Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa
File:                     YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa (raw, json)
Hash identifier:          4N8R7SKiS4FwVnnJ4j8EFxM07+9eafGVdfqIi/nY0wk=
Subject key identifier:   60:F7:93:A7:5B:CE:E8:B9:1D:BA:3E:BA:CD:09:69:6D:66:50:4D:0E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       5D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa
Signing time:             Mon 01 Nov 2021 01:28:32 +0000
ROA not before:           Mon 01 Nov 2021 01:28:32 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        220.208.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:32 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=60F793A75BCEE8B91DBA3EBACD09696D66504D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:f9:50:b1:0d:e0:0e:72:1a:82:2e:6b:7c:
                    38:fe:f1:08:b9:71:8b:5b:75:6f:c7:56:1d:57:36:
                    3b:ef:d2:c2:ac:7d:e1:a4:6b:db:af:cf:16:8c:a7:
                    5c:1c:aa:17:6e:73:33:53:4d:90:c9:f6:14:d3:2a:
                    16:0e:30:97:08:69:47:f4:8d:25:c9:83:9d:e5:a6:
                    54:a5:60:a1:2b:99:25:74:3c:4f:95:c0:0d:ed:92:
                    cf:1b:58:09:40:09:0b:b4:40:09:08:31:bf:cd:ea:
                    a2:8a:bf:72:3d:23:ad:a2:d0:0e:9f:29:4e:0e:f1:
                    48:b5:a9:4a:b9:bf:7b:cb:b7:1c:f4:b6:ca:72:4e:
                    8e:29:e7:77:fc:1e:4e:ff:60:b6:81:f8:49:78:36:
                    f8:98:e1:7c:e9:43:3a:09:4e:b3:bc:94:28:63:5a:
                    b6:d2:f2:0a:da:b8:84:88:db:c7:06:d6:13:d1:7a:
                    c6:e5:78:a7:ce:16:fa:71:7d:6d:ea:0f:c4:b5:23:
                    6c:36:c0:dd:2a:85:42:02:b9:db:be:71:55:67:a9:
                    22:52:c8:4e:4d:43:52:f7:ba:1f:16:28:d7:80:b3:
                    97:ee:67:67:59:96:b5:26:97:e5:d5:d2:88:17:df:
                    a5:a8:1f:f9:5c:a5:90:5a:f9:e4:0e:af:bc:85:4a:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F7:93:A7:5B:CE:E8:B9:1D:BA:3E:BA:CD:09:69:6D:66:50:4D:0E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.208.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:d4:d2:68:22:49:7c:51:b4:69:e9:fc:d4:00:83:51:af:
         9e:b7:ea:b1:a9:be:c6:0f:e7:7f:5d:e7:98:62:96:0f:d8:d8:
         66:3d:6d:72:75:2c:d9:ab:14:fe:8a:96:52:2f:62:77:8c:7e:
         98:4d:e7:77:83:a4:33:07:44:95:65:78:bf:90:a9:f7:4b:01:
         5c:2b:c3:63:9b:e8:da:99:23:5d:a5:2f:40:c9:e4:51:fd:c5:
         dd:fa:ae:bd:91:d0:ce:d4:2c:84:13:4c:c7:a8:65:9d:22:8c:
         44:59:76:e8:f8:9d:50:70:f6:d6:bd:12:a3:39:ca:76:fb:06:
         95:81:8c:61:62:45:f8:9d:38:d1:58:21:77:3e:c3:ef:82:28:
         a8:c7:8a:dc:49:12:0c:46:24:3c:15:3c:98:1a:53:39:40:ec:
         42:c9:a8:04:55:f9:c7:12:3a:b7:d7:a2:29:ea:a5:23:c7:30:
         ae:2e:16:73:c1:01:23:29:de:e7:c8:4c:59:c4:ff:53:f3:a1:
         8b:fd:a8:51:95:92:30:2d:ee:64:dc:1b:b2:cb:ff:66:76:03:
         b5:00:02:9b:84:62:e8:e4:3b:74:bc:c6:6e:64:b9:15:b9:b1:
         df:3b:a3:03:d2:ef:06:01:ba:46:60:eb:1f:95:73:61:28:22:
         ad:e3:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org