Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/evOGGc7gtORGLLtVgexTUNV9zc4.roa
File:                     evOGGc7gtORGLLtVgexTUNV9zc4.roa (raw, json)
Hash identifier:          0ZEPV7eDHZ8ooWUvRE1m7uZE8+IML2XG0GAymNY/570=
Subject key identifier:   7A:F3:86:19:CE:E0:B4:E4:46:2C:BB:55:81:EC:53:50:D5:7D:CD:CE
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       47
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/evOGGc7gtORGLLtVgexTUNV9zc4.roa
Signing time:             Sat 01 Oct 2022 01:29:13 +0000
ROA not before:           Sat 01 Oct 2022 01:29:13 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        157.65.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Oct  1 01:29:13 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=7AF38619CEE0B4E4462CBB5581EC5350D57DCDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:49:85:7b:a6:59:97:d6:5b:c1:85:30:7c:
                    9f:34:e2:49:ee:67:c8:27:f2:43:c6:4c:5b:47:4b:
                    a9:d1:41:c0:8a:b1:00:b4:b7:e2:c0:13:a7:9a:a2:
                    21:06:95:73:eb:b4:9c:5c:41:66:ee:c2:6d:2b:57:
                    e6:5b:3d:b8:c4:5d:93:17:20:47:ae:47:f9:73:25:
                    ec:0f:37:0b:9a:25:6b:ba:6b:ec:0b:00:95:c0:9c:
                    f8:20:db:fd:73:35:dd:8b:2c:d6:45:f6:55:c3:6c:
                    75:b1:d8:77:80:73:6e:14:c3:a1:d5:9a:78:81:d3:
                    7f:1d:fc:6c:35:95:56:97:1c:0d:f8:b1:0f:0c:05:
                    9b:39:f1:d9:00:fe:7f:16:df:0f:75:fa:6c:39:01:
                    c3:88:00:15:d5:f6:b3:2b:74:bd:9b:94:f0:ce:0f:
                    12:ed:7b:cc:e6:cc:4b:6d:8c:aa:c2:6e:de:35:7f:
                    10:e7:1d:51:ae:33:09:e8:73:3a:7f:22:38:20:d7:
                    ac:25:5f:23:3e:e4:b2:05:92:b2:cb:a7:14:8c:9b:
                    ca:de:02:54:51:e8:b2:59:51:fd:da:51:af:bc:66:
                    6d:ea:04:52:c0:50:85:e6:95:4d:3c:84:23:8c:3b:
                    f1:2e:fb:09:1a:70:35:69:ac:85:11:c5:4d:46:03:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F3:86:19:CE:E0:B4:E4:46:2C:BB:55:81:EC:53:50:D5:7D:CD:CE
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/evOGGc7gtORGLLtVgexTUNV9zc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:03:65:cf:1b:70:38:f4:ef:c5:48:29:83:54:68:22:f5:8f:
         32:c8:29:86:3e:84:bf:2a:19:7a:30:9d:c9:74:65:67:a6:e9:
         9c:f5:dd:78:94:75:63:c7:c2:94:b0:67:68:d5:4f:60:d3:84:
         62:99:5d:12:db:47:42:ee:a3:58:c7:66:5d:56:06:08:b2:58:
         b2:92:bc:4d:ba:5f:a5:1b:f2:2a:e6:a9:05:9d:b7:ce:80:37:
         a8:18:f1:e3:db:b6:bd:6c:ad:3b:ce:c6:b4:f9:99:1d:12:1f:
         18:5f:c8:ef:c1:6e:92:76:c6:3b:5f:b4:43:c3:e3:3d:75:af:
         90:11:04:5a:e0:45:3f:af:94:5d:e3:af:4e:58:6f:09:2c:02:
         cd:a1:ae:eb:4e:46:8c:c3:1a:d9:f3:38:6b:ac:73:bb:df:f3:
         17:2a:b6:a5:30:d3:5a:0b:30:0b:b1:5d:bd:ca:48:5b:17:41:
         59:bc:a9:5a:cc:d1:76:bc:b5:ac:2d:c4:5a:7c:28:bc:fa:e7:
         54:d8:a9:bf:7a:02:25:39:d1:89:77:df:4d:3f:2b:c2:54:53:
         ba:f5:21:43:58:98:7a:89:9c:c2:d0:da:4e:02:b2:b2:3a:9c:
         17:0d:c5:8e:5f:66:75:47:86:5f:d6:37:a4:f0:af:06:2a:da:
         2b:93:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org