2b:bf:96:82:20:36:9c:d4:18:68:e9:e4:53:
         a3:99:0b:f2:64:5c:cf:03:29:a7:a4:0a:60:e7:6c:b4:22:8a:
         8d:07:5b:7d:b7:ac:d9:47:41:3b:bb:30:d1:44:ad:75:4b:54:
         ce:5f:b1:da:04:00:8d:78:1e:bf:11:fa:d4:a3:1e:4a:99:f4:
         4e:f4:bd:12:94:eb:3f:20:1b:7f:cb:24:8f:62:cb:df:5a:2c:
         9a:99:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org