Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/yOH9IHt7Ofc4sv_tJse0AZ5rGaM.roa
File:                     yOH9IHt7Ofc4sv_tJse0AZ5rGaM.roa (raw, json)
Hash identifier:          E4H12abX7r3i57XLG+9C0Rr91BXUXP3vCLXVB/vmu84=
Subject key identifier:   C8:E1:FD:20:7B:7B:39:F7:38:B2:FF:ED:26:C7:B4:01:9E:6B:19:A3
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       BF
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/yOH9IHt7Ofc4sv_tJse0AZ5rGaM.roa
Signing time:             Sat 01 Oct 2022 01:29:23 +0000
ROA not before:           Sat 01 Oct 2022 01:29:23 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        202.221.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:29:23 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=C8E1FD207B7B39F738B2FFED26C7B4019E6B19A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:f2:96:49:ad:90:f1:8e:80:32:fd:66:12:
                    47:a7:28:f1:0e:fe:76:13:20:02:88:7b:15:9d:60:
                    88:f1:04:39:88:f5:71:eb:41:96:30:02:05:b5:7b:
                    25:1d:8c:1d:53:b1:48:2b:f5:fa:de:94:37:f7:68:
                    74:1e:27:51:fc:f9:31:c7:cf:ab:27:0a:73:f3:aa:
                    9b:52:3e:86:e9:40:9c:02:88:76:06:75:24:d4:95:
                    f3:4d:4e:02:4f:3a:e0:f4:40:4f:37:7a:81:00:a4:
                    46:ef:2b:a1:b1:7e:92:6b:97:4a:30:82:e3:23:38:
                    39:1f:b7:52:6a:bf:fe:4a:f2:90:b1:c6:a9:f6:cd:
                    81:92:3f:4f:26:44:82:e7:7b:b8:9e:4e:98:39:5a:
                    c9:6d:f6:92:10:37:72:89:40:8b:8f:53:d2:d5:29:
                    a1:ef:b5:9b:a0:ad:8a:81:54:be:10:83:29:e7:c7:
                    93:8c:b1:c3:b3:41:73:b5:9f:02:17:7a:c6:28:e8:
                    28:3b:99:38:eb:df:91:ba:ce:14:d2:81:ee:a4:43:
                    1d:65:9f:ba:da:7f:71:8d:e8:34:22:68:55:ae:09:
                    54:a2:66:cd:44:eb:86:74:14:53:c7:25:81:32:14:
                    7e:8d:01:e7:f2:2b:8a:1a:eb:9b:39:a6:61:74:d0:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E1:FD:20:7B:7B:39:F7:38:B2:FF:ED:26:C7:B4:01:9E:6B:19:A3
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/yOH9IHt7Ofc4sv_tJse0AZ5rGaM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:17:4e:9b:a3:7c:4d:56:8e:83:14:af:61:5f:56:92:ab:
         11:a6:de:3a:ff:56:09:82:78:5b:85:3f:a7:3f:ce:ff:83:97:
         52:68:6e:51:05:01:da:8f:af:82:bd:c9:34:27:00:1c:e4:21:
         2f:39:44:38:f4:7c:76:1d:b3:73:5a:11:d6:81:ba:19:18:d9:
         df:5a:5c:cd:91:60:1f:06:e2:b8:02:93:aa:a2:76:2a:e5:82:
         c2:4f:2e:f9:02:0c:de:39:b7:56:05:74:15:09:eb:9e:d1:10:
         4c:d4:ab:1e:c7:65:8f:e3:6a:c2:c9:11:6d:0b:56:38:81:37:
         eb:0b:18:37:bf:a7:25:6d:47:a8:d4:64:ef:5b:d6:48:59:99:
         b7:36:9f:19:33:f8:e3:1d:62:af:04:c6:2c:26:fd:d8:9e:27:
         a8:91:73:db:50:44:ba:62:1b:b9:84:50:20:f3:c4:13:97:50:
         5b:63:ca:5d:c8:0a:45:51:45:42:07:3f:ef:c3:6b:a7:70:48:
         2c:8e:c8:02:b2:c6:06:12:23:eb:9a:8e:8b:da:43:74:09:b9:
         3d:4f:72:ea:43:5d:d9:0a:fb:1f:80:39:d2:32:75:07:df:60:
         2b:4a:56:d3:88:0b:2b:01:43:21:65:5c:12:bf:ec:eb:60:c2:
         0f:43:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org