Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Xn-x4yzLYi80gIP8cmF6PcPcMmw.roa
File:                     Xn-x4yzLYi80gIP8cmF6PcPcMmw.roa (raw, json)
Hash identifier:          cPVBujoz1B+nZKYHyhKu05HGsTj1bHm+7dqKJIG/jMo=
Subject key identifier:   5E:7F:B1:E3:2C:CB:62:2F:34:80:83:FC:72:61:7A:3D:C3:DC:32:6C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       A8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Xn-x4yzLYi80gIP8cmF6PcPcMmw.roa
Signing time:             Sat 01 Oct 2022 01:29:15 +0000
ROA not before:           Sat 01 Oct 2022 01:29:15 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        202.141.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:15 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=5E7FB1E32CCB622F348083FC72617A3DC3DC326C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:14:bf:33:84:ef:de:88:3f:83:d3:a1:32:
                    d4:81:ca:71:a9:f3:20:db:fa:08:aa:8a:4d:9a:5d:
                    87:2d:dc:98:a7:f3:f7:9c:88:6c:bb:a1:69:27:bf:
                    81:12:db:b0:1a:3a:55:c0:50:e9:9b:57:1a:0c:7d:
                    e3:16:fc:eb:bc:66:7b:3b:d7:c8:06:8f:5c:9a:80:
                    ff:83:01:f6:cf:2a:75:e1:cf:66:cb:76:35:76:75:
                    c2:ff:87:34:e8:a8:35:ea:de:6d:2c:68:1b:f3:d1:
                    d6:56:5b:2d:50:70:28:39:ba:60:89:7a:6b:71:dc:
                    38:ba:c6:3e:77:c7:94:68:b2:80:03:06:20:2a:0a:
                    14:f8:3b:66:a6:bb:d4:eb:c9:b1:38:48:a8:29:9f:
                    3a:d4:28:1e:72:91:ea:f9:1c:6d:48:89:6f:7e:9a:
                    07:62:bb:4f:87:7d:7e:80:fe:c3:23:8b:52:54:ed:
                    70:bf:2e:61:14:a4:19:18:c0:29:eb:5b:bf:25:c4:
                    95:59:5b:82:f2:00:50:89:b3:1f:b6:bb:a6:ea:80:
                    74:a0:04:1e:b9:d4:a3:18:5b:a4:88:8f:cd:91:4f:
                    f0:09:ed:65:64:3b:2b:09:bf:e8:74:70:ae:59:ae:
                    61:8c:5d:c7:d6:93:42:64:de:c5:78:cb:a6:3d:05:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:B1:E3:2C:CB:62:2F:34:80:83:FC:72:61:7A:3D:C3:DC:32:6C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Xn-x4yzLYi80gIP8cmF6PcPcMmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.141.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:24:d5:00:46:e2:78:14:b3:23:cd:37:5a:47:cc:fd:4f:ae:
         ae:a1:2e:3f:2c:8c:30:26:60:3b:14:65:4a:a1:98:4f:1f:16:
         f0:25:38:41:ce:b0:f8:d3:0f:45:34:65:a0:01:60:b0:28:bb:
         a8:ba:40:67:b8:8a:28:03:e1:5e:30:ac:31:41:12:5b:20:f5:
         1a:52:9a:5f:21:04:f0:b8:6b:f6:78:b8:22:39:52:e0:ac:d8:
         0c:ce:b2:61:62:f5:92:b1:54:07:85:39:03:3e:2a:da:be:6c:
         e3:b5:67:d3:7d:41:4d:40:27:e3:54:82:df:a9:a3:73:29:c5:
         7c:22:c0:85:ce:3d:a9:90:dd:67:9a:42:1e:cb:33:27:cd:27:
         89:aa:0d:93:8a:ab:35:64:37:fb:d7:e5:3d:31:65:28:2d:3f:
         5a:d8:7a:a9:f5:d0:75:e0:31:8e:fa:b3:fc:85:c3:6f:a7:40:
         60:e9:1a:db:73:fc:44:58:fb:67:49:6f:ec:b8:90:79:0f:8a:
         d6:11:17:d7:87:8b:5b:42:bc:01:3e:83:64:7c:ff:db:3f:54:
         77:b6:bd:f0:4c:ca:70:ef:e8:4d:33:10:99:10:9a:d1:1a:dc:
         85:2d:d6:4c:49:77:be:78:93:28:a3:ba:69:bf:c4:36:45:5d:
         2f:ab:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org