Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/mYxt7wJuJ55eUkzvEhPBjq6-XBo.roa
File:                     mYxt7wJuJ55eUkzvEhPBjq6-XBo.roa (raw, json)
Hash identifier:          PCv8UYqHvbgupSQjF402o9LE2C6kV2DE+DzxJx5vlsk=
Subject key identifier:   99:8C:6D:EF:02:6E:27:9E:5E:52:4C:EF:12:13:C1:8E:AE:BE:5C:1A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       B6
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mYxt7wJuJ55eUkzvEhPBjq6-XBo.roa
Signing time:             Sat 01 Oct 2022 01:29:19 +0000
ROA not before:           Sat 01 Oct 2022 01:29:19 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        124.147.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:19 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=998C6DEF026E279E5E524CEF1213C18EAEBE5C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:2c:3b:c2:1a:47:b1:a9:f5:11:dd:cf:fe:
                    0f:e0:2e:9c:df:f8:a2:1e:21:10:82:bb:f4:ad:75:
                    9c:f7:bb:a4:d6:08:27:57:58:73:3f:e4:35:25:89:
                    ad:e2:c1:80:5d:e0:01:61:c3:eb:3c:d1:3e:f3:eb:
                    ea:a9:ab:66:2e:08:7b:74:56:18:a4:58:c9:a9:5f:
                    11:63:01:8d:c9:3d:4d:69:f5:c8:3f:58:b1:ee:44:
                    9a:1c:aa:66:b3:61:3c:ce:e4:20:3c:1b:0f:47:3e:
                    1b:06:8e:d0:42:9f:de:0d:9a:22:d9:89:a9:a7:da:
                    d7:ae:85:2c:eb:00:20:0b:9e:bb:ab:52:d7:9b:74:
                    6f:b3:17:30:93:d9:9c:62:75:83:5a:b8:22:58:c5:
                    ac:d6:7b:0d:57:b5:b3:81:06:e2:7e:15:f0:b9:04:
                    fb:dd:3f:7a:d7:24:d3:93:a7:62:2e:b3:eb:89:4d:
                    f8:f1:42:d2:92:1c:4f:85:47:ad:47:13:1b:cc:5c:
                    65:60:26:94:0a:e0:83:1e:18:43:26:36:0a:6f:2f:
                    9a:08:be:89:24:66:10:d8:45:45:aa:57:fd:dc:90:
                    73:51:ad:8b:f8:3d:50:49:f4:b4:7d:8b:ea:3d:e9:
                    3f:2b:a0:a5:f5:19:44:10:e7:bd:2a:66:4f:f1:16:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8C:6D:EF:02:6E:27:9E:5E:52:4C:EF:12:13:C1:8E:AE:BE:5C:1A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mYxt7wJuJ55eUkzvEhPBjq6-XBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:75:cc:cc:3d:5a:5b:12:26:1a:27:98:5f:a9:c5:f2:c7:af:
         11:9a:a3:a4:2c:47:11:50:54:e2:39:a1:23:d1:56:ea:8d:e6:
         fd:9f:60:bc:53:b1:ef:31:24:9c:3d:6d:66:56:7e:87:06:2d:
         fc:46:1c:09:1b:8a:3c:fe:95:d1:5a:d8:1c:2d:c4:42:4f:86:
         0a:a2:26:5e:02:87:28:62:28:1a:1e:bf:b2:45:5a:ef:c7:6d:
         64:e0:6a:65:b2:e8:b6:13:1d:fd:38:2d:ba:9b:48:3f:b9:26:
         85:6e:65:89:fb:be:3e:da:b0:8e:7e:6d:07:6b:ac:8b:68:52:
         b0:d7:68:e6:68:34:0a:a5:c5:88:60:37:ff:b1:03:3f:fc:de:
         7d:7b:f0:2b:e3:3d:4e:ee:b6:43:e3:09:e2:ae:56:ec:3a:0a:
         8f:e4:0a:94:f1:22:00:fc:ca:d1:24:f8:49:4d:4d:e5:fe:52:
         df:df:3b:15:41:0e:2c:d6:b9:20:81:09:27:47:a1:d5:6a:16:
         71:95:ba:20:92:83:13:d7:31:fe:1a:37:07:a5:6a:45:20:a9:
         08:de:41:a6:2c:9e:50:23:5b:49:cd:e1:0e:12:43:d2:cc:f1:
         55:66:09:bc:fa:33:1c:40:1f:c2:f1:24:52:7b:42:ea:99:1c:
         0d:54:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org