Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/nFi1Qewz8KY-TbVN0zpOWm3ygPU.roa
File:                     nFi1Qewz8KY-TbVN0zpOWm3ygPU.roa (raw, json)
Hash identifier:          gklsbXdAXpU+D8cmLg6DXAgTo8p/xWNRafrkxxJpu1w=
Subject key identifier:   9C:58:B5:41:EC:33:F0:A6:3E:4D:B5:4D:D3:3A:4E:5A:6D:F2:80:F5
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       DF
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nFi1Qewz8KY-TbVN0zpOWm3ygPU.roa
Signing time:             Thu 01 Dec 2022 01:28:39 +0000
ROA not before:           Thu 01 Dec 2022 01:28:39 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Dec  1 01:28:39 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=9C58B541EC33F0A63E4DB54DD33A4E5A6DF280F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:f4:b0:6f:ce:a8:83:20:56:a6:7f:40:5c:
                    39:ed:34:d4:6f:2c:8a:93:38:a6:9f:21:00:25:24:
                    0a:eb:a7:9f:f4:f2:f3:fe:b4:ad:bd:bd:99:1b:82:
                    98:8a:0f:cb:3c:74:60:b3:61:04:f2:95:74:2e:89:
                    b9:37:08:cb:33:14:6e:96:98:57:aa:b6:43:b9:e6:
                    64:65:35:d7:9c:39:78:29:20:53:5a:e9:14:76:8b:
                    b0:23:47:58:cf:76:93:76:8b:e4:2b:24:72:5e:13:
                    f9:f6:74:95:0a:a2:4b:30:17:4e:99:15:d1:4a:ce:
                    47:b5:a3:d0:67:17:7b:1e:1f:be:be:d7:c9:ba:5c:
                    bd:57:ea:2a:6a:12:05:35:02:bc:62:06:17:23:c4:
                    18:05:d2:49:5b:bd:9d:e1:7e:9e:93:57:65:91:81:
                    92:32:74:ab:48:c4:e2:66:16:8f:fc:91:27:8d:d1:
                    e5:4f:b2:6c:8c:20:80:14:8c:c7:02:97:b5:62:80:
                    c7:e4:89:c4:65:dc:30:c1:2b:cb:e0:91:82:39:e5:
                    69:86:39:e2:82:ed:33:6c:68:79:75:67:b2:1b:56:
                    46:88:ce:b6:c5:e7:6f:45:05:bd:6c:bc:34:dd:8d:
                    df:ef:e4:3c:8d:bc:cd:c5:53:e7:91:22:3e:21:6d:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:58:B5:41:EC:33:F0:A6:3E:4D:B5:4D:D3:3A:4E:5A:6D:F2:80:F5
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nFi1Qewz8KY-TbVN0zpOWm3ygPU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:9b:84:c8:df:7c:da:1a:30:ec:13:e1:65:63:82:f0:89:
         83:76:a9:ea:59:c4:96:a5:ea:42:a3:72:2d:f5:ce:db:e1:d8:
         8f:05:46:76:68:66:fa:e7:2d:5d:84:aa:fc:77:d5:af:8c:d5:
         c3:38:b7:3e:11:bb:83:2e:0e:a3:ea:86:27:f0:ca:c5:e7:57:
         64:80:ea:cb:94:0a:00:40:e6:4e:eb:c8:07:cb:29:e3:ae:ac:
         80:36:aa:4e:c5:38:17:40:98:02:5a:21:94:0b:ea:62:20:13:
         f0:d6:39:6c:c3:ec:ac:39:ff:94:53:44:f7:24:24:cd:2e:06:
         a4:c3:f6:8a:68:87:be:3c:f7:39:fe:44:af:c2:b2:8e:50:20:
         88:4f:e3:bf:18:9a:45:8a:bd:34:91:1a:14:87:1f:0a:70:dc:
         86:f1:ad:6b:55:02:87:5f:6e:56:3c:d3:c3:19:6b:67:18:e8:
         d8:ef:55:f7:e6:6c:0b:f9:57:ff:bb:9e:99:da:a8:b1:8b:4e:
         e5:ab:ff:6c:8c:83:f8:75:5d:b7:81:04:2a:f6:29:f8:12:30:
         fc:8b:fa:c4:09:a5:40:c3:56:5d:fc:09:32:00:0d:db:c7:d5:
         26:37:14:f3:86:b0:42:5f:45:fe:79:cf:03:67:84:57:4f:b4:
         9b:a2:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org