Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/cGwEfVp8VAt4s9y80jlserMk0gU.roa
File:                     cGwEfVp8VAt4s9y80jlserMk0gU.roa (raw, json)
Hash identifier:          tUhq6xmTFAY998uE+0b1i6LtZnuwkOvHcx+BiisDRuU=
Subject key identifier:   70:6C:04:7D:5A:7C:54:0B:78:B3:DC:BC:D2:39:6C:7A:B3:24:D2:05
Certificate issuer:       /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial:       10
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/cGwEfVp8VAt4s9y80jlserMk0gU.roa
Signing time:             Tue 23 Mar 2021 07:44:54 +0000
ROA not before:           Tue 23 Mar 2021 07:44:54 +0000
ROA not after:            Tue 15 Mar 2022 01:30:01 +0000
asID:                     2515
IP address blocks:        202.12.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
        Validity
            Not Before: Mar 23 07:44:54 2021 GMT
            Not After : Mar 15 01:30:01 2022 GMT
        Subject: CN=706C047D5A7C540B78B3DCBCD2396C7AB324D205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:0a:ee:a4:0e:e9:13:93:a3:cb:42:17:c2:
                    93:3d:92:c1:68:57:00:cd:bc:8d:38:ff:cd:ae:68:
                    76:83:15:50:0b:e6:5d:b2:63:44:f9:4a:66:de:aa:
                    1e:09:a9:34:93:17:fd:20:3e:07:38:2f:3c:b1:f6:
                    db:88:a5:f2:1d:9c:ef:3a:cd:bb:01:7e:24:34:74:
                    4e:15:98:50:93:b8:f6:42:e2:08:fd:d2:01:7c:f8:
                    3a:07:65:6b:32:5d:ee:e6:36:70:34:80:c6:f9:71:
                    36:4b:de:a6:07:ae:c1:ad:62:4a:4f:f0:c4:53:ac:
                    f4:65:d6:ad:c9:6a:79:f3:58:05:ca:ce:2b:35:ec:
                    ed:f4:70:45:6b:8d:2a:2a:f2:e0:d2:3f:c8:6a:18:
                    56:7b:0e:b9:4e:d8:a1:f5:7c:c3:16:1d:d9:e4:21:
                    0f:f3:bc:d4:8a:db:6e:61:1e:e3:66:91:98:10:c2:
                    02:56:6a:04:a3:39:94:b5:b6:85:e6:7f:e2:01:3c:
                    0f:a5:45:db:c8:f2:ad:9c:82:61:e2:c6:9f:a1:25:
                    1e:1f:e5:a0:78:d8:a9:cb:68:de:68:33:73:21:3a:
                    d8:b3:ee:6c:4d:1c:08:3d:55:14:c1:0f:43:b7:1f:
                    52:45:53:6f:df:95:04:5b:b9:06:a5:8e:54:5d:86:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:04:7D:5A:7C:54:0B:78:B3:DC:BC:D2:39:6C:7A:B3:24:D2:05
            X509v3 Authority Key Identifier:
                keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/cGwEfVp8VAt4s9y80jlserMk0gU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:e3:15:77:91:ac:ba:d6:92:07:9e:79:4a:49:63:49:3d:
         1c:71:ce:31:3b:fa:0e:13:15:79:02:ac:2a:2f:39:05:16:b4:
         5a:2f:68:68:87:39:87:42:31:41:64:25:3d:17:54:91:5c:d2:
         5e:24:77:5f:7e:e2:37:6a:58:e3:5e:d4:d3:d2:f3:97:91:b1:
         d5:63:02:e1:17:ed:90:ce:c0:c5:9b:86:ee:a5:dc:8b:f2:4b:
         a3:13:f0:04:dc:f3:84:2b:ba:01:30:e6:69:f6:8f:cf:9b:eb:
         cf:dd:02:d2:26:31:0b:82:91:4d:da:8c:4c:f9:6b:98:03:96:
         8d:90:73:db:60:ee:e7:ad:05:15:a5:68:b7:87:0b:00:75:f4:
         2d:cd:63:8c:22:68:a5:33:56:6f:54:3a:04:a3:44:ab:f3:e1:
         64:86:fc:ba:6a:2e:3f:b9:bc:b6:09:ec:b1:5e:11:ba:5a:4d:
         3b:f8:4b:59:f8:ee:65:2f:95:3e:f9:9f:09:49:04:31:66:7e:
         92:07:81:7d:b3:47:3a:58:1b:ac:56:02:ef:a5:5c:4a:51:e8:
         0e:00:db:d3:78:5b:80:4d:92:7f:fe:a1:f4:44:c4:54:bc:30:
         7e:ab:da:54:db:c2:ec:4a:b4:75:08:ee:0a:fd:c3:26:04:e9:
         74:5e:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org