Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa
File:                     ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa (raw, json)
Hash identifier:          Mihj9vHrRGvs5+hukzoWF7V0SHk+vnkYvKriy+7g/ug=
Subject key identifier:   64:A8:9C:28:EB:FA:71:41:50:C8:AD:99:A9:3A:49:7C:3B:61:1B:2D
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       A2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa
Signing time:             Sat 01 Oct 2022 01:29:14 +0000
ROA not before:           Sat 01 Oct 2022 01:29:14 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        124.41.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:14 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=64A89C28EBFA714150C8AD99A93A497C3B611B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:74:51:b6:f2:cc:c1:66:75:d3:39:6d:6d:
                    98:94:85:b9:3e:28:1a:f5:98:95:a5:6c:07:d7:47:
                    34:e6:12:a8:32:f4:cf:4b:02:e8:d9:ef:99:7b:5e:
                    b2:3e:82:c6:4d:0f:65:b6:24:2f:fa:38:c6:a7:b7:
                    1c:ca:a3:8c:e8:0b:77:fc:ea:ed:57:ac:ee:ba:79:
                    df:fe:dc:79:59:03:88:0b:43:7e:cc:26:ca:d0:b5:
                    12:3d:d1:59:8c:8b:81:25:e2:3e:3e:32:38:4c:bd:
                    2b:74:d5:41:91:34:4e:68:5f:2c:f6:a5:1b:72:fa:
                    09:2a:ec:44:fe:b6:39:c3:4d:51:56:21:f7:a6:06:
                    2c:95:d4:f8:9a:07:10:01:28:a2:e7:77:94:48:e6:
                    c3:80:59:e9:fa:47:2f:9b:49:2f:fb:61:5a:8d:b1:
                    84:9b:b2:ac:bf:ff:8f:7f:c8:1e:81:03:58:f1:0d:
                    59:14:b0:d6:04:91:6a:06:b3:f8:24:cf:97:63:53:
                    4a:02:17:22:22:ce:fa:43:2a:e8:d6:e1:2c:79:1c:
                    de:db:dc:73:65:e1:9f:93:98:c7:8b:66:8c:c7:95:
                    bb:9c:16:0a:6c:b9:4f:38:36:48:28:81:11:2d:35:
                    a1:89:5d:4d:bd:4a:5c:0d:51:21:eb:d9:35:92:92:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A8:9C:28:EB:FA:71:41:50:C8:AD:99:A9:3A:49:7C:3B:61:1B:2D
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.41.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:d2:93:fc:dc:91:ae:d1:f8:d4:2d:99:98:31:97:54:b7:
         2a:ea:80:05:f1:4f:11:06:fa:5b:60:4b:4c:be:3b:6c:7c:ec:
         8c:5b:97:b0:8a:d3:c1:a2:d0:aa:cb:02:2f:a8:8a:95:26:bd:
         6a:be:e1:86:73:0f:6e:6b:08:95:c7:d0:58:d6:f5:ed:f3:91:
         f2:8a:81:a1:d3:12:f4:6f:a2:95:22:09:89:93:1f:56:7c:8e:
         3c:b2:48:fd:c4:51:a6:f0:d5:df:1b:99:b9:5a:f3:1a:aa:a8:
         c4:42:ed:cd:a8:14:79:02:7e:71:ec:e2:99:c2:18:65:a9:54:
         15:4f:ff:14:21:7d:1b:02:1b:69:f4:f6:0a:28:f3:c3:4e:a4:
         95:04:4f:52:0a:44:4f:c1:b9:c4:ad:9b:d0:86:a6:d1:a2:6a:
         41:2a:60:d3:bb:d2:fe:50:79:56:d6:7f:48:35:24:31:85:d2:
         d1:5f:7a:bb:3c:92:d5:e2:85:d6:b0:84:9d:8b:c8:2c:21:21:
         5d:c7:6f:9a:57:f4:35:5d:f4:fd:4c:f4:9b:13:31:2c:0a:aa:
         10:67:28:2a:1a:27:b4:54:96:a6:b0:b6:f0:83:a6:92:de:57:
         e0:0f:d7:9a:98:36:fc:42:c3:68:2c:9b:cf:88:4b:b2:ec:d8:
         54:07:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org