Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gqZtUm25FDpAGr1Rb1obvoklLkY.roa
File:                     gqZtUm25FDpAGr1Rb1obvoklLkY.roa (raw, json)
Hash identifier:          hKmCD69A+mBYe/LQJrAaYU/M439kt+baThOhZ2GSJlE=
Subject key identifier:   82:A6:6D:52:6D:B9:14:3A:40:1A:BD:51:6F:5A:1B:BE:89:25:2E:46
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       48
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gqZtUm25FDpAGr1Rb1obvoklLkY.roa
Signing time:             Sat 01 Oct 2022 01:29:13 +0000
ROA not before:           Sat 01 Oct 2022 01:29:13 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        172.122.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Oct  1 01:29:13 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=82A66D526DB9143A401ABD516F5A1BBE89252E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:85:2d:a5:c8:19:ca:96:9a:88:fd:de:91:
                    24:c4:75:44:12:11:90:a0:ff:38:60:82:ac:26:e7:
                    9c:49:2f:fb:1e:4d:43:45:94:ad:63:94:b9:8d:aa:
                    61:11:c3:90:78:df:2a:02:0b:71:70:f9:3e:2e:88:
                    69:7e:d5:ca:8f:c9:16:44:cb:b2:ef:49:13:cc:e5:
                    7b:50:80:55:fa:87:ba:2c:9f:46:f2:e2:5f:a2:50:
                    19:0f:d2:81:d7:c9:27:7b:75:1d:30:96:41:4e:55:
                    4e:84:54:62:8f:1e:e9:2a:0d:a6:7c:9c:c8:b8:da:
                    54:50:3c:60:4d:b8:91:ef:8f:9b:ca:36:2a:9e:be:
                    db:65:03:fd:6a:b9:77:b5:75:37:16:5a:0a:46:d9:
                    84:95:ae:8b:e9:5b:fc:78:f8:fb:61:54:de:59:23:
                    29:da:45:dd:08:56:b0:80:9c:c8:66:35:69:86:e4:
                    e7:cf:48:3e:cc:b9:ca:50:7f:94:60:e5:ad:f8:97:
                    2e:ff:61:81:41:bb:bf:02:4e:8b:56:5b:46:71:3a:
                    69:8b:e1:61:95:b6:15:c8:b6:85:33:6b:60:24:6e:
                    97:e1:a2:1e:a5:fa:6e:49:1d:b5:bf:b3:a5:9b:70:
                    02:52:03:09:2e:97:0b:70:89:35:64:1d:db:02:2b:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:6D:52:6D:B9:14:3A:40:1A:BD:51:6F:5A:1B:BE:89:25:2E:46
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gqZtUm25FDpAGr1Rb1obvoklLkY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         d9:35:ed:41:8e:9d:7e:f2:a4:ba:3e:9a:39:2a:e2:6e:60:96:
         e5:92:33:c6:ff:d8:f0:a6:65:c8:8d:67:a5:a8:a1:34:3e:1e:
         f7:78:d6:08:79:4d:c4:22:f0:29:b7:5a:1d:90:fe:79:d3:9b:
         9d:c0:59:ad:a5:ac:50:cd:f7:9e:cb:2f:6f:92:a4:b8:bb:2f:
         b9:d6:56:52:05:99:bc:da:cc:eb:62:02:fb:7c:5f:15:df:16:
         8d:2d:29:4c:c3:44:2e:c2:f8:7c:e8:09:f8:a5:e5:b9:d9:90:
         9b:38:0c:53:9d:0f:68:c7:ae:74:8e:24:c6:48:fe:b8:44:f0:
         c6:17:ed:b4:6c:7c:04:9c:dc:b3:db:57:76:6e:35:81:3a:52:
         e7:27:1c:4c:aa:53:ba:6d:34:a8:b8:3e:14:05:97:dd:f4:56:
         fa:0a:4d:e4:e0:a3:37:62:c0:ab:5b:8f:d1:1a:ea:d0:7c:a0:
         06:91:b7:45:2a:a7:ba:52:82:82:2b:3a:5f:41:77:4a:fd:79:
         8e:62:65:0b:82:f0:a3:b9:60:08:59:1f:b7:b8:a7:bc:9e:ec:
         f3:29:24:6b:5b:e2:a5:0f:84:71:ba:b5:b5:f4:31:fc:12:1c:
         6c:a8:28:a7:1b:8f:51:ab:75:0a:d3:ee:c4:60:70:97:37:5c:
         99:8c:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org