Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/bCzIfg4ai5JyAGmc7IwmdcCY72g.roa
File:                     bCzIfg4ai5JyAGmc7IwmdcCY72g.roa (raw, json)
Hash identifier:          dTw7jyUKwHbTq8dnT9xH4PlY912RBKVbP5pioVB1HYY=
Subject key identifier:   6C:2C:C8:7E:0E:1A:8B:92:72:00:69:9C:EC:8C:26:75:C0:98:EF:68
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       5C
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/bCzIfg4ai5JyAGmc7IwmdcCY72g.roa
Signing time:             Tue 25 May 2021 02:31:59 +0000
ROA not before:           Tue 25 May 2021 02:31:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        202.62.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May 25 02:31:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6C2CC87E0E1A8B927200699CEC8C2675C098EF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:85:b0:ea:95:3f:42:f8:49:6c:f8:fd:51:
                    3f:74:2f:3e:3d:e2:35:9b:80:56:d3:f9:42:44:bb:
                    a2:3c:2a:9c:57:39:a6:75:62:8e:ca:8e:85:cf:03:
                    86:04:9c:fa:1a:09:68:0c:0f:bb:83:f8:85:9a:da:
                    28:8e:47:96:5a:93:ee:e2:f3:2d:07:ff:ec:77:fe:
                    a9:e2:86:a0:ee:cc:c1:26:97:0f:68:74:86:27:3c:
                    e7:75:58:39:90:33:b4:80:dc:8e:f6:6a:5f:b2:89:
                    3c:c0:be:c1:e5:33:fe:1a:73:bc:da:8a:6e:54:36:
                    22:bf:f3:10:4d:23:cb:8a:77:7c:56:fa:71:c4:32:
                    c1:45:05:e6:8c:19:7b:41:bd:6f:17:03:b1:96:be:
                    1b:2a:75:c1:93:24:69:08:f5:26:35:b4:ba:10:c3:
                    a4:b0:c1:31:ad:0f:41:7e:68:99:86:73:50:2e:25:
                    fc:a4:57:f1:4e:ab:7c:2e:dc:09:23:d3:00:88:ad:
                    06:96:89:6d:e7:74:0a:07:d4:b4:fe:0d:38:c3:72:
                    10:62:51:1c:9e:d2:45:dc:d1:60:42:43:8f:20:5e:
                    c0:58:62:c8:a0:6c:ba:bf:07:27:26:6e:d0:6d:96:
                    95:29:87:77:41:e1:27:f3:82:37:0f:5d:8c:e2:0c:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:C8:7E:0E:1A:8B:92:72:00:69:9C:EC:8C:26:75:C0:98:EF:68
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/bCzIfg4ai5JyAGmc7IwmdcCY72g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:56:e1:e3:38:94:7a:3e:9b:22:83:f6:98:90:4f:aa:3e:8d:
         57:b5:6f:96:8c:20:7b:7e:02:b9:3f:ee:0c:37:e7:2b:bf:aa:
         49:12:ad:b9:aa:c7:0a:fa:d1:66:07:ce:9d:07:4a:7b:82:a6:
         22:fd:57:02:cd:e3:11:fb:96:69:68:8f:95:d9:b4:3a:56:d7:
         e7:22:a9:52:c0:d2:da:05:fb:fd:1b:76:14:42:63:16:ce:c6:
         03:41:22:20:d4:b1:70:c6:53:92:ed:a0:6d:c4:5d:3a:05:fd:
         b7:44:7e:48:7b:8a:05:88:71:88:71:99:bc:f6:8e:e8:0e:a0:
         88:19:64:3f:ed:31:ed:e6:51:55:8d:25:8f:93:99:d0:52:ab:
         70:51:56:51:91:98:68:62:d9:59:a8:71:cb:b4:23:6c:fc:08:
         70:a5:e5:a7:5b:52:0f:51:12:34:f4:fa:5c:fd:75:c1:ad:cb:
         3f:1a:d7:7d:e8:04:2f:48:3b:c7:a7:c0:cb:c9:ba:97:cf:26:
         f1:62:8c:23:0c:e7:f7:39:43:84:ec:a2:a8:c1:f8:0b:53:04:
         f6:62:29:36:91:7a:a3:a3:01:ef:d9:88:44:78:a5:3a:5a:96:
         79:44:84:5f:ea:b5:6e:72:6a:bb:4a:eb:4a:91:e2:f6:ca:f5:
         9f:8a:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org