Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/w6nZJ-sHvBUFlUQsZ1USSxrww94.roa
File:                     w6nZJ-sHvBUFlUQsZ1USSxrww94.roa (raw, json)
Hash identifier:          OPmzcYqsqJLVG7J3/UojERNHaR8fmZds4w289Y6Babc=
Subject key identifier:   C3:A9:D9:27:EB:07:BC:15:05:95:44:2C:67:55:12:4B:1A:F0:C3:DE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       DE
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/w6nZJ-sHvBUFlUQsZ1USSxrww94.roa
Signing time:             Thu 01 Dec 2022 01:28:39 +0000
ROA not before:           Thu 01 Dec 2022 01:28:39 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Dec  1 01:28:39 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=C3A9D927EB07BC150595442C6755124B1AF0C3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:75:fb:e9:68:50:ad:7f:a2:99:4a:2d:74:
                    f4:c6:ff:e3:f1:1c:51:33:15:c6:01:9b:7c:60:b6:
                    c3:d6:2a:6d:61:fd:1b:db:2b:11:94:43:de:42:f8:
                    3a:94:d8:4b:3f:20:7f:68:d4:5f:20:fe:a0:11:b8:
                    e2:68:be:66:41:42:01:2f:96:b9:86:ae:5f:e3:2d:
                    99:63:8d:5c:71:a0:53:8e:0b:14:7e:2c:ec:40:2f:
                    8d:1f:13:5e:af:f2:fb:45:96:4a:31:53:ad:e5:37:
                    e6:d8:ac:67:8d:5d:35:42:14:0f:61:47:4a:c5:7e:
                    94:0b:4a:b1:27:a5:9b:16:67:64:06:6d:22:48:d5:
                    e8:98:79:17:39:16:c8:da:f7:35:48:b1:47:a6:76:
                    3d:b9:55:ad:c9:66:dd:c4:15:23:40:e5:0c:17:1a:
                    13:74:1f:d3:2c:cb:33:ab:a9:52:b3:82:aa:61:b3:
                    3f:cf:5c:10:2a:af:b7:5f:8c:72:0b:ab:e0:15:7f:
                    ff:be:2a:d4:d5:56:5c:f7:68:b1:97:96:b7:82:14:
                    dd:97:8f:00:e0:5b:40:e0:63:b4:65:b5:a0:53:df:
                    75:01:f7:e3:3a:35:8c:d9:21:6e:02:fa:cf:61:6b:
                    cd:dc:ba:f6:07:dc:57:30:0f:7e:d1:2d:cf:9d:67:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A9:D9:27:EB:07:BC:15:05:95:44:2C:67:55:12:4B:1A:F0:C3:DE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/w6nZJ-sHvBUFlUQsZ1USSxrww94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:cc:cc:0f:68:18:c0:e1:d6:8d:f0:56:3f:6b:28:46:95:
         a8:30:7f:7e:dd:49:27:7b:32:6e:31:2b:e3:06:9c:d8:67:12:
         81:d4:20:d4:ef:8c:1b:2d:7a:71:81:13:95:a6:a2:a4:08:be:
         81:92:ce:c8:7b:bd:49:00:2a:1c:1a:52:88:3e:1a:a5:cb:56:
         d5:41:28:7b:77:82:10:d5:2f:2b:dd:99:2e:c4:21:35:36:df:
         bc:78:80:b7:f6:c9:ae:32:45:34:50:a4:fc:7e:23:64:37:d3:
         e8:eb:fa:cb:1c:36:4b:e3:f1:63:d9:fe:d3:45:d6:c7:8d:75:
         a0:ff:2a:61:63:6e:52:c5:92:c2:74:ee:12:dc:ad:0e:ff:39:
         c2:aa:6e:d4:f5:9d:4b:89:ac:97:a5:d1:26:22:67:3c:88:ff:
         8d:b6:ad:0f:4b:c4:1e:c1:e6:a2:21:31:9e:85:ae:1d:c8:70:
         11:88:11:62:d2:14:55:df:88:e2:d0:d3:a3:de:a7:1f:b1:9f:
         70:6b:24:4d:ec:79:af:c7:69:20:fb:90:eb:e5:87:ec:51:d2:
         05:20:d7:31:1d:73:01:fd:71:19:98:b6:32:80:d4:b7:18:f5:
         bc:06:2d:f0:8a:35:c1:50:1f:ce:dd:20:06:84:7e:55:4f:b8:
         ef:b4:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org