Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/zJihS7KSZ0o4dJov0PL9Bb2eIKo.roa
File:                     zJihS7KSZ0o4dJov0PL9Bb2eIKo.roa (raw, json)
Hash identifier:          ksE0j70N61cqN31ZBQ3lO9nfaoxLgCyJHPaRiuIG/Qk=
Subject key identifier:   CC:98:A1:4B:B2:92:67:4A:38:74:9A:2F:D0:F2:FD:05:BD:9E:20:AA
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       05
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/zJihS7KSZ0o4dJov0PL9Bb2eIKo.roa
Signing time:             Sun 02 Oct 2022 04:26:51 +0000
ROA not before:           Sun 02 Oct 2022 04:26:51 +0000
ROA not after:            Mon 02 Oct 2023 04:19:44 +0000
asID:                     18274
IP address blocks:        210.236.112.0/20 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Oct  2 04:26:51 2022 GMT
            Not After : Oct  2 04:19:44 2023 GMT
        Subject: CN=CC98A14BB292674A38749A2FD0F2FD05BD9E20AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:ee:84:c7:42:e1:d7:72:73:1f:c0:00:aa:
                    df:74:3b:e7:e9:e0:70:51:12:91:2b:4b:d3:50:e4:
                    c1:48:fe:40:3a:e0:d2:f8:75:06:c4:41:6b:ce:87:
                    df:81:a6:6c:0b:01:32:76:56:ea:86:c0:e2:9e:15:
                    40:78:07:f5:d5:ce:1c:49:b5:c2:1e:76:d4:a4:4a:
                    81:57:94:be:e9:aa:e0:4a:ab:1d:02:8a:69:e8:f1:
                    25:ea:db:a0:51:7f:03:e4:af:61:aa:a6:f1:8b:36:
                    5e:7e:0c:ef:f7:2c:35:40:7a:e6:66:ed:26:b1:91:
                    5c:3e:55:4a:47:6c:03:b3:4b:a5:f0:15:da:78:a8:
                    69:10:87:28:97:12:4f:c2:85:1f:58:9a:d6:69:a4:
                    f5:7e:48:b1:ee:4b:29:4f:77:44:7c:e7:02:b6:6f:
                    ff:3c:17:1e:bc:bb:f5:09:83:16:f2:d9:bc:a9:bc:
                    d2:e1:8b:f7:3c:34:26:18:e7:30:42:10:2d:cf:5d:
                    7e:88:05:3c:54:46:34:d8:39:74:73:35:66:01:d8:
                    b7:56:8d:cb:e5:ef:96:f6:42:f1:5c:4c:05:89:52:
                    42:3a:30:9f:22:6b:6d:fb:ec:c6:d4:16:53:0a:e6:
                    08:82:46:61:26:58:ef:e9:31:99:c2:ea:78:c1:e4:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:A1:4B:B2:92:67:4A:38:74:9A:2F:D0:F2:FD:05:BD:9E:20:AA
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/zJihS7KSZ0o4dJov0PL9Bb2eIKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:85:2c:e9:cd:6c:eb:6e:47:30:18:08:86:0f:8a:9a:d7:7d:
         97:cf:7a:8a:43:ad:63:53:80:17:99:20:01:29:77:b6:d3:d0:
         f4:85:be:3d:c9:b3:88:06:7e:84:d6:be:d6:15:c3:bf:71:85:
         7b:b0:f1:15:91:26:11:e2:f6:78:98:b5:7b:08:12:75:96:61:
         80:9a:f0:a2:5c:0a:06:ae:8c:3e:02:b4:71:a9:ca:b2:b9:73:
         44:4e:49:58:6c:36:9e:86:38:74:ce:c0:17:01:4c:6e:8e:57:
         21:99:54:99:f0:e0:2f:a2:be:1c:b6:2c:06:9b:d9:a5:ac:86:
         57:05:ae:fe:b2:ea:c3:80:8b:82:05:a4:5b:21:fc:dc:a6:79:
         4a:55:fa:5e:d6:ca:20:44:93:7a:60:92:25:e3:63:7b:41:8a:
         a9:b0:19:49:1b:59:59:69:10:37:a8:8c:69:84:92:10:e3:fc:
         8b:d6:eb:30:1d:9f:cb:1d:a6:ce:da:f7:6e:79:86:7b:a3:67:
         d3:62:15:be:85:82:b7:0d:47:0e:d9:5c:f5:82:e7:01:5e:31:
         e3:6a:79:9a:bd:ca:e4:33:6c:7a:08:cc:b6:c9:fb:98:b4:7c:
         74:04:35:01:f7:ad:12:52:48:be:fd:d6:7f:d8:e5:ac:27:e2:
         6c:a7:2e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org